Commit Graph
899 Commits
Author SHA1 Message Date
Tim Bruijnzeels 6c3e2d7d5b Allow plain HTTP for --server in krillc (#913) 2022-09-05 12:37:38 +02:00
Tim Bruijnzeels 3e674855a0 Allow explicit disabling of https #913 2022-09-01 11:32:45 +02:00
Tim Bruijnzeels ce6c7a4977 Use normal default config file now that multi-user is a default feature. 2022-08-30 14:49:55 +02:00
Ximon EighteenandTim Bruijnzeels af39af8e75 Add SSLKEYLOGFILE support #615 2022-08-29 16:51:39 +02:00
Tim Bruijnzeels 9eb53feac2 Clarify that code is unreachable not just not implemented. 2022-08-29 16:51:39 +02:00
Tim Bruijnzeels d7e79dd4f1 clippy fixes 2022-08-29 16:51:39 +02:00
Tim Bruijnzeels c3ba637369 Rename field to support pre-0.10.0 API #895 2022-08-29 16:51:39 +02:00
Tim Bruijnzeels 57fab3a198 Support pre-0.10.0 API to upload repository response #895 2022-08-29 16:51:39 +02:00
Tim Bruijnzeels 266cf2e06d API to add parent should not change #898 2022-08-29 16:51:39 +02:00
Ximon EighteenandTim Bruijnzeels ff861d69ee Improve KMIP lacking support log messages (#889) (#890)
Focus on the lacking support, rather than seeming to ignore the server when in fact trying it anyway.
2022-08-29 16:51:39 +02:00
Ximon EighteenandTim Bruijnzeels c9f5827718 Guard sections of code only used by the "hsm" feature to prevent warnings when doing cargo build --no-default-features. (#893) 2022-08-29 16:51:39 +02:00
Ximon EighteenandTim Bruijnzeels a0a34c0353 Remove unused field warnings. (#892) 2022-08-29 16:51:39 +02:00
Tim Bruijnzeels 9443792dc1 API to upload repository response should not change #895 2022-08-29 16:51:39 +02:00
Tim Bruijnzeels 409bb9c086 Keep parent ID cert PEM in history #870 2022-08-29 16:51:39 +02:00
Tim Bruijnzeels e7bc158f4d Trim uploaded parent and repo responses #873 2022-08-29 16:51:39 +02:00
Tim Bruijnzeels d34a7f2fdb Show RFC8183 XML in CLI (#868) 2022-08-29 16:51:39 +02:00
Ximon EighteenandTim Bruijnzeels 5addcfc399 Handle more PKCS#11 transient failure scenarios. (#761) 2022-08-29 16:51:39 +02:00
Tim Bruijnzeels 1e6bd25521 Don't panic when timing_publish_next_jitter_hours == 0 (#859) 2022-07-27 07:25:11 -04:00
Tim Bruijnzeels 6ff84db232 Make data dir lock opt-in (#856) 2022-07-25 10:35:28 -04:00
Tim Bruijnzeels a1f0398f64 Clippy.. 2022-07-25 14:33:25 +02:00
Tim Bruijnzeels b03511b503 Ensure that all published objects are on the manifest (fix #853) 2022-07-25 14:33:25 +02:00
Tim Bruijnzeels 2af9cd21b3 Only upgrade the Publication Server if its there. 2022-07-21 23:46:54 +02:00
Tim Bruijnzeels c5014b1928 Always check for existing keys when hsm feature is enabled. 2022-07-21 10:08:15 +02:00
Tim Bruijnzeels e19276da2d Properly track migrated commands and events in info file #851 2022-07-20 17:07:57 +02:00
Tim Bruijnzeels 017e90e384 Improve error about upgrade lock (#850) 2022-07-20 14:54:00 +02:00
Tim Bruijnzeels 9d263029d0 Fix clippy warnings with hsm feature enabled. 2022-07-19 16:03:59 +02:00
Tim Bruijnzeels 46d09f795a Depend on rpki-rs release 0.15.0 2022-07-19 10:07:51 +02:00
Tim BruijnzeelsandGitHub 1cc69885db Use more descriptive errors from rpki-rs #845 2022-07-18 19:24:43 +02:00
Tim BruijnzeelsandGitHub 77facbb320 Remove dependency on bcder (#822) 2022-07-18 17:19:21 +02:00
Tim Bruijnzeels 55549e1bab Record revocation date #788 2022-07-18 16:19:55 +02:00
Tim BruijnzeelsandGitHub bbb2267587 Migrate RPKI objects in history (#841)
Ensures that Krill is more robust with regards to stricter validation of RPKI object types in future.
2022-07-18 15:51:26 +02:00
Tim BruijnzeelsandGitHub d68c07b59c Sign BGP router certificates (#827) 2022-07-07 13:20:00 +02:00
Tim BruijnzeelsandGitHub 4605bf93da Prevent that two krill instances modify the same data (#829) 2022-05-31 16:45:56 +02:00
Tim BruijnzeelsandGitHub 7d271417f1 Support configuration for benchmark testing (#825) 2022-05-27 09:11:42 +02:00
330da84de5 Migrate 8181 8183 6942 support to rpki rs (#820)
* Use types which were ported into rpki-rs.
* Update dependency to rpki-rs 0.14.3-dev.
* IGNORE old_events test for now, see issue: #819
* Quick fix for compilation using --all-features. See issue #821

