Commit Graph
877 Commits
Author SHA1 Message Date
Tim Bruijnzeels c5014b1928 Always check for existing keys when hsm feature is enabled. 2022-07-21 10:08:15 +02:00
Tim Bruijnzeels e19276da2d Properly track migrated commands and events in info file #851 2022-07-20 17:07:57 +02:00
Tim Bruijnzeels 017e90e384 Improve error about upgrade lock (#850) 2022-07-20 14:54:00 +02:00
Tim Bruijnzeels 9d263029d0 Fix clippy warnings with hsm feature enabled. 2022-07-19 16:03:59 +02:00
Tim Bruijnzeels 46d09f795a Depend on rpki-rs release 0.15.0 2022-07-19 10:07:51 +02:00
Tim BruijnzeelsandGitHub 1cc69885db Use more descriptive errors from rpki-rs #845 2022-07-18 19:24:43 +02:00
Tim BruijnzeelsandGitHub 77facbb320 Remove dependency on bcder (#822) 2022-07-18 17:19:21 +02:00
Tim Bruijnzeels 55549e1bab Record revocation date #788 2022-07-18 16:19:55 +02:00
Tim BruijnzeelsandGitHub bbb2267587 Migrate RPKI objects in history (#841)
Ensures that Krill is more robust with regards to stricter validation of RPKI object types in future.
2022-07-18 15:51:26 +02:00
Tim BruijnzeelsandGitHub d68c07b59c Sign BGP router certificates (#827) 2022-07-07 13:20:00 +02:00
Tim BruijnzeelsandGitHub 4605bf93da Prevent that two krill instances modify the same data (#829) 2022-05-31 16:45:56 +02:00
Tim BruijnzeelsandGitHub 7d271417f1 Support configuration for benchmark testing (#825) 2022-05-27 09:11:42 +02:00
330da84de5 Migrate 8181 8183 6942 support to rpki rs (#820)
* Use types which were ported into rpki-rs.
* Update dependency to rpki-rs 0.14.3-dev.
* IGNORE old_events test for now, see issue: #819
* Quick fix for compilation using --all-features. See issue #821

Co-authored-by: Ximon Eighteen <3304436+ximon18@users.noreply.github.com>
2022-05-12 15:24:50 +02:00
Tim Bruijnzeels 12c4a1fc9a Merge release 0.9.5 into dev 2022-04-13 16:58:52 +02:00
Tim BruijnzeelsandGitHub 760db30910 Do not resync CAs with repo on startup if there are too many #818 2022-04-13 11:15:32 +02:00
388b931645 V0.9.5 rc9 prep (#812)
* Improve efficiency of connection status tracking #811
* Update version and readme for 0.9.5-rc9

Co-authored-by: Ximon Eighteen <3304436+ximon18@users.noreply.github.com>
2022-04-06 15:11:55 +02:00
Tim Bruijnzeels 5973b7431c Split big function test into smaller tests. 2022-04-05 16:01:25 +02:00
Tim Bruijnzeels 4e1df9294a Merge 0.9.5-rc8 (main) into dev 2022-03-30 14:05:02 +02:00
Tim Bruijnzeels 4b71c35d4f Accept missing tag in RFC8181 Error Response #809 2022-03-30 09:11:22 +02:00
ffb7d6ecdd V0.9.5 rc7 prep (#803)
* Use PriorityQueue with time based Priority.
* Improve session sweep logging (make it less noisy)
* Update config file with new refresh settings - cap jitter at 50% of refresh
* Let api schedule repo sync tasks rather than execute it synchronously.
* Update version and readme for RC7
* Use the highest priority in case a task was already in the queue.
* Use consistent capitalization of Krill in config files.
* Update readme regarding ca-parent sync changes
* Update to Lagosta with updated dependencies
* Update developer documentation with new scheduler behaviour.
* Add hidden api end-point for scheduling suspend all - used in testing.

