rpki.gui.cacheview.util:caught exception while processing rcynic_object

[sraustein]

every hour or so

{{{
ERROR:rpki.gui.cacheview.util:caught exception while processing rcynic_object:
vs=<validation_status_element id=34569595920 status=object_accepted file_class=<class 'rpki.rcynic.rcynic_certificate'> generation=current timestamp=2015-11-03T05:08:57Z uri=rsync://rpki-testbed.apnic.net/repository/A30015AEABE011E290E79B6AA8B6C50A/eaYORdLzbCkmahJ8FGl3ku8UAnM.cer filename=/var/rcynic/data/authenticated/rpki-testbed.apnic.net/repository/A30015AEABE011E290E79B6AA8B6C50A/eaYORdLzbCkmahJ8FGl3ku8UAnM.cer>
obj=<rcynic_certificate rsync://rpki-testbed.apnic.net/repository/A30015AEABE011E290E79B6AA8B6C50A/eaYORdLzbCkmahJ8FGl3ku8UAnM.cer V4: 103.109.120.0/24 at 0x80c814450>
Filename: /var/rcynic/data/authenticated/rpki-testbed.apnic.net/repository/A30015AEABE011E290E79B6AA8B6C50A/eaYORdLzbCkmahJ8FGl3ku8UAnM.cer
Uri: rsync://rpki-testbed.apnic.net/repository/A30015AEABE011E290E79B6AA8B6C50A/eaYORdLzbCkmahJ8FGl3ku8UAnM.cer
Notbefore: 2015-11-02T22:05:24Z
Notafter: 2030-01-01T00:00:00Z
Aia_uri: rsync://rpki-testbed.apnic.net/repository/333B6962A8E311E28B99CBD893E9F209/aQoXJB2bnmAcZXI68xsp0MEW_bM.cer
Sia_directory_uri: None
Resources: V4: 103.109.120.0/24
Traceback (most recent call last):
File "/usr/local/libexec/rpkigui-rcynic", line 52, in
import_rcynic_xml(options.root, options.logfile)
File "/usr/local/lib/python2.7/site-packages/rpki/gui/cacheview/util.py", line 424, in import_rcynic_xml
process_cache(root, logfile)
File "/usr/local/lib/python2.7/site-packages/django/db/transaction.py", line 224, in inner
return func(_args, *_kwargs)
File "/usr/local/lib/python2.7/site-packages/rpki/gui/cacheview/util.py", line 263, in process_cache
save_status(repo, vs)
File "/usr/local/lib/python2.7/site-packages/rpki/gui/cacheview/util.py", line 236, in save_status
dispatch[vs.file_class.name](obj, inst)
File "/usr/local/lib/python2.7/site-packages/rpki/gui/cacheview/util.py", line 49, in rcynic_cert
obj.save()
File "/usr/local/lib/python2.7/site-packages/django/db/models/base.py", line 463, in save
self.save_base(using=using, force_insert=force_insert, force_update=force_update)
File "/usr/local/lib/python2.7/site-packages/django/db/models/base.py", line 551, in save_base
result = manager._insert([self], fields=fields, return_id=update_pk, using=using, raw=raw)
File "/usr/local/lib/python2.7/site-packages/django/db/models/manager.py", line 203, in _insert
return insert_query(self.model, objs, fields, **kwargs)
File "/usr/local/lib/python2.7/site-packages/django/db/models/query.py", line 1593, in insert_query
return query.get_compiler(using=using).execute_sql(return_id)
File "/usr/local/lib/python2.7/site-packages/django/db/models/sql/compiler.py", line 912, in execute_sql
cursor.execute(sql, params)
File "/usr/local/lib/python2.7/site-packages/django/db/backends/mysql/base.py", line 114, in execute
return self.cursor.execute(query, args)
File "/usr/local/lib/python2.7/site-packages/MySQLdb/cursors.py", line 205, in execute
self.errorhandler(self, exc, value)
File "/usr/local/lib/python2.7/site-packages/MySQLdb/connections.py", line 36, in defaulterrorhandler
raise errorclass, errorvalue
django.db.utils.IntegrityError: (1048, "Column 'sia' cannot be null")
Program /usr/local/libexec/rpkigui-rcynic exited with status 1
}}}

Trac ticket #778 component gui priority major, owner None, created by randy on 2015-11-03T05:56:53Z, last modified 2016-04-22T16:02:11Z

[sraustein]

It's an EE certificate, so it has no SIA caRepository URI.

Trac comment by sra on 2015-11-03T06:01:14Z

[sraustein]

sra sez {{{It's an EE certificate, so it has no SIA caDirectory.}}}

Trac comment by randy on 2015-11-03T06:01:41Z

[sraustein]

There are a few of those (URIs below), APNIC testbed specials. I no
longer recall why EE certificates with no SIA extension at all are
whine-and-permit rather than reject, probably allowing something
stupid somebody was doing years ago. We might want to reject them.

But router certificates won't have SIA caRepository either, so code
has to cope with that.

