Tim Bruijnzeels
9d6bb0075f
Updating an existing provider should update AFI limit choice #1055
2023-05-12 13:28:59 +02:00
Tim Bruijnzeels
e1c661e6fb
Trigger sync for local child CA when resources change #1052
2023-05-11 15:31:59 +02:00
Tim Bruijnzeels
651a3cd7bc
Make ASPA updates idempotent.
...
* allow users to just use this, rather than create/delete
* needed to deal with potentially existing history where Krill
instances <0.13.0 ended up with AspaDefinitions with an
empty providers list.
2023-05-11 15:31:59 +02:00
Tim Bruijnzeels
f738dcbb23
Remove AspaDefinition and object when all providers are removed.
2023-05-11 15:31:59 +02:00
Tim Bruijnzeels
0ce0cc9eff
Let the server reject new ASPAs without providers.
2023-05-11 15:31:59 +02:00
Tim Bruijnzeels
5355cc322c
Do not show CA drop down if there is only 1 CA (krill-ui #40 )
2023-05-05 16:42:06 +02:00
Tim Bruijnzeels
968e72540c
Revalidate ROA form fields (fixes krill-ui issue #39 )
2023-05-05 16:42:06 +02:00
Tim Bruijnzeels
7ad450d479
Do not cache request XML (krill-ui issue #41 )
2023-05-05 16:42:06 +02:00
Marlon and Tim Bruijnzeels
093a86e7d7
Server side password hashing + basic auth ( #1047 )
...
* Server side password hashing + basic auth
* Update UI to krill-ui 6f83900
---------
Co-authored-by: Tim Bruijnzeels <tim@nlnetlabs.nl >
2023-05-03 11:22:51 +02:00
Tim Bruijnzeels and GitHub
ca74085116
Replace lagosta with krill-ui v0.7.0 ( #1004 )
2023-04-21 14:54:07 +02:00
Tim Bruijnzeels and GitHub
cae0c3842a
Enforce that id-ad-caRepository uses a trailing slash. ( #1030 ) ( #1034 )
2023-04-20 13:21:32 +02:00
Tim Bruijnzeels and GitHub
bb2a625046
Log error and context in case of 6492/8181 errors. ( #1027 ) ( #1038 )
2023-04-20 13:20:58 +02:00
Ximon Eighteen and GitHub
3a5a120804
Allow the value used for certain public and private PKCS#11 key attributes to be overridden ( #1018 ).
2023-04-12 11:40:49 +02:00
Ximon Eighteen and GitHub
b48ea6e287
Permit setting CKA_PRIVATE to CK_FALSE on PKCS#11 RSA public keys ( #1019 ) ( #1021 )
...
* Add new PKCS#11 signer configuration setting 'anon_pubkey_access' (default false) (#1019 ).
* Use a type and allow the third possibility (token-default) also to be specified.
* Include advice to try changing pubkey_access when the signer registration underlying error is CKR_INCONSISTENT_TEMPLATE. Includes changes to gain access to the underlying error, and propagating the augmented error message (which was wrongly being dropped).
2023-03-08 10:16:44 +01:00
Tim Bruijnzeels and GitHub
5379521523
Allow including TA private key pem for CA import. ( #1008 )
2023-03-07 15:59:04 +01:00
670188457c
Use logtype ( #1013 )
...
* Add log type env variable
* Cargo clippy
---------
Co-authored-by: Marlon Baeten <marlon@tweedegolf.com >
Co-authored-by: Arjen <arjentz@users.noreply.github.com >
2023-02-21 10:48:33 +01:00
b639aa1494
Fix clippy::result_large_err ( #1012 )
...
Co-authored-by: Arjen <arjentz@users.noreply.github.com >
2023-02-21 10:48:09 +01:00
Tim Bruijnzeels
d01838b62d
Cargo fmt
2023-01-24 16:47:40 +01:00
Tim Bruijnzeels
1c7d63e872
Clippy 1.66.1 fixes
2023-01-24 16:12:42 +01:00
Tim Bruijnzeels and GitHub
01e54ff22f
Support offline ta ( #985 )
2023-01-24 10:30:22 +01:00
Tim Bruijnzeels
94fa92baea
Merge branch 'main' into prep-0.13.0
2023-01-18 11:15:26 +01:00
Ximon Eighteen and Tim Bruijnzeels
6b1afa221a
Fix RRDP vulnerability (CVE-2023-0158) ( #997 )
2023-01-17 15:42:40 +01:00
Tim Bruijnzeels and GitHub
54c92ae124
Delete repository files by URI ( #991 )
2023-01-09 16:46:37 +01:00
Tim Bruijnzeels and GitHub
81f9a479a7
Add support for importing CAs ( #968 ) with ROAs ( #969 )
2022-11-25 12:51:51 +01:00
Tim Bruijnzeels
7376ab56e7
Change log level for "Leaving task not due until" to trace #962
2022-10-31 14:43:45 +01:00
Tim Bruijnzeels
5dbf62eb01
Improve sync-parent scheduling.
