Alexander Aleksandrovič Klimov
2c23a7e94f
Merge pull request #8779 from Icinga/probot/sync-changelog/d17b4ecc4bfeb94611e4e8f5c52865540a9bb46b
...
CHANGELOG.md: add v2.9.3
2021-05-20 13:36:20 +02:00
Michael Friedrich
e35719f78e
CHANGELOG.md: add v2.9.3
2021-05-20 11:30:26 +00:00
Noah Hilverling
d17b4ecc4b
Merge pull request #8560 from Icinga/bugfix/children-recover-too-late
...
On recovery: re-check children
v2.11.8
2020-12-15 13:11:46 +01:00
Alexander Aleksandrovič Klimov
7c7f549900
Merge pull request #8567 from Icinga/bugfix/fix-shared-ptr-2.11.8
...
Build fix: Use correct shared pointer implementation
2020-12-15 13:11:27 +01:00
Noah Hilverling
9c433044cc
Build fix: Use correct shared pointer implementation
2020-12-15 13:00:23 +01:00
Noah Hilverling
1cf1e3f6ab
Merge pull request from GHSA-pcmr-2p2f-r7j6
...
Verify certificates against CRL before renewing them (2.11)
2020-12-15 12:30:18 +01:00
Noah Hilverling
221417d2e0
Add security fix to CHANGELOG
2020-12-15 10:49:24 +01:00
Julian Brost
c510fe4dfe
Verify certificates against CRL before renewing them
...
When a CRL is specified in the ApiListener configuration, Icinga 2 only
used it when connections were established so far, but not when a
certificate is requested. This allows a node to automatically renew a
revoked certificate if it meets the other conditions for auto-renewal
(issued before 2017 or expires in less than 30 days).
2020-12-15 10:38:37 +01:00
Alexander Aleksandrovič Klimov
73c085a9b0
Merge pull request #8564 from Icinga/feature/changelog-2.11.8
...
Add 2.11.8 changelog & change VERSION file
2020-12-15 10:30:01 +01:00
Noah Hilverling
1966680c75
Add 2.11.8 changelog & change VERSION file
2020-12-15 10:27:16 +01:00
Alexander A. Klimov
4b0313d3f3
On recovery: re-check children
2020-12-11 16:40:29 +01:00
Alexander A. Klimov
3c15e71e19
Don't fire suppressed notifications if last parent recovery >= last check result
2020-12-11 16:40:29 +01:00
Noah Hilverling
7772022da5
Merge pull request #8550 from Icinga/bugfix/unable-to-toggle-notifications-from-icingaweb2-8533-2.11
...
Fix runtime config updates not working for objects without zone
2020-12-11 09:26:28 +01:00
Noah Hilverling
03b728b83e
Fix runtime config updates not working for objects without zone
...
refs #8533
2020-12-10 17:07:04 +01:00
Noah Hilverling
46708bc055
Merge pull request #8543 from Icinga/bugfix/openssl-error-buffer-2.11
...
Use proper buffer size for OpenSSL error messages (support/2.11)
2020-12-09 15:53:39 +01:00
Julian Brost
905cf5aa65
Use ERR_error_string_n() instead of ERR_error_string()
...
Explicitly pass the actual length of the buffer to avoid overflows.
2020-12-09 12:23:07 +01:00
Julian Brost
3b37867d2e
Increase size of buffer for OpenSSL error messages
...
According to man 3 ERR_error_string, "buf must be at least 256 bytes
long", therefore increase the buffer size to 256 everywhere.
2020-12-09 12:23:07 +01:00
Julian Brost
64a49ee3a1
Remove std::string to_string(const errinfo_openssl_error& e)
...
The function was never used and it's implementation contains a bug where
a buffer of too small size is used as a paramter to ERR_error_string.
According to the `man 3 ERR_error_info`, the buffer has to be at least
256 bytes in size.
Also the function seems of limited use as it allows to output the tag
object used with additional error information for exceptions in Boost.
However, you boost::get_error_info<>() just returns the value type but
not the full tag object from the exception.
2020-12-09 12:22:52 +01:00
Alexander Aleksandrovič Klimov
c0ad8bdb9a
Merge pull request #8510 from Icinga/feature/improve-config-sync-locking-2.11
...
