5436 Commits

Author SHA1 Message Date
Julian Brost
d320b6ac50 Add comments to stack trace formatter and test case 2021-03-01 16:26:58 +01:00
Julian Brost
3c5da0ba3c Use backtrace_symbols() when printing stack traces on FreeBSD
Unfortunately, the symbol resolution of boost::stacktrace is broken on
FreeBSD, therefore fall back to using backtrace_symbols() to print the
stack trace saved by Boost.

Additionally, -D_GNU_SOURCE is required on FreeBSD for the
_Unwind_Backtrace function used by boost::stacktrace.
2021-03-01 16:26:58 +01:00
Julian Brost
5b915965be Crash handlers: use more compact string representation 2021-03-01 16:26:58 +01:00
Julian Brost
7f278f1a59 Begin crash log for SIGABRT with error message and timestamp
This makes the format more similar to what the uncaught C++ and SEH
exception handlers write. Previously there was no indication in the
crash log that a SIGABRT happened.
2021-03-01 16:26:58 +01:00
Julian Brost
12e97d2bcf Add some comments to __cxa_throw
Maybe this will save the next person who has to look at this code some
time. Please don't blame me for the implementation, I'm just trying to
reconstruct what it does.
2021-03-01 16:26:58 +01:00
Julian Brost
c2181ae325 Restructure stack and context trace selection in DiagnosticInformation and document behavior
The logic for selecting the traces to print stays the same, but there
are fewer nested ifs now. This changes the format of the returned string
a bit by adding a heading for both traces.
2021-03-01 16:26:58 +01:00
Julian Brost
9513752761 Add documentation for cast_exception function 2021-03-01 16:26:58 +01:00
Julian Brost
ac3952ea07 Pass fallback stacktrace to DiagnosticInformation in terminate handler
By default, DiagnosticInformation uses the stack trace saved when the
exception was thrown, but this mechanism is not in use on Windows.
Gathering a stacktrace in the terminate handler serves as a fallback.
2021-03-01 16:26:58 +01:00
Julian Brost
c959835339 Replace icinga::StackTrace with boost::stacktrace::stacktrace
Provides roughly the same functionality but works better on certain
platforms (especially Windows) and is less code to maintain.
2021-03-01 16:26:58 +01:00
Julian Brost
723201f97e Print details in uncaught SEH exception handler 2021-03-01 16:26:58 +01:00
Julian Brost
930d09a140 Move error message and time to the beginning of the SEH crash log
This is more similar to the normal exception crashlog which also states
the problem and time at the beginning of the file.
2021-03-01 16:26:58 +01:00
Julian Brost
55cbe11a3d Use boost::stacktrace instead of custom implementation in Windows SEH filter 2021-03-01 16:26:58 +01:00
Julian Brost
659d5dc1dd Run termination handler for uncaught C++ exceptions on Windows
On Windows, the termination handler is executed for uncaught C++
exceptions unless a SEH unhandled exception filter is also set. In this
case, this filter has to explicitly chain the default filter to keep
this behavior.
2021-03-01 16:26:58 +01:00
Julian Brost
74a4f6cdec Try to log useful information for exceptions thrown by RunWorker 2021-03-01 16:26:55 +01:00
Julian Brost
333c635354 Catch exceptions thrown by RunWorker on Windows
The same is already done on other platforms in line 529.
2021-03-01 16:26:55 +01:00
Noah Hilverling
2cb995e937
Merge pull request from GHSA-pcmr-2p2f-r7j6
Verify certificates against CRL before renewing them (2.12)
2020-12-15 12:30:19 +01:00
Julian Brost
abbd7d5494 Allow specifying a CRL in icinga2 pki verify 2020-12-15 10:33:38 +01:00
Julian Brost
cae22a89da Verify certificates against CRL before renewing them
When a CRL is specified in the ApiListener configuration, Icinga 2 only
used it when connections were established so far, but not when a
certificate is requested. This allows a node to automatically renew a
revoked certificate if it meets the other conditions for auto-renewal
(issued before 2017 or expires in less than 30 days).
2020-12-15 10:33:38 +01:00
Julian Brost
c868010884 Use ERR_error_string_n() instead of ERR_error_string()
Explicitly pass the actual length of the buffer to avoid overflows.
2020-12-15 08:29:37 +01:00
Julian Brost
1f945add50 Increase size of buffer for OpenSSL error messages
According to man 3 ERR_error_string, "buf must be at least 256 bytes
long", therefore increase the buffer size to 256 everywhere.
2020-12-15 08:29:37 +01:00
Julian Brost
159ccced65 Remove std::string to_string(const errinfo_openssl_error& e)
The function was never used and it's implementation contains a bug where
a buffer of too small size is used as a paramter to ERR_error_string.
According to the `man 3 ERR_error_info`, the buffer has to be at least
256 bytes in size.

