WEBDIENSTE/NLnetLabs-krill
1
0
Fork 0
mirror of https://github.com/NLnetLabs/krill.git synced 2026-09-21 00:47:41 +02:00
Code Issues Packages Projects Releases Wiki Activity
1,904 Commits 30 Branches 93 Tags
9d6bb0075ff2e0eea32cab8f4b098e6bcbc41ceb
Commit Graph
255 Commits
Author SHA1 Message Date
Tim Bruijnzeels 5355cc322c Do not show CA drop down if there is only 1 CA (krill-ui #40) 2023-05-05 16:42:06 +02:00
Tim Bruijnzeels 968e72540c Revalidate ROA form fields (fixes krill-ui issue #39) 2023-05-05 16:42:06 +02:00
Tim Bruijnzeels 7ad450d479 Do not cache request XML (krill-ui issue #41) 2023-05-05 16:42:06 +02:00
MarlonandTim Bruijnzeels 093a86e7d7 Server side password hashing + basic auth (#1047) 
* Server side password hashing + basic auth

* Update UI to krill-ui 6f83900

---------

Co-authored-by: Tim Bruijnzeels <tim@nlnetlabs.nl>
 2023-05-03 11:22:51 +02:00
Tim BruijnzeelsandGitHub ca74085116 Replace lagosta with krill-ui v0.7.0 (#1004) 2023-04-21 14:54:07 +02:00
Tim Bruijnzeels 1c7d63e872 Clippy 1.66.1 fixes 2023-01-24 16:12:42 +01:00
Tim BruijnzeelsandGitHub 01e54ff22f Support offline ta (#985) 2023-01-24 10:30:22 +01:00
Tim Bruijnzeels 94fa92baea Merge branch 'main' into prep-0.13.0 2023-01-18 11:15:26 +01:00
Ximon EighteenandTim Bruijnzeels 6b1afa221a Fix RRDP vulnerability (CVE-2023-0158) (#997) 2023-01-17 15:42:40 +01:00
Tim BruijnzeelsandGitHub 54c92ae124 Delete repository files by URI (#991) 2023-01-09 16:46:37 +01:00
Tim BruijnzeelsandGitHub 81f9a479a7 Add support for importing CAs (#968) with ROAs (#969) 2022-11-25 12:51:51 +01:00
Tim BruijnzeelsandGitHub c7757dbafd Merge release 0.12.0 rc2 - fix pubd_objects migration issue. (#960) 2022-10-18 22:52:42 +02:00
Tim BruijnzeelsandGitHub 92e901423a Support listening on multiple IP addresses. (#955) 2022-10-18 12:04:36 +02:00
Tim BruijnzeelsandGitHub 1c5c7ed82f Combine RRDP deltas if configured to do so (#693) 2022-10-13 17:05:28 +02:00
Tim BruijnzeelsandGitHub 7c98a2a74e Include (optional) comment with configured (ROA) authorisations. #863 2022-09-06 17:14:52 +02:00
Tim Bruijnzeels 3e674855a0 Allow explicit disabling of https #913 2022-09-01 11:32:45 +02:00
Ximon EighteenandTim Bruijnzeels af39af8e75 Add SSLKEYLOGFILE support #615 2022-08-29 16:51:39 +02:00
Tim Bruijnzeels d7e79dd4f1 clippy fixes 2022-08-29 16:51:39 +02:00
Tim Bruijnzeels 57fab3a198 Support pre-0.10.0 API to upload repository response #895 2022-08-29 16:51:39 +02:00
Tim Bruijnzeels 266cf2e06d API to add parent should not change #898 2022-08-29 16:51:39 +02:00
Tim Bruijnzeels 9443792dc1 API to upload repository response should not change #895 2022-08-29 16:51:39 +02:00
Tim Bruijnzeels e7bc158f4d Trim uploaded parent and repo responses #873 2022-08-29 16:51:39 +02:00
Tim Bruijnzeels d34a7f2fdb Show RFC8183 XML in CLI (#868) 2022-08-29 16:51:39 +02:00
Tim Bruijnzeels 6ff84db232 Make data dir lock opt-in (#856) 2022-07-25 10:35:28 -04:00
Tim Bruijnzeels a1f0398f64 Clippy.. 2022-07-25 14:33:25 +02:00
Tim BruijnzeelsandGitHub 1cc69885db Use more descriptive errors from rpki-rs #845 2022-07-18 19:24:43 +02:00
Tim BruijnzeelsandGitHub 77facbb320 Remove dependency on bcder (#822) 2022-07-18 17:19:21 +02:00
Tim BruijnzeelsandGitHub bbb2267587 Migrate RPKI objects in history (#841) 
Ensures that Krill is more robust with regards to stricter validation of RPKI object types in future.
 2022-07-18 15:51:26 +02:00
Tim BruijnzeelsandGitHub d68c07b59c Sign BGP router certificates (#827) 2022-07-07 13:20:00 +02:00
Tim BruijnzeelsandGitHub 4605bf93da Prevent that two krill instances modify the same data (#829) 2022-05-31 16:45:56 +02:00
Tim BruijnzeelsGitHubXimon Eighteen
 		330da84de5 Migrate 8181 8183 6942 support to rpki rs (#820) 
* Use types which were ported into rpki-rs.
* Update dependency to rpki-rs 0.14.3-dev.
* IGNORE old_events test for now, see issue: #819
* Quick fix for compilation using --all-features. See issue #821