Improve config sync locking (support/2.11)
2020-11-27 17:53:21 +01:00
Julian Brost
072434f3f3
Remove SpinLock
...
No longer needed as its only user now uses std::mutex.
2020-11-27 11:24:17 +01:00
Julian Brost
7d546aa2d8
ApiListener: merge new config validation and actication functions
...
Merge AsyncTryActivateZonesStage and TryActivateZonesStageCallback and
name the result TryActivateZonesStage. The old split was a leftover from
the one being a callback function with no actual meaningful separation.
2020-11-27 11:24:17 +01:00
Julian Brost
a96e6c3861
Use std::mutex instead of Spinlock
2020-11-27 11:24:17 +01:00
Julian Brost
3081d9942d
API filesync: wait for validation process to exit
...
This avoid having to pass a lock implictly using the captured variables
of a lambda.
2020-11-27 11:24:17 +01:00
Julian Brost
fde51ed9f7
Add Process::WaitForResult to allow waiting for the process to finish
2020-11-27 11:24:17 +01:00
Alexander A. Klimov
eb454b8517
Introduce Endpoint#capabilities
...
refs #8034
2020-11-20 17:41:45 +01:00
Alexander A. Klimov
9d574e7702
Fix missing include
...
refs #8034
2020-11-20 17:41:08 +01:00
Alexander A. Klimov
326698ab18
icinga::Hello: document version param
2020-11-20 17:41:08 +01:00
Mattia Codato
ce22f7f227
Add newline ad the end of file
2020-11-20 17:40:58 +01:00
Mattia Codato
c9cc8a7c70
Add timer to clean deadlined executions
2020-11-20 17:40:45 +01:00
Mattia Codato
edd55ef42f
Fix doc for cluster events
2020-11-20 17:40:00 +01:00
Mattia Codato
444d815958
Fix doc execute-command
2020-11-20 17:40:00 +01:00
Mattia Codato
7852d5302c
Fix doc
2020-11-20 17:40:00 +01:00
Mattia Codato
8d8171bf0d
Fix typos
2020-11-20 17:40:00 +01:00
Mattia Codato
4feb10d7db
Fix typo
2020-11-20 17:40:00 +01:00
Mattia Codato
7940402c17
Update doc
2020-11-20 17:39:59 +01:00
Mattia Codato
4559b5a22d
Use ExecuteCommand::ExecuteOverride also for ido check
2020-11-20 17:38:27 +01:00
Mattia Codato
76007d369f
Remove an useless check
2020-11-20 17:38:27 +01:00
Mattia Codato
e4c9616068
Set exit code 126 if endpoint doens't support the new executeCommand API
2020-11-20 17:38:27 +01:00
Mattia Codato
f1f5bb4738
Check child endpoint versions and check child zone can access to the target endpoint
2020-11-20 17:38:27 +01:00
Mattia Codato
85e2f3a479
Check satellites Icinga version before relay the execute command message
2020-11-20 17:38:27 +01:00
Mattia Codato
3516c9c631
Use local zone for update executions
2020-11-20 17:38:27 +01:00
Mattia Codato
1253aa07e4
Change checkable with the endpoint zone for execute command relay message
2020-11-20 17:38:27 +01:00
Mattia Codato
5134eca2ab
Forward the execute command through the zones
2020-11-20 17:38:27 +01:00
Mattia Codato
3edf36658e
Use ternary operator to get ExecuteOverride or checkable command
2020-11-20 17:38:27 +01:00
Mattia Codato
3a105cfe7c
Use ExecuteOverride to override the command
2020-11-20 17:38:27 +01:00
Mattia Codato
ee86f5d7d8
Use MacroResolver::OverrideMacros on *task files
2020-11-20 17:38:27 +01:00
Mattia Codato
ba80ebc7cf
Fix update execution
2020-11-20 17:38:27 +01:00
Mattia Codato
bb2726a44e
Fix macros substitutions
2020-11-20 17:38:27 +01:00
Mattia Codato
dad2a3e786
Notify to all nodes that execution has completed
2020-11-20 17:38:27 +01:00
Mattia Codato
f790b7699d
Check if last check result is null before executing the command
2020-11-20 17:38:27 +01:00