WEBDIENSTE/NLnetLabs-krill
1
0
Fork 0
mirror of https://github.com/NLnetLabs/krill.git synced 2026-09-22 17:34:56 +02:00
Code Issues Packages Projects Releases Wiki Activity
1,724 Commits 30 Branches 93 Tags
4b4e00df412c2bce9317b95edefec9b47482ecfc
Commit Graph
249 Commits
Author SHA1 Message Date
Tim Bruijnzeels b03511b503 Ensure that all published objects are on the manifest (fix #853) 2022-07-25 14:33:25 +02:00
Tim BruijnzeelsandGitHub bbb2267587 Migrate RPKI objects in history (#841) 
Ensures that Krill is more robust with regards to stricter validation of RPKI object types in future.
 2022-07-18 15:51:26 +02:00
Tim BruijnzeelsandGitHub d68c07b59c Sign BGP router certificates (#827) 2022-07-07 13:20:00 +02:00
Tim BruijnzeelsandGitHub 7d271417f1 Support configuration for benchmark testing (#825) 2022-05-27 09:11:42 +02:00
Tim BruijnzeelsGitHubXimon Eighteen
 		330da84de5 Migrate 8181 8183 6942 support to rpki rs (#820) 
* Use types which were ported into rpki-rs.
* Update dependency to rpki-rs 0.14.3-dev.
* IGNORE old_events test for now, see issue: #819
* Quick fix for compilation using --all-features. See issue #821

Co-authored-by: Ximon Eighteen <3304436+ximon18@users.noreply.github.com>
 2022-05-12 15:24:50 +02:00
Tim Bruijnzeels 12c4a1fc9a Merge release 0.9.5 into dev 2022-04-13 16:58:52 +02:00
Tim Bruijnzeels 5973b7431c Split big function test into smaller tests. 2022-04-05 16:01:25 +02:00
Tim Bruijnzeels 4e1df9294a Merge 0.9.5-rc8 (main) into dev 2022-03-30 14:05:02 +02:00
Tim BruijnzeelsGitHubXimon Eighteen
 		ffb7d6ecdd V0.9.5 rc7 prep (#803) 
* Use PriorityQueue with time based Priority.
* Improve session sweep logging (make it less noisy)
* Update config file with new refresh settings - cap jitter at 50% of refresh
* Let api schedule repo sync tasks rather than execute it synchronously.
* Update version and readme for RC7
* Use the highest priority in case a task was already in the queue.
* Use consistent capitalization of Krill in config files.
* Update readme regarding ca-parent sync changes
* Update to Lagosta with updated dependencies
* Update developer documentation with new scheduler behaviour.
* Add hidden api end-point for scheduling suspend all - used in testing.

Co-authored-by: Ximon Eighteen <3304436+ximon18@users.noreply.github.com>
 2022-03-28 16:01:51 +02:00
Ximon EighteenandGitHub b0be88bc10 HSM support for keys (#21) (#733) 
Adds support for PKCS#11 v2.20 and/or KMIP 1.2 compatible HSMs.
Includes backward compatible extensions to the krill.conf syntax.
Includes HSM related developer docs.
Excludes HSM specific API (REST, krillc, Prometheus) or UI extensions.
 2022-01-14 14:19:24 +01:00
Tim Bruijnzeels 9965a72070 Support ASPAs with an explicit empty provider as set. (#685) 2021-11-05 15:59:17 +01:00
Tim Bruijnzeels 3b94ff2fa6 Proof of concept ASPA support (#685) 2021-11-05 15:59:17 +01:00
Tim BruijnzeelsandGitHub 30772b6f36 Suspend krill 092 higher only (#670) (PR #672) 2021-09-23 15:57:05 +02:00
Tim Bruijnzeels 055b817881 Cargo clippy - rust 1.54 2021-08-30 13:13:20 +02:00
Tim Bruijnzeels 8bbd5c2e78 Remove calls to refresh_all in test 
This is done in the expectation check now.
 2021-08-30 10:47:28 +02:00
Tim Bruijnzeels 48c6557bd3 Unsuspend child CA when it sends a valid RFC 6492 request. (#623) 
(also make tests more deterministic wrt ca refresh)
 2021-08-30 10:47:28 +02:00
Tim Bruijnzeels 319f00081a Add support (and API) for suspending/unsuspending child CAs. (#623) 2021-08-30 10:47:28 +02:00
Ximon Eighteen 55a944e255 Temporarily disable the RIPE NCC Validator 3 test until I can work out why it is trying to rsync from an HTTP URI... 2021-08-17 14:52:23 +02:00
Ximon Eighteen 62cadf8e8a E2E test minor logging improvements: Fix an empty "->" log line in the E2E test and add the API call being made to each of the messages logged during initial Krill setup. 2021-08-17 12:32:49 +02:00
Tim BruijnzeelsandGitHub 765b131184 Create ROAs if needed, when keys are activated (#601) 2021-08-04 12:06:47 +02:00
Ximon Eighteen 45977aa136 Remove more intercepts and waits that might be blocking the test from progressing. 2021-08-03 10:00:19 +02:00
Ximon Eighteen fa95116bc5 Comment out problematic waiting for now... 2021-08-03 10:00:16 +02:00
Ximon Eighteen a2667c2db3 Ignore all unhandled promise rejections 
Newer Cypress fails tests in more situations than Cypress 6.8.0, but we’re not ready to investigate the root cause yet so just retain the previous behaviour for now.
 2021-08-03 09:57:47 +02:00
Ximon Eighteen 8a708c9c72 FIX: Test Rust function name should match the JS test being executed. 2021-08-01 21:48:24 +02:00
Ximon Eighteen fc5683cefa FIX: Logout intercept should be POST not GET. 2021-08-01 21:48:18 +02:00
Ximon Eighteen ffd6c09460 FIX: syntax error in Cypress intercept() call. 2021-08-01 20:33:16 +02:00
Ximon Eighteen 5c3a463e1b Update intercept calls per Cypress 7 migration guide. 2021-08-01 20:14:45 +02:00
Ximon Eighteen ba0bb12cc7 Upgrade Cypress from 8.0.0 to 8.1.0. 
See if any of the fixes help with the hanging UI tests.
 2021-08-01 20:14:36 +02:00
Ximon Eighteen ad70e0e05a Attempt to work around the ESOCKETTIMEDOUT test failure in GH Actions. This change solves the issue in an AWS t2.small VM. 2021-07-30 00:38:39 +02:00
Ximon Eighteen cc3419074b FIX: Upgraded Cypress uses an err.message field, not an err.description field. Check the right field to catch the uncaught exception 'Redirected when going from "/onboarding" to "/interstitial" via a navigation guard' caused during the 'can logout' test in the multi_user_config_file test. 2021-07-29 20:43:55 +02:00
Ximon Eighteen fb33669664 Prevent Cypress failing the can logout test due to an uncaught "Redirected when going from "/onboarding" to "/interstitial" via a navigation guard." exception in Lagosta. 2021-07-29 17:20:30 +02:00
Ximon EighteenandGitHub f504d00a84 FIX: Don't assume err.description is non-null as since the ugprade from Cypress 6.8.0 to 8.0.0 sometimes it isn't. 2021-07-29 17:01:51 +02:00
Ximon EighteenandGitHub 4d5c6c5147 Bump Cypress to latest (6,8.0 -> 8.0.0) as advised in https://github.com/cypress-io/cypress/issues/7062 "cy.visit() failed trying to load ESOCKETTIMEDOUT". 2021-07-29 16:21:23 +02:00
Ximon EighteenandGitHub 5f913be94a Fix incorrect conditional Cypress test logic. 2021-07-29 15:02:49 +02:00
Ximon Eighteen cc94c6a658 Silence spurious unused code warnings concerning the OpenID Connect mock. 2021-07-29 11:40:11 +02:00
Tim BruijnzeelsGitHubXimon Eighteen
 		3ee53f0059 Migrate CA repository using key rollover (#480) 
As it turns out - this was broken earlier becuase of a failure to republish
objects during a key roll during 0.9.0 development - fixed in issue #509
prior to the 0.9.0 release.

