Commit Graph
961 Commits
Author SHA1 Message Date
Tim Bruijnzeels 9d6bb0075f Updating an existing provider should update AFI limit choice #1055 2023-05-12 13:28:59 +02:00
Tim Bruijnzeels bacef76b1a Remove bulk operations in tests - they are triggered. 2023-05-11 15:31:59 +02:00
Tim Bruijnzeels e1c661e6fb Trigger sync for local child CA when resources change #1052 2023-05-11 15:31:59 +02:00
Tim Bruijnzeels 651a3cd7bc Make ASPA updates idempotent.
* allow users to just use this, rather than create/delete
* needed to deal with potentially existing history where Krill
  instances <0.13.0 ended up with AspaDefinitions with an
  empty providers list.
2023-05-11 15:31:59 +02:00
Tim Bruijnzeels f738dcbb23 Remove AspaDefinition and object when all providers are removed. 2023-05-11 15:31:59 +02:00
Tim Bruijnzeels 0ce0cc9eff Let the server reject new ASPAs without providers. 2023-05-11 15:31:59 +02:00
Tim Bruijnzeels 8d201db93e Reject ASPA with empty provider list in krillc. 2023-05-11 15:31:59 +02:00
Tim Bruijnzeels 5355cc322c Do not show CA drop down if there is only 1 CA (krill-ui #40) 2023-05-05 16:42:06 +02:00
Tim Bruijnzeels 968e72540c Revalidate ROA form fields (fixes krill-ui issue #39) 2023-05-05 16:42:06 +02:00
Tim Bruijnzeels 7ad450d479 Do not cache request XML (krill-ui issue #41) 2023-05-05 16:42:06 +02:00
MarlonandTim Bruijnzeels 093a86e7d7 Server side password hashing + basic auth (#1047)
* Server side password hashing + basic auth

* Update UI to krill-ui 6f83900

---------

Co-authored-by: Tim Bruijnzeels <tim@nlnetlabs.nl>
2023-05-03 11:22:51 +02:00
Tim BruijnzeelsandGitHub d168ff5125 Prep 0.13.0 rc2 (#1041)
* Do not migrate migrate non-existing 0.12.x publication server (#1040)
* Updgrade rpki-rs, downgrade minimal Rust version to 1.63
* Upgrade to docker apline 3.17 because of Rust 1.63
* Update readme and version for 0.13.0-rc2
2023-04-26 14:35:55 +02:00
Tim Bruijnzeels c0763f142f Update libs 2023-04-21 15:57:51 +02:00
Tim Bruijnzeels 552ef3f3f9 Clippy with rust 1.69 2023-04-21 15:09:12 +02:00
Tim BruijnzeelsandGitHub ca74085116 Replace lagosta with krill-ui v0.7.0 (#1004) 2023-04-21 14:54:07 +02:00
2d0814125e Remove published objects duplication (#1023)
* Remove support for migrating pre-0.9.0 versions.
* Keep publisher files in one place only.
* Improve merging new publish elements into staged elements.
* Upgrade pre-0.12.0 RepositoryContent.
* Upgrade v0.12.x RepositoryContent
* Log errors in case of merge conflicts
* No session reset on 0.13 upgrade (#1028)

