Commit Graph
233 Commits
Author SHA1 Message Date
Tim Bruijnzeels d34a7f2fdb Show RFC8183 XML in CLI (#868) 2022-08-29 16:51:39 +02:00
Tim Bruijnzeels 6ff84db232 Make data dir lock opt-in (#856) 2022-07-25 10:35:28 -04:00
Tim Bruijnzeels a1f0398f64 Clippy.. 2022-07-25 14:33:25 +02:00
Tim BruijnzeelsandGitHub 1cc69885db Use more descriptive errors from rpki-rs #845 2022-07-18 19:24:43 +02:00
Tim BruijnzeelsandGitHub 77facbb320 Remove dependency on bcder (#822) 2022-07-18 17:19:21 +02:00
Tim BruijnzeelsandGitHub bbb2267587 Migrate RPKI objects in history (#841)
Ensures that Krill is more robust with regards to stricter validation of RPKI object types in future.
2022-07-18 15:51:26 +02:00
Tim BruijnzeelsandGitHub d68c07b59c Sign BGP router certificates (#827) 2022-07-07 13:20:00 +02:00
Tim BruijnzeelsandGitHub 4605bf93da Prevent that two krill instances modify the same data (#829) 2022-05-31 16:45:56 +02:00
330da84de5 Migrate 8181 8183 6942 support to rpki rs (#820)
* Use types which were ported into rpki-rs.
* Update dependency to rpki-rs 0.14.3-dev.
* IGNORE old_events test for now, see issue: #819
* Quick fix for compilation using --all-features. See issue #821

Co-authored-by: Ximon Eighteen <3304436+ximon18@users.noreply.github.com>
2022-05-12 15:24:50 +02:00
Tim Bruijnzeels 12c4a1fc9a Merge release 0.9.5 into dev 2022-04-13 16:58:52 +02:00
388b931645 V0.9.5 rc9 prep (#812)
* Improve efficiency of connection status tracking #811
* Update version and readme for 0.9.5-rc9

Co-authored-by: Ximon Eighteen <3304436+ximon18@users.noreply.github.com>
2022-04-06 15:11:55 +02:00
Tim Bruijnzeels 4e1df9294a Merge 0.9.5-rc8 (main) into dev 2022-03-30 14:05:02 +02:00
ffb7d6ecdd V0.9.5 rc7 prep (#803)
* Use PriorityQueue with time based Priority.
* Improve session sweep logging (make it less noisy)
* Update config file with new refresh settings - cap jitter at 50% of refresh
* Let api schedule repo sync tasks rather than execute it synchronously.
* Update version and readme for RC7
* Use the highest priority in case a task was already in the queue.
* Use consistent capitalization of Krill in config files.
* Update readme regarding ca-parent sync changes
* Update to Lagosta with updated dependencies
* Update developer documentation with new scheduler behaviour.
* Add hidden api end-point for scheduling suspend all - used in testing.

Co-authored-by: Ximon Eighteen <3304436+ximon18@users.noreply.github.com>
2022-03-28 16:01:51 +02:00
Tim BruijnzeelsandGitHub cd00b4ebc9 V0.9.5 rc5 prep
* Do not sign/validate RFC6492 messages to/from local parent #797
* Add per CA locks to StatusStore. #795
* Update version and readme for 0.9.5-rc5
2022-03-06 21:29:48 +01:00
Tim Bruijnzeels ab29f830ef Remove cache and locking for CA statuses #795 2022-03-05 23:30:24 +01:00
Tim Bruijnzeels d74faed0ab Make RRDP session reset manual option #793 2022-03-05 17:19:13 +01:00
Tim Bruijnzeels b0b9a08900 Prep 0.9.5-rc2 - only move dirs if data was migrated!! 2022-02-24 10:25:12 +01:00
Tim BruijnzeelsandXimon Eighteen 5780c771f6 Support prepare-upgrade krill: prepares the new data to migrate. (#777)
* Support "prepare-upgrade" through "krillup" binary.
* Package the new `krillup` binary and man page into a separate DEB/RPM.
* Also switches to building in a Rocky Linux container due to repeated CentOS 8 vault repo timeouts.
* Mention correct config file location on CLI help.
* Remove incorrect reference to non-existent help subcommand for krillup.
* Add locking to upgrade process.