Co-authored-by: Ximon Eighteen <3304436+ximon18@users.noreply.github.com>
 2021-07-13 15:51:07 +02:00
Ximon Eighteen 842264141f Merge branch 'dev' of github.com:NLnetLabs/krill into dev 2021-07-12 17:03:55 +02:00
Ximon Eighteen e024457a50 Experiment with trying not to wait for a request to the server that will never happen (partial attempt at fixing #603). 2021-07-12 17:03:47 +02:00
Tim BruijnzeelsandGitHub 8be620b606 Update dependencies: rpki-rs, bytes, tokio, hyper, reqwest (#584) 
* Update dependencies: rpki-rs, and therefore bytes, tokio, hyper, reqwest
* Rust 1.51 clippy
* Update minimal rust version to 1.47
    socket2 requires improved const fn support.
    exponential compile-time and type_length_limit and async in 1.46.

See PR #586
 2021-07-02 10:20:24 +02:00
Tim Bruijnzeels 9458adc821 Cargo fmt before release 0.9.0-rc3 (#528) 2021-05-20 15:56:27 +02:00
Tim Bruijnzeels ff1c7f74f6 Remove krillpubc - use 'pubserver' subcommand in krillc instead. (#527) 2021-05-20 12:51:52 +02:00
Tim Bruijnzeels e7cadc6ea2 Use a little more patience when testing (think GH CI hardware) 2021-05-11 16:22:18 +02:00
Tim BruijnzeelsandGitHub 5a29ffaa88 Re-issue ROAs and CA certificates on key activation. (#509) 2021-05-06 09:49:03 +02:00
Tim BruijnzeelsandGitHub 8ae546039a Remove resource classes (and withdraw objects) when a parent is removed (#508) 2021-05-04 14:58:28 +02:00
Tim BruijnzeelsandGitHub 17b928b7cc Use more descriptive KrillIoError where feasible (#495) 2021-05-04 13:53:03 +02:00
Ximon EighteenandGitHub 13b6f7d1f3 Security tweaks (#382) (#484) 
* Encrypt session state using ChaCha20-Poly1305 instead of AES-GCM.
* Replace config file users login use of insecure unsalted SHA2 password hashing with secure scrypt salted password hashing.
* Log the start of the request before determining the actor.
* Allow sufficient time for password hashing delays during login with config file user based tests..
* Synced with Lagosta commit b49f23de.
 2021-04-20 00:47:22 +02:00
Tim BruijnzeelsandGitHub b43a6815cf Inconsistent and unacceptable token references (#433) (#483) 2021-04-19 22:23:02 +02:00
Ximon EighteenandGitHub 675d902ec0 Typo correction in e2e test comment: dependendencies -> dependencies 2021-04-19 10:39:57 +02:00
Tim Bruijnzeels 38167616c7 Ignore failing migration test, see issues #480 and #481. Closes #445. 2021-04-15 10:43:13 +02:00
Tim Bruijnzeels 6e55e025ad Separate migrate repository test. 2021-04-14 16:24:35 +02:00