2022-10-19 15:27:18 +02:00
Tim Bruijnzeels and GitHub
c7757dbafd
Merge release 0.12.0 rc2 - fix pubd_objects migration issue. ( #960 )
2022-10-18 22:52:42 +02:00
Tim Bruijnzeels and GitHub
92e901423a
Support listening on multiple IP addresses. ( #955 )
2022-10-18 12:04:36 +02:00
Tim Bruijnzeels and GitHub
b435e81cf9
Use per aggregate locks in AggregateStore ( #950 )
2022-10-17 11:23:47 +02:00
Tim Bruijnzeels and GitHub
1c5c7ed82f
Combine RRDP deltas if configured to do so ( #693 )
2022-10-13 17:05:28 +02:00
Tim Bruijnzeels and GitHub
79632c9f81
Deprecate keeping old RRDP files and dirs in Krill ( #945 )
2022-10-13 15:57:05 +02:00
a29651fa2a
Use write-ahead log for RepositoryContent. ( #940 )
...
- Add support for write-ahead logging.
- Use write-ahead log for RepositoryContent.
- Migrate old style RepositoryContent if present
- Schedule updating full snapshots every 24 hours
Co-authored-by: ximon18 <3304436+ximon18@users.noreply.github.com >
2022-10-13 12:09:23 +02:00
Tim Bruijnzeels and GitHub
ca253ff7b7
Local publishing without HTTPS/CMS #935
2022-09-21 09:50:46 +02:00
Tim Bruijnzeels and GitHub
8b51702c62
Show ROA objects ( #864 )
...
* Show ROA objects
* Add functional (regression) test for roa comments
2022-09-19 16:41:56 +02:00
Tim Bruijnzeels
e124d60fea
Fix typo in logging.
2022-09-19 11:51:24 +02:00
Tim Bruijnzeels and GitHub
2ad7587925
Remove pending tasks for removed CAs ( #906 )
2022-09-07 10:51:19 +02:00
Tim Bruijnzeels and GitHub
ab55179e85
Disallow negative numbers in config file ( #808 )
2022-09-07 10:41:42 +02:00
Tim Bruijnzeels and GitHub
7c98a2a74e
Include (optional) comment with configured (ROA) authorisations. #863
2022-09-06 17:14:52 +02:00
Tim Bruijnzeels
3e674855a0
Allow explicit disabling of https #913
2022-09-01 11:32:45 +02:00
Ximon Eighteen and Tim Bruijnzeels
af39af8e75
Add SSLKEYLOGFILE support #615
2022-08-29 16:51:39 +02:00
Tim Bruijnzeels
d7e79dd4f1
clippy fixes
2022-08-29 16:51:39 +02:00
Tim Bruijnzeels
57fab3a198
Support pre-0.10.0 API to upload repository response #895
2022-08-29 16:51:39 +02:00
Tim Bruijnzeels
266cf2e06d
API to add parent should not change #898
2022-08-29 16:51:39 +02:00
Tim Bruijnzeels
9443792dc1
API to upload repository response should not change #895
2022-08-29 16:51:39 +02:00
Tim Bruijnzeels
409bb9c086
Keep parent ID cert PEM in history #870
2022-08-29 16:51:39 +02:00
Tim Bruijnzeels
e7bc158f4d
Trim uploaded parent and repo responses #873
2022-08-29 16:51:39 +02:00
Tim Bruijnzeels
d34a7f2fdb
Show RFC8183 XML in CLI ( #868 )
2022-08-29 16:51:39 +02:00
Tim Bruijnzeels
1e6bd25521
Don't panic when timing_publish_next_jitter_hours == 0 ( #859 )
2022-07-27 07:25:11 -04:00
Tim Bruijnzeels
6ff84db232
Make data dir lock opt-in ( #856 )
2022-07-25 10:35:28 -04:00
Tim Bruijnzeels
a1f0398f64
Clippy..
2022-07-25 14:33:25 +02:00
Tim Bruijnzeels