Co-authored-by: Ximon Eighteen <3304436+ximon18@users.noreply.github.com>
2022-05-12 15:24:50 +02:00
Tim Bruijnzeels 12c4a1fc9a Merge release 0.9.5 into dev 2022-04-13 16:58:52 +02:00
Tim BruijnzeelsandGitHub 760db30910 Do not resync CAs with repo on startup if there are too many #818 2022-04-13 11:15:32 +02:00
388b931645 V0.9.5 rc9 prep (#812)
* Improve efficiency of connection status tracking #811
* Update version and readme for 0.9.5-rc9

Co-authored-by: Ximon Eighteen <3304436+ximon18@users.noreply.github.com>
2022-04-06 15:11:55 +02:00
Tim Bruijnzeels 5973b7431c Split big function test into smaller tests. 2022-04-05 16:01:25 +02:00
Tim Bruijnzeels 4e1df9294a Merge 0.9.5-rc8 (main) into dev 2022-03-30 14:05:02 +02:00
Tim Bruijnzeels 4b71c35d4f Accept missing tag in RFC8181 Error Response #809 2022-03-30 09:11:22 +02:00
ffb7d6ecdd V0.9.5 rc7 prep (#803)
* Use PriorityQueue with time based Priority.
* Improve session sweep logging (make it less noisy)
* Update config file with new refresh settings - cap jitter at 50% of refresh
* Let api schedule repo sync tasks rather than execute it synchronously.
* Update version and readme for RC7
* Use the highest priority in case a task was already in the queue.
* Use consistent capitalization of Krill in config files.
* Update readme regarding ca-parent sync changes
* Update to Lagosta with updated dependencies
* Update developer documentation with new scheduler behaviour.
* Add hidden api end-point for scheduling suspend all - used in testing.

Co-authored-by: Ximon Eighteen <3304436+ximon18@users.noreply.github.com>
2022-03-28 16:01:51 +02:00
Tim Bruijnzeels 92ea597f01 Make CA sync strategy configurable #799 2022-03-06 23:28:16 +01:00
Tim BruijnzeelsandGitHub cd00b4ebc9 V0.9.5 rc5 prep
* Do not sign/validate RFC6492 messages to/from local parent #797
* Add per CA locks to StatusStore. #795
* Update version and readme for 0.9.5-rc5
2022-03-06 21:29:48 +01:00
Tim Bruijnzeels ab29f830ef Remove cache and locking for CA statuses #795 2022-03-05 23:30:24 +01:00
Tim Bruijnzeels d74faed0ab Make RRDP session reset manual option #793 2022-03-05 17:19:13 +01:00
Tim Bruijnzeels a99daaa5a4 ROA / ASPA renewal should try *all* CAs #792 2022-03-05 17:19:13 +01:00
Tim Bruijnzeels d082bbd558 Improve debug logging. 2022-03-05 17:19:13 +01:00
Tim Bruijnzeels 4fd57a5004 Connect to local parent directly #791 2022-03-05 17:19:13 +01:00
Tim Bruijnzeels b0b9a08900 Prep 0.9.5-rc2 - only move dirs if data was migrated!! 2022-02-24 10:25:12 +01:00