---------

Co-authored-by: ximon18 <3304436+ximon18@users.noreply.github.com>
2023-04-20 13:23:30 +02:00
Tim BruijnzeelsandGitHub c80a49a014 Enable ASPA support (#1031) (#1033) 2023-04-20 13:22:01 +02:00
Tim BruijnzeelsandGitHub cae0c3842a Enforce that id-ad-caRepository uses a trailing slash. (#1030) (#1034) 2023-04-20 13:21:32 +02:00
Tim BruijnzeelsandGitHub bb2a625046 Log error and context in case of 6492/8181 errors. (#1027) (#1038) 2023-04-20 13:20:58 +02:00
Ximon EighteenandGitHub 3a5a120804 Allow the value used for certain public and private PKCS#11 key attributes to be overridden (#1018). 2023-04-12 11:40:49 +02:00
Ximon EighteenandGitHub b48ea6e287 Permit setting CKA_PRIVATE to CK_FALSE on PKCS#11 RSA public keys (#1019) (#1021)
* Add new PKCS#11 signer configuration setting 'anon_pubkey_access' (default false) (#1019).
* Use a type and allow the third possibility (token-default) also to be specified.
* Include advice to try changing pubkey_access when the signer registration underlying error is CKR_INCONSISTENT_TEMPLATE. Includes changes to gain access to the underlying error, and propagating the augmented error message (which was wrongly being dropped).
2023-03-08 10:16:44 +01:00
Tim BruijnzeelsandGitHub 5379521523 Allow including TA private key pem for CA import. (#1008) 2023-03-07 15:59:04 +01:00
Ximon EighteenandGitHub 08011213e0 Rename misnamed tes module to tests. 2023-02-27 13:38:44 +01:00
Ximon EighteenandTim Bruijnzeels dad1a4d814 json -> JSON in krillta command help 2023-02-27 11:22:27 +01:00
Ximon EighteenandTim Bruijnzeels c5af9fec4c Minor krillta text message tweaks. 2023-02-27 11:22:04 +01:00
Ximon EighteenandGitHub 6da078c686 Minor test comment tweak. 2023-02-23 16:02:32 +01:00
Tim Bruijnzeels 711b30e096 RepositoryManager RwLock was removed in PR #1007 2023-02-21 12:20:03 +01:00
Tim Bruijnzeels bcc5ac8b0b Merge release 0.12.2 'main' into prep-0.13.0 2023-02-21 11:59:15 +01:00
Tim Bruijnzeels d8424b0a98 Remove RepositoryManager RwLock (#1007) 2023-02-21 11:56:07 +01:00
670188457c Use logtype (#1013)
* Add log type env variable

* Cargo clippy

---------

Co-authored-by: Marlon Baeten <marlon@tweedegolf.com>
Co-authored-by: Arjen <arjentz@users.noreply.github.com>
2023-02-21 10:48:33 +01:00
b639aa1494 Fix clippy::result_large_err (#1012)
Co-authored-by: Arjen <arjentz@users.noreply.github.com>
2023-02-21 10:48:09 +01:00
Tim Bruijnzeels d01838b62d Cargo fmt 2023-01-24 16:47:40 +01:00
Tim Bruijnzeels 1c7d63e872 Clippy 1.66.1 fixes 2023-01-24 16:12:42 +01:00
Tim BruijnzeelsandGitHub 01e54ff22f Support offline ta (#985) 2023-01-24 10:30:22 +01:00
Tim Bruijnzeels 94fa92baea Merge branch 'main' into prep-0.13.0 2023-01-18 11:15:26 +01:00
Tim Bruijnzeels 6374cb8011 Fix typo 2023-01-17 15:42:40 +01:00
Ximon EighteenandTim Bruijnzeels 6b1afa221a Fix RRDP vulnerability (CVE-2023-0158) (#997) 2023-01-17 15:42:40 +01:00
Tim Bruijnzeels 4fe2c08ad5 Use handle locks in WalStore. (fixes #974) 2023-01-17 15:42:40 +01:00
Tim BruijnzeelsandGitHub 54c92ae124 Delete repository files by URI (#991) 2023-01-09 16:46:37 +01:00
Tim BruijnzeelsandGitHub 7e67f56dde Check uri not hash for publish elements. Fixes #981 2023-01-09 13:33:54 +01:00
Tim Bruijnzeels 8192b0f41b Fix typos in comment. 2022-12-01 16:11:47 +01:00
Tim BruijnzeelsandGitHub bf93b6f5a8 Use handle locks in WalStore. (fixes #974) 2022-12-01 15:36:08 +01:00
Tim BruijnzeelsandGitHub 81f9a479a7 Add support for importing CAs (#968) with ROAs (#969) 2022-11-25 12:51:51 +01:00
Tim Bruijnzeels 7376ab56e7 Change log level for "Leaving task not due until" to trace #962 2022-10-31 14:43:45 +01:00
Tim Bruijnzeels 5dbf62eb01 Improve sync-parent scheduling. 2022-10-19 15:27:18 +02:00
Tim BruijnzeelsandGitHub c7757dbafd Merge release 0.12.0 rc2 - fix pubd_objects migration issue. (#960) 2022-10-18 22:52:42 +02:00
Tim BruijnzeelsandGitHub 92e901423a Support listening on multiple IP addresses. (#955) 2022-10-18 12:04:36 +02:00
Tim BruijnzeelsandGitHub b435e81cf9 Use per aggregate locks in AggregateStore (#950) 2022-10-17 11:23:47 +02:00
Tim Bruijnzeels c975efd887 Do not try to migrate missing ca objects #941 2022-10-14 09:19:24 +02:00
Tim BruijnzeelsandGitHub 1c5c7ed82f Combine RRDP deltas if configured to do so (#693) 2022-10-13 17:05:28 +02:00