Co-authored-by: Ximon Eighteen <3304436+ximon18@users.noreply.github.com>
 2022-05-12 15:24:50 +02:00
Tim Bruijnzeels 12c4a1fc9a Merge release 0.9.5 into dev 2022-04-13 16:58:52 +02:00
Tim BruijnzeelsGitHubXimon Eighteen
 		388b931645 V0.9.5 rc9 prep (#812) 
* Improve efficiency of connection status tracking #811
* Update version and readme for 0.9.5-rc9

Co-authored-by: Ximon Eighteen <3304436+ximon18@users.noreply.github.com>
 2022-04-06 15:11:55 +02:00
Tim Bruijnzeels 4e1df9294a Merge 0.9.5-rc8 (main) into dev 2022-03-30 14:05:02 +02:00
Tim BruijnzeelsGitHubXimon Eighteen
 		ffb7d6ecdd V0.9.5 rc7 prep (#803) 
* Use PriorityQueue with time based Priority.
* Improve session sweep logging (make it less noisy)
* Update config file with new refresh settings - cap jitter at 50% of refresh
* Let api schedule repo sync tasks rather than execute it synchronously.
* Update version and readme for RC7
* Use the highest priority in case a task was already in the queue.
* Use consistent capitalization of Krill in config files.
* Update readme regarding ca-parent sync changes
* Update to Lagosta with updated dependencies
* Update developer documentation with new scheduler behaviour.
* Add hidden api end-point for scheduling suspend all - used in testing.

Co-authored-by: Ximon Eighteen <3304436+ximon18@users.noreply.github.com>
 2022-03-28 16:01:51 +02:00
Tim BruijnzeelsandGitHub cd00b4ebc9 V0.9.5 rc5 prep 
* Do not sign/validate RFC6492 messages to/from local parent #797
* Add per CA locks to StatusStore. #795
* Update version and readme for 0.9.5-rc5
 2022-03-06 21:29:48 +01:00
Tim Bruijnzeels ab29f830ef Remove cache and locking for CA statuses #795 2022-03-05 23:30:24 +01:00
Tim Bruijnzeels d74faed0ab Make RRDP session reset manual option #793 2022-03-05 17:19:13 +01:00
Tim Bruijnzeels b0b9a08900 Prep 0.9.5-rc2 - only move dirs if data was migrated!! 2022-02-24 10:25:12 +01:00
Tim BruijnzeelsandXimon Eighteen 5780c771f6 Support prepare-upgrade krill: prepares the new data to migrate. (#777) 
* Support "prepare-upgrade" through "krillup" binary.
* Package the new `krillup` binary and man page into a separate DEB/RPM.
* Also switches to building in a Rocky Linux container due to repeated CentOS 8 vault repo timeouts.
* Mention correct config file location on CLI help.
* Remove incorrect reference to non-existent help subcommand for krillup.
* Add locking to upgrade process.

Co-authored-by: Ximon Eighteen <3304436+ximon18@users.noreply.github.com>
 2022-02-18 18:02:55 +01:00
Ximon EighteenandGitHub b0be88bc10 HSM support for keys (#21) (#733) 
Adds support for PKCS#11 v2.20 and/or KMIP 1.2 compatible HSMs.
Includes backward compatible extensions to the krill.conf syntax.
Includes HSM related developer docs.
Excludes HSM specific API (REST, krillc, Prometheus) or UI extensions.
 2022-01-14 14:19:24 +01:00
Tim Bruijnzeels 3b94ff2fa6 Proof of concept ASPA support (#685) 2021-11-05 15:59:17 +01:00
Tim Bruijnzeels bb10f00d0e Force re-issuance of ROAs on upgrade from before 0.9.3-rc2 (#704) 2021-11-05 15:59:17 +01:00
Tim BruijnzeelsandGitHub 30772b6f36 Suspend krill 092 higher only (#670) (PR #672) 2021-09-23 15:57:05 +02:00
Tim Bruijnzeels b9f9952ac5 Fix (inverse logic) krill_ca_child_state metric. 2021-09-15 13:17:01 +02:00
Tim BruijnzeelsandGitHub 5f4189c6eb Reorganise use statements (#647) 2021-09-13 14:01:40 +02:00
Tim Bruijnzeels 00b97e7377 Remove copied comment. 2021-09-13 13:32:22 +02:00
Tim Bruijnzeels 3cc9547e1e Hide ca-child metrics if there are no CAs with children. 2021-09-13 13:32:22 +02:00
Tim Bruijnzeels 4eae590e99 Keep child state (active/pending) in status and show in CLI and metrics. (#656) 2021-09-13 13:32:22 +02:00
Tim Bruijnzeels 3d0df004ba Reorganise metrics and allow disabling details. (#654) 2021-09-13 13:32:22 +02:00