Commit Graph
286 Commits
Author SHA1 Message Date
Tim Bruijnzeels 04cbfdadea Depend on latest rpki-rs with ASPA v1. 2023-10-23 12:00:46 +02:00
Tim Bruijnzeels ec42abed0a Import delegated ca 1133 (#1136)
* Add mapping to support that parent and child use different rc names.
* Export child (so that we can test importing it).
* Import child.
* Force parent refresh in resource check loop.
2023-10-17 15:31:11 +02:00
Tim Bruijnzeels 87cb814408 Fix delete ca #1103 2023-10-17 15:31:11 +02:00
Tim Bruijnzeels d03022f495 Use kvx based transactional task queue #1090 2023-10-17 15:31:11 +02:00
Tim Bruijnzeels 263d870ca8 Support migrations using non-disk storage #1094
* Use kvx with explicit namespace type.
* Do not depend on a data dir for storage.
* Fix upgrade code.
2023-10-17 15:31:11 +02:00
Tim Bruijnzeels 273b4f11fe Track krill version once (#1074 #1081) 2023-10-17 15:31:11 +02:00
Tim BruijnzeelsandArjen dd037c7e70 Kvx storage 1067 (#1069)
* Depend on kvx 0.6.0
* Update minimum rust version to 1.65 (required by kvx)
---------

Co-authored-by: Arjen <4867268+arjentz@users.noreply.github.com>
2023-10-17 15:31:11 +02:00
Tim Bruijnzeels 91c32186c3 Krill MUST NOT create only a single AFI ASPA #1063 2023-05-22 13:06:22 +02:00
Tim Bruijnzeels 9fb967780c Prevent adding customer AS as provider on ASPA objects (#1058) 2023-05-18 12:59:55 +02:00
Tim Bruijnzeels 9d6bb0075f Updating an existing provider should update AFI limit choice #1055 2023-05-12 13:28:59 +02:00
Tim Bruijnzeels 651a3cd7bc Make ASPA updates idempotent.
* allow users to just use this, rather than create/delete
* needed to deal with potentially existing history where Krill
  instances <0.13.0 ended up with AspaDefinitions with an
  empty providers list.
2023-05-11 15:31:59 +02:00
Tim Bruijnzeels f738dcbb23 Remove AspaDefinition and object when all providers are removed. 2023-05-11 15:31:59 +02:00
Tim Bruijnzeels 0ce0cc9eff Let the server reject new ASPAs without providers. 2023-05-11 15:31:59 +02:00
Tim Bruijnzeels 552ef3f3f9 Clippy with rust 1.69 2023-04-21 15:09:12 +02:00
Ximon EighteenandGitHub b22beb3fa3 Remove Cypress based UI tests (#1035) 2023-04-20 13:28:48 +02:00
2d0814125e Remove published objects duplication (#1023)
* Remove support for migrating pre-0.9.0 versions.
* Keep publisher files in one place only.
* Improve merging new publish elements into staged elements.
* Upgrade pre-0.12.0 RepositoryContent.
* Upgrade v0.12.x RepositoryContent
* Log errors in case of merge conflicts
* No session reset on 0.13 upgrade (#1028)