Co-authored-by: Ximon Eighteen <3304436+ximon18@users.noreply.github.com>
2022-02-18 18:02:55 +01:00
Ximon EighteenandGitHub b0be88bc10 HSM support for keys (#21) (#733)
Adds support for PKCS#11 v2.20 and/or KMIP 1.2 compatible HSMs.
Includes backward compatible extensions to the krill.conf syntax.
Includes HSM related developer docs.
Excludes HSM specific API (REST, krillc, Prometheus) or UI extensions.
2022-01-14 14:19:24 +01:00
Tim Bruijnzeels 3b94ff2fa6 Proof of concept ASPA support (#685) 2021-11-05 15:59:17 +01:00
Tim Bruijnzeels bb10f00d0e Force re-issuance of ROAs on upgrade from before 0.9.3-rc2 (#704) 2021-11-05 15:59:17 +01:00
Tim BruijnzeelsandGitHub 30772b6f36 Suspend krill 092 higher only (#670) (PR #672) 2021-09-23 15:57:05 +02:00
Tim Bruijnzeels b9f9952ac5 Fix (inverse logic) krill_ca_child_state metric. 2021-09-15 13:17:01 +02:00
Tim BruijnzeelsandGitHub 5f4189c6eb Reorganise use statements (#647) 2021-09-13 14:01:40 +02:00
Tim Bruijnzeels 00b97e7377 Remove copied comment. 2021-09-13 13:32:22 +02:00
Tim Bruijnzeels 3cc9547e1e Hide ca-child metrics if there are no CAs with children. 2021-09-13 13:32:22 +02:00
Tim Bruijnzeels 4eae590e99 Keep child state (active/pending) in status and show in CLI and metrics. (#656) 2021-09-13 13:32:22 +02:00
Tim Bruijnzeels 3d0df004ba Reorganise metrics and allow disabling details. (#654) 2021-09-13 13:32:22 +02:00
Tim Bruijnzeels 3cb3cec512 Use pub Arc<Comfig> in KrillServer for easier access to configuration. (#654) 2021-09-13 13:32:22 +02:00
Tim Bruijnzeels 6c30c0e24d Postpone cloning CaStatus bits as long as possible. (#655) 2021-09-13 13:32:22 +02:00
Tim Bruijnzeels 656f45518b Change 'repo' to 'ps' in metric - i.e. use 'Publication Server' rather than repo. 2021-09-13 13:32:22 +02:00
Tim Bruijnzeels 1ebe63e4bc Clarify next planned connection for publication. 2021-09-13 13:32:22 +02:00
Tim Bruijnzeels 9eaa921720 Consistent capitalisation of CA in metrics help. 2021-09-13 13:32:22 +02:00
Tim Bruijnzeels c92dd1869c Clarify unix timestamp in metrics 2021-09-13 13:32:22 +02:00
Tim Bruijnzeels d39d38dd32 Use explicit Timestamp type. 2021-09-13 13:32:22 +02:00
Tim Bruijnzeels 7e4467f87a Monitor ca to publication server connections with prometheus. (#650) (#652)
* Monitor ca to publication server connections with prometheus. (#650)

* Monitor child cas (#653)

* Move BGP announcement metrics into its own scoped section.

* Add comments for metrics

* Monitor child connections using prometheus (#651)

* Fix help text for metric
2021-09-13 13:32:22 +02:00
Tim Bruijnzeels 56dca5e864 Monitor ca-parent connections with prometheus. (#648) 2021-09-13 13:32:22 +02:00
27fd25dcb2 Use async reqwest for openid connect checks (#645)
PR #646

* cargo update
* Use an enum instead of a trait (prepare to allow async)
* Use async reqwest client for openid connect checks.
* Move extract bearer token function to util::httpclient.

Co-authored-by: Ximon Eighteen <3304436+ximon18@users.noreply.github.com>
2021-09-06 13:38:17 +02:00
Tim Bruijnzeels 055b817881 Cargo clippy - rust 1.54 2021-08-30 13:13:20 +02:00
Tim Bruijnzeels 8584efe429 Cargo fmt - rust 1.54 2021-08-30 11:31:35 +02:00
Tim Bruijnzeels 48c6557bd3 Unsuspend child CA when it sends a valid RFC 6492 request. (#623)
(also make tests more deterministic wrt ca refresh)
2021-08-30 10:47:28 +02:00
Tim BruijnzeelsandGitHub 2301c1645e Perform RRDP session reset on startup (if repo is initialized) (#533) (#637) 2021-08-28 08:46:43 +02:00
Tim BruijnzeelsandGitHub 37ce99298e Monitor child CA versions and send version to parent/repo (#622, #620) 2021-08-10 15:45:54 +02:00
Tim Bruijnzeels 90d8a59524 Merge 0.9.1-rc1 release into 'dev'. 2021-07-16 15:03:54 +02:00
Tim Bruijnzeels 39629ff56b Remove assignments which are no longer useful now the RwLock is removed. 2021-07-16 11:02:47 +02:00
Tim Bruijnzeels 8e06582150 Remove async. 2021-07-16 11:02:47 +02:00
Tim Bruijnzeels 85378ff311 Cache the repository content: work around slow deserialization. (#606) 2021-07-16 11:02:47 +02:00
Tim Bruijnzeels fbabf8e452 Remove superfluous RwLock around KrillServer (it has its own locks). (#606) 2021-07-16 11:02:47 +02:00
Tim BruijnzeelsandGitHub 39b76d6f0d Test writing to directories and report error on startup (#587) 2021-07-13 15:52:33 +02:00
Tim BruijnzeelsandGitHub 8be620b606 Update dependencies: rpki-rs, bytes, tokio, hyper, reqwest (#584)
* Update dependencies: rpki-rs, and therefore bytes, tokio, hyper, reqwest
* Rust 1.51 clippy
* Update minimal rust version to 1.47
    socket2 requires improved const fn support.
    exponential compile-time and type_length_limit and async in 1.46.

See PR #586
2021-07-02 10:20:24 +02:00