1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
|
# $Id$
#
# Copyright (C) 2009-2010 Internet Systems Consortium ("ISC")
#
# Permission to use, copy, modify, and distribute this software for any
# purpose with or without fee is hereby granted, provided that the above
# copyright notice and this permission notice appear in all copies.
#
# THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH
# REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
# AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT,
# INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
# LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE
# OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
# PERFORMANCE OF THIS SOFTWARE.
#
# Portions copyright (C) 2007--2008 American Registry for Internet Numbers ("ARIN")
#
# Permission to use, copy, modify, and distribute this software for any
# purpose with or without fee is hereby granted, provided that the above
# copyright notice and this permission notice appear in all copies.
#
# THE SOFTWARE IS PROVIDED "AS IS" AND ARIN DISCLAIMS ALL WARRANTIES WITH
# REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
# AND FITNESS. IN NO EVENT SHALL ARIN BE LIABLE FOR ANY SPECIAL, DIRECT,
# INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
# LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE
# OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
# PERFORMANCE OF THIS SOFTWARE.
"""
Debugging tool for chasing a particular weird ROA problem. Dumps
contents of roa objects from SQL. Dog ugly, do not read output
without a welding helmet.
Usage: python debug-roas.py [ { -c | --config } configfile ]
[ { -h | --help } ]
Default configuration file is rpkid.conf, override with --config option.
"""
import os
import time
import getopt
import sys
import re
import rpki.sql
import rpki.config
import rpki.log
import rpki.resource_set
import rpki.rpki_engine
import rpki.left_right
class main(object):
_afi_map = dict((cls.resource_set_type.afi, cls)
for cls in (rpki.resource_set.roa_prefix_set_ipv4,
rpki.resource_set.roa_prefix_set_ipv6))
def __init__(self):
os.environ["TZ"] = "UTC"
time.tzset()
rpki.log.use_syslog = False
rpki.log.init("debug-roas")
cfg_file = "rpkid.conf"
verbose = 0
opts, argv = getopt.getopt(sys.argv[1:], "c:hv?", ["config=", "help", "verbose"])
for o, a in opts:
if o in ("-h", "--help", "-?"):
print __doc__
sys.exit(0)
elif o in ("-c", "--config"):
cfg_file = a
elif o in ("-v", "--verbose"):
verbose += 1
if argv:
raise rpki.exceptions.CommandParseFailure, "Unexpected arguments %s" % argv
self.sql = rpki.sql.session(rpki.config.parser(cfg_file, "rpkid"))
for s in rpki.left_right.self_elt.sql_fetch_all(self):
print "Examining <self self_handle=%r/>" % s.self_handle
for r in s.roas():
v4 = r.ipv4.to_resource_set() if r.ipv4 is not None else rpki.resource_set.resource_set_ipv4()
v6 = r.ipv6.to_resource_set() if r.ipv6 is not None else rpki.resource_set.resource_set_ipv6()
print " Found ROA %r %s" % (r, "<%s %s>" % (r.asn, ("%s,%s" % (v4, v6)).strip(",")))
if r.roa is None:
print " No CMS object"
if verbose:
print
elif verbose:
if verbose > 1:
print " %s" % r.roa.get_POW().pprint()
print " asID %s" % (r.roa.extract().asID.get(),)
for f in r.roa.get_content().ipAddrBlocks:
t = self._afi_map[f.addressFamily.get()].resource_set_type.range_type.datum_type
for a in f.addresses:
p = a.address.get()
l = len(p)
p = t(rpki.resource_set._bs2long(p, t.bits, 0))
m = a.maxLength.get()
if m is None or m == l:
print " %s/%s" % (p, l)
else:
print " %s/%s-%s" % (p, l, m)
print
if r.cert is None:
print " No EE certificate"
if verbose:
print
elif verbose > 1:
print " EE %s" % r.cert.get_POW().pprint()
main()
|