{{{
rsync://rpki-testbed.apnic.net/repository/A30015AEABE011E290E79B6AA8B6C50A/9N3KGvrzgk2bbnTso--n9nypjWk.cer
rsync://rpki-testbed.apnic.net/repository/A30015AEABE011E290E79B6AA8B6C50A/kqYAhV1eAYgl-dBU_OYoeX-5LVA.cer
rsync://rpki-testbed.apnic.net/repository/A30015AEABE011E290E79B6AA8B6C50A/rgxbeeiDGsrp6adxDmH5NTb5jI0.cer
rsync://rpki-testbed.apnic.net/repository/A30015AEABE011E290E79B6AA8B6C50A/HdjmgYONJ-X7HmvTL6BISEB6hgU.cer
rsync://rpki-testbed.apnic.net/repository/A30015AEABE011E290E79B6AA8B6C50A/7Pj3yBKbZrvhgsKvQ5U2eDSmAA8.cer
rsync://rpki-testbed.apnic.net/repository/A30015AEABE011E290E79B6AA8B6C50A/kdlXwPfGIYZgVNUel9OZnsGNH0g.cer
rsync://rpki-testbed.apnic.net/repository/A30015AEABE011E290E79B6AA8B6C50A/_uli2R1gc_ZyyU4SRRNID_r9-IU.cer
rsync://rpki-testbed.apnic.net/repository/A30015AEABE011E290E79B6AA8B6C50A/2UBh1-XAvR-TRdxVvavTJt51-RA.cer
rsync://rpki-testbed.apnic.net/repository/A30015AEABE011E290E79B6AA8B6C50A/yFyfoajrQom1Ut2VlI2ASTL7Qb0.cer
rsync://rpki-testbed.apnic.net/repository/A30015AEABE011E290E79B6AA8B6C50A/F1mHhl42MFEhXJoY1yUtHwcp17Q.cer
rsync://rpki-testbed.apnic.net/repository/A30015AEABE011E290E79B6AA8B6C50A/Mo5xeGmcWGO6w0WpCDKo8jGY1ow.cer
rsync://rpki-testbed.apnic.net/repository/A30015AEABE011E290E79B6AA8B6C50A/VKejzbUVeBjTCfBJw4iuSKbuw7c.cer
rsync://rpki-testbed.apnic.net/repository/A30015AEABE011E290E79B6AA8B6C50A/GDBtrds-xjFAltGawkhBMeSA7nw.cer
rsync://rpki-testbed.apnic.net/repository/A30015AEABE011E290E79B6AA8B6C50A/Dwy5OwqfW0iINFIetXXwxCEajUg.cer
rsync://rpki-testbed.apnic.net/repository/A30015AEABE011E290E79B6AA8B6C50A/oGRld_h3Mgd-tRvuRb1tglu5vpo.cer
rsync://rpki-testbed.apnic.net/repository/A30015AEABE011E290E79B6AA8B6C50A/cxKlz6cAPZbcQ95BdqzM_vx4Bbw.cer
rsync://rpki-testbed.apnic.net/repository/A30015AEABE011E290E79B6AA8B6C50A/jQWKwwQYNOqZc63T0FO2OkvYgSs.cer
rsync://rpki-testbed.apnic.net/repository/A30015AEABE011E290E79B6AA8B6C50A/0IQCfN1Du7dqzF9fh5e7tAiTKq8.cer
rsync://rpki-testbed.apnic.net/repository/A30015AEABE011E290E79B6AA8B6C50A/TH_QE3FEZO5pU8xSQWb_qykBsWs.cer
rsync://rpki-testbed.apnic.net/repository/A30015AEABE011E290E79B6AA8B6C50A/ZCGzqp0QgrnJbg9N-8GzPOn7fcc.cer
rsync://rpki-testbed.apnic.net/repository/A30015AEABE011E290E79B6AA8B6C50A/XqJeThfdatEtYBhvwbjqoNLuvYU.cer
rsync://rpki-testbed.apnic.net/repository/A30015AEABE011E290E79B6AA8B6C50A/PDatNpjrP2fsfofiC7I9BekLYd8.cer
rsync://rpki-testbed.apnic.net/repository/A30015AEABE011E290E79B6AA8B6C50A/eisl9hUUrjqxVxmdqZL8C0FUnXY.cer
rsync://rpki-testbed.apnic.net/repository/A30015AEABE011E290E79B6AA8B6C50A/eaYORdLzbCkmahJ8FGl3ku8UAnM.cer
rsync://rpki-testbed.apnic.net/repository/A30015AEABE011E290E79B6AA8B6C50A/pkb1ifkTHMfUXg19KoWU6eWQPHY.cer
rsync://rpki-testbed.apnic.net/repository/A30015AEABE011E290E79B6AA8B6C50A/Rjy-IYEhFYCPJEkZzjBW16Q_TJY.cer
}}}

Trac comment by sra on 2015-11-03T06:33:56Z

[sraustein]

< paranoid tought >

this would be an amusing time for geof to do creative things. i know he
plans to TA 0/0. but he could do other things.

Trac comment by randy on 2015-11-03T06:36:49Z

[sraustein]

< paranoid tought >

this would be an amusing time for geof to do creative things. i know he
plans to TA 0/0. but he could do other things.

All of these were issued 2 November and don't expire until 2030.

But this is the APNIC testbed, so, whatever.

Trac comment by sra on 2015-11-03T06:56:03Z

[sraustein]

rpkigui-rcynic was fixed in [6365] to ignore non-CA certificates in the repository, so this no long happens.

Trac comment by melkins on 2016-04-22T16:02:11Z

[sraustein]

Closed with resolution fixed