---------

Co-authored-by: ximon18 <3304436+ximon18@users.noreply.github.com>
2023-04-20 13:23:30 +02:00
Tim BruijnzeelsandGitHub 5379521523 Allow including TA private key pem for CA import. (#1008) 2023-03-07 15:59:04 +01:00
Tim Bruijnzeels 286aee9862 Merge branch 'main' with release 0.12.3 into prep-0.13.0 2023-03-07 10:36:38 +01:00
Tim Bruijnzeels 0769751b3f Delete repository files by URI (#991) 2023-03-06 15:25:21 +01:00
Tim Bruijnzeels d01838b62d Cargo fmt 2023-01-24 16:47:40 +01:00
Tim Bruijnzeels 1c7d63e872 Clippy 1.66.1 fixes 2023-01-24 16:12:42 +01:00
Tim BruijnzeelsandGitHub 01e54ff22f Support offline ta (#985) 2023-01-24 10:30:22 +01:00
Tim Bruijnzeels 94fa92baea Merge branch 'main' into prep-0.13.0 2023-01-18 11:15:26 +01:00
Ximon EighteenandTim Bruijnzeels 6b1afa221a Fix RRDP vulnerability (CVE-2023-0158) (#997) 2023-01-17 15:42:40 +01:00
Tim Bruijnzeels 4fe2c08ad5 Use handle locks in WalStore. (fixes #974) 2023-01-17 15:42:40 +01:00
Tim BruijnzeelsandGitHub 54c92ae124 Delete repository files by URI (#991) 2023-01-09 16:46:37 +01:00
Tim BruijnzeelsandGitHub bf93b6f5a8 Use handle locks in WalStore. (fixes #974) 2022-12-01 15:36:08 +01:00
Tim BruijnzeelsandGitHub 81f9a479a7 Add support for importing CAs (#968) with ROAs (#969) 2022-11-25 12:51:51 +01:00
Tim Bruijnzeels 5dbf62eb01 Improve sync-parent scheduling. 2022-10-19 15:27:18 +02:00
Tim BruijnzeelsandGitHub 1c5c7ed82f Combine RRDP deltas if configured to do so (#693) 2022-10-13 17:05:28 +02:00
Tim BruijnzeelsandGitHub 8b51702c62 Show ROA objects (#864)
* Show ROA objects
* Add functional (regression) test for roa comments
2022-09-19 16:41:56 +02:00
Tim BruijnzeelsandGitHub 7c98a2a74e Include (optional) comment with configured (ROA) authorisations. #863 2022-09-06 17:14:52 +02:00
Tim Bruijnzeels d7e79dd4f1 clippy fixes 2022-08-29 16:51:39 +02:00
Tim Bruijnzeels 266cf2e06d API to add parent should not change #898 2022-08-29 16:51:39 +02:00
Tim Bruijnzeels 9443792dc1 API to upload repository response should not change #895 2022-08-29 16:51:39 +02:00
Ximon EighteenandTim Bruijnzeels 802b0fda81 Upgrade rpki crate dependency (fixes #874)
* Upgrade rpki crate dependency (fixes #874).
* Update changelog.
* Fix test to not expect a leading line break in the XML response.
2022-08-29 16:51:39 +02:00
Tim Bruijnzeels d34a7f2fdb Show RFC8183 XML in CLI (#868) 2022-08-29 16:51:39 +02:00
Tim Bruijnzeels b03511b503 Ensure that all published objects are on the manifest (fix #853) 2022-07-25 14:33:25 +02:00
Tim BruijnzeelsandGitHub bbb2267587 Migrate RPKI objects in history (#841)
Ensures that Krill is more robust with regards to stricter validation of RPKI object types in future.
2022-07-18 15:51:26 +02:00
Tim BruijnzeelsandGitHub d68c07b59c Sign BGP router certificates (#827) 2022-07-07 13:20:00 +02:00
Tim BruijnzeelsandGitHub 7d271417f1 Support configuration for benchmark testing (#825) 2022-05-27 09:11:42 +02:00
330da84de5 Migrate 8181 8183 6942 support to rpki rs (#820)
* Use types which were ported into rpki-rs.
* Update dependency to rpki-rs 0.14.3-dev.
* IGNORE old_events test for now, see issue: #819
* Quick fix for compilation using --all-features. See issue #821

Co-authored-by: Ximon Eighteen <3304436+ximon18@users.noreply.github.com>
2022-05-12 15:24:50 +02:00
Tim Bruijnzeels 12c4a1fc9a Merge release 0.9.5 into dev 2022-04-13 16:58:52 +02:00
Tim Bruijnzeels 5973b7431c Split big function test into smaller tests. 2022-04-05 16:01:25 +02:00
Tim Bruijnzeels 4e1df9294a Merge 0.9.5-rc8 (main) into dev 2022-03-30 14:05:02 +02:00
ffb7d6ecdd V0.9.5 rc7 prep (#803)
* Use PriorityQueue with time based Priority.
* Improve session sweep logging (make it less noisy)
* Update config file with new refresh settings - cap jitter at 50% of refresh
* Let api schedule repo sync tasks rather than execute it synchronously.
* Update version and readme for RC7
* Use the highest priority in case a task was already in the queue.
* Use consistent capitalization of Krill in config files.
* Update readme regarding ca-parent sync changes
* Update to Lagosta with updated dependencies
* Update developer documentation with new scheduler behaviour.
* Add hidden api end-point for scheduling suspend all - used in testing.

Co-authored-by: Ximon Eighteen <3304436+ximon18@users.noreply.github.com>
2022-03-28 16:01:51 +02:00
Ximon EighteenandGitHub b0be88bc10 HSM support for keys (#21) (#733)
Adds support for PKCS#11 v2.20 and/or KMIP 1.2 compatible HSMs.
Includes backward compatible extensions to the krill.conf syntax.
Includes HSM related developer docs.
Excludes HSM specific API (REST, krillc, Prometheus) or UI extensions.
2022-01-14 14:19:24 +01:00
Tim Bruijnzeels 9965a72070 Support ASPAs with an explicit empty provider as set. (#685) 2021-11-05 15:59:17 +01:00
Tim Bruijnzeels 3b94ff2fa6 Proof of concept ASPA support (#685) 2021-11-05 15:59:17 +01:00
Tim BruijnzeelsandGitHub 30772b6f36 Suspend krill 092 higher only (#670) (PR #672) 2021-09-23 15:57:05 +02:00