Co-authored-by: Ximon Eighteen <3304436+ximon18@users.noreply.github.com>
2022-03-28 16:01:51 +02:00
Tim Bruijnzeels 92ea597f01 Make CA sync strategy configurable #799 2022-03-06 23:28:16 +01:00
Tim BruijnzeelsandGitHub cd00b4ebc9 V0.9.5 rc5 prep
* Do not sign/validate RFC6492 messages to/from local parent #797
* Add per CA locks to StatusStore. #795
* Update version and readme for 0.9.5-rc5
2022-03-06 21:29:48 +01:00
Tim Bruijnzeels ab29f830ef Remove cache and locking for CA statuses #795 2022-03-05 23:30:24 +01:00
Tim Bruijnzeels d74faed0ab Make RRDP session reset manual option #793 2022-03-05 17:19:13 +01:00
Tim Bruijnzeels a99daaa5a4 ROA / ASPA renewal should try *all* CAs #792 2022-03-05 17:19:13 +01:00
Tim Bruijnzeels d082bbd558 Improve debug logging. 2022-03-05 17:19:13 +01:00
Tim Bruijnzeels 4fd57a5004 Connect to local parent directly #791 2022-03-05 17:19:13 +01:00
Tim Bruijnzeels b0b9a08900 Prep 0.9.5-rc2 - only move dirs if data was migrated!! 2022-02-24 10:25:12 +01:00
Tim Bruijnzeels 1f46abf8f4 Simplify event replay logic - do not rely on info file for reply without limit. 2022-02-23 14:17:18 +01:00
Tim Bruijnzeels 2d5a87e216 Don't apply a limit when getting latest aggregate. 2022-02-23 14:17:18 +01:00
Tim Bruijnzeels b047f5cfa3 Get repo for migration but don't 'warm' the cache as this also triggers cleanups.. 2022-02-23 14:17:18 +01:00
Tim Bruijnzeels ee81d03db7 Improve migration preparation resilience. 2022-02-23 14:17:18 +01:00
Tim Bruijnzeels c2fa9b9c0c Allow any loglevel (i.e. also debug) for krillup - just use what the config file has. 2022-02-23 14:17:18 +01:00
Tim Bruijnzeels 18f91887f5 Report krillup error more clearly. 2022-02-23 14:17:18 +01:00
Tim Bruijnzeels 35239257ff Quick hack for the CRL revocation time. Proper fixed planned for 0.10.0. (#788) 2022-02-23 10:08:08 +01:00
Tim Bruijnzeels f9bc193ce2 Prep 0.9.5 rc1 (#786)
* Update version for release 0.9.5-rc1
* Update readme for 0.9.5-rc1

Small fixes:
* Depend on released version of rpki lib.
* Remove warning about diskspace - we will document elsewhere.
* Remove setting the version on migration finalize, it's set at the start.
2022-02-18 18:02:55 +01:00
Tim Bruijnzeels d1d7c3c238 typo 2022-02-18 18:02:55 +01:00
Tim Bruijnzeels a078c407ca Rename and document file functions for readability. 2022-02-18 18:02:55 +01:00
Tim Bruijnzeels d19b4653e6 Clean up upgrade directory from previous releases #783 2022-02-18 18:02:55 +01:00
Tim Bruijnzeels da98451051 Do not re-issue ROAs (with shortened subjects) if there are more than 50 CAs (#772) 2022-02-18 18:02:55 +01:00
Tim BruijnzeelsandXimon Eighteen 5780c771f6 Support prepare-upgrade krill: prepares the new data to migrate. (#777)
* Support "prepare-upgrade" through "krillup" binary.
* Package the new `krillup` binary and man page into a separate DEB/RPM.
* Also switches to building in a Rocky Linux container due to repeated CentOS 8 vault repo timeouts.
* Mention correct config file location on CLI help.
* Remove incorrect reference to non-existent help subcommand for krillup.
* Add locking to upgrade process.

Co-authored-by: Ximon Eighteen <3304436+ximon18@users.noreply.github.com>
2022-02-18 18:02:55 +01:00
Tim Bruijnzeels aff4407144 Improve usability of http errors to operators. (#782) 2022-02-18 18:02:55 +01:00
Tim Bruijnzeels e17bb8fe1d Check better if not-after is really reduced, significantly. (#775)
* Use second granularity rather than milliseconds (certs use seconds)
* Check better if not-after is really reduced, significantly
* Rename variables for readability.
2022-02-18 18:02:55 +01:00
Tim Bruijnzeels 010d644891 Add serde defaults suspended etc (#779)
* Add defaults for fields which may be empty and absent.
* Add (serde) defaults for aspas.
* Clean up serde default notations.
* Remove field no longer used and serialized since 0.8.2
2022-02-18 18:02:55 +01:00
Ximon EighteenandGitHub b0be88bc10 HSM support for keys (#21) (#733)
Adds support for PKCS#11 v2.20 and/or KMIP 1.2 compatible HSMs.
Includes backward compatible extensions to the krill.conf syntax.
Includes HSM related developer docs.
Excludes HSM specific API (REST, krillc, Prometheus) or UI extensions.
2022-01-14 14:19:24 +01:00
Ximon EighteenandGitHub 0e19a3ca46 Silence dead code warnings about fields that are written to but not read unless the multi-user feature is enabled. (#759) 2022-01-12 15:58:56 +01:00
Ximon EighteenandTim Bruijnzeels c60ef30c74 Implement review feedback. 2022-01-12 10:21:56 +01:00
Ximon EighteenandTim Bruijnzeels b8d5b13a92 Revert "Fix compilation on armv7-unknown-linux-gnueabihf by supplying missing Serde impls. (#751)"
This reverts commit e542f74b79.
2022-01-12 10:21:56 +01:00
Ximon EighteenandTim Bruijnzeels 8a0e6b93dc Fix compilation on armv7-unknown-linux-gnueabihf by supplying missing Serde impls. (#751) 2022-01-12 10:21:56 +01:00
Tim Bruijnzeels 18ee87f6e0 Allow configuring RFC6492/8181 client timeouts #743 2021-12-16 10:30:10 +01:00