Also the function seems of limited use as it allows to output the tag
object used with additional error information for exceptions in Boost.
However, you boost::get_error_info<>() just returns the value type but
not the full tag object from the exception.
2020-12-15 08:29:37 +01:00
Noah Hilverling
c89636fcaa
Merge pull request #8549 from Icinga/bugfix/unable-to-toggle-notifications-from-icingaweb2-8533-2.12
Fix runtime config updates not working for objects without zone
2020-12-14 13:28:51 +01:00
Alexander Aleksandrovič Klimov
2ed72c0947
Merge pull request #8506 from Icinga/bugfix/children-recover-too-late
On recovery: re-check children
2020-12-11 15:41:49 +01:00
Noah Hilverling
11486faeba Fix runtime config updates not working for objects without zone
refs #8533
2020-12-11 09:36:39 +01:00
Alexander A. Klimov
854939a8ce On recovery: re-check children 2020-12-02 12:24:40 +01:00
Alexander A. Klimov
668bf06424 Don't fire suppressed notifications if last parent recovery >= last check result 2020-12-02 12:03:19 +01:00
Julian Brost
e7d9c5138b Remove SpinLock
No longer needed as its only user now uses std::mutex.
2020-11-27 11:32:11 +01:00
Julian Brost
9dab8644d1 ApiListener: merge new config validation and actication functions
Merge AsyncTryActivateZonesStage and TryActivateZonesStageCallback and
name the result TryActivateZonesStage. The old split was a leftover from
the one being a callback function with no actual meaningful separation.
2020-11-27 11:32:11 +01:00
Julian Brost
07b9c62c98 Use std::mutex instead of Spinlock 2020-11-27 11:32:11 +01:00
Julian Brost
c5d8248e78 API filesync: wait for validation process to exit
This avoid having to pass a lock implictly using the captured variables
of a lambda.
2020-11-27 11:32:10 +01:00
Julian Brost
867a3c0216 Add Process::WaitForResult to allow waiting for the process to finish 2020-11-27 11:32:10 +01:00
Julian Brost
9f8ff26d88
Merge pull request #8496 from Icinga/bugfix/replay-log-blocks
Start ApiListener#SyncClient() in the thread pool
2020-11-23 13:28:46 +01:00
Julian Brost
e589257d1b
Merge pull request #8495 from Icinga/bugfix/config-sync-only-remove-files-if-timestamp-changed
Config sync: Only remove files, if timestamp changed
2020-11-23 12:37:20 +01:00
Alexander A. Klimov
748993af8a Start ApiListener#SyncClient() in the thread pool
... not hosting the coroutines not to block them.

Otherwise a large replay log would block messages sending
until the peer disconnects us.
2020-11-23 12:07:08 +01:00
Julian Brost
91119c8946
Merge pull request #8465 from Icinga/feature/one-connection
ApiListener#NewClientHandlerInternal(): reject connections from already connected endpoints
2020-11-23 12:03:18 +01:00
Julian Brost
611aa39468
Merge pull request #8467 from Icinga/feature/http-status-codes-in-icinga-mainlog-7053
Include HTTP status codes in log
2020-11-23 11:59:05 +01:00
Alexander Aleksandrovič Klimov
a5dc71ebab
Merge pull request #8474 from Icinga/bugfix/message-routing-for-global-zones-2.12
Fix cluster message routing for global zones
2020-11-23 11:55:23 +01:00
Alexander Aleksandrovič Klimov
9fb776bb0f
Merge pull request #8461 from Icinga/bugfix/do-not-accept-api-updates-for-unknown-zone-2.12.2
API: Don't accept object updates for unknown zone
2020-11-23 11:54:08 +01:00
Noah Hilverling
7f232d6007 Config sync: Only remove files, if timestamp changed 2020-11-23 11:39:46 +01:00
Julian Brost
b9f0f6ed40 Close anonymous connections after 10 seconds
Anonymous connections are normally only used for requesting a
certificate and are closed after this request is received. However, the
request is only sent if the child has successfully verified the
certificate of its parent so that it is an authenticated connection from
its perspective. In case this verification fails, both ends view it as
an anonymous connection and never actually use it but attempt a
reconnect after 10 seconds leaking the connection. Therefore close it
after a timeout.
2020-11-13 16:33:40 +01:00
Julian Brost
0e98a52763 Fix cluster message routing for global zones
RelayMessageOne used to relay the message only to one other endpoint for
other zones, which is fine, as long as the target zone is a child/parent
zone but breaks if the target zone is a global one. In this case, the
message has to be forwarded within the local zone as well as to one node
in each child zone.
2020-11-12 09:50:35 +01:00
Julian Brost
5cf90805c8 Log config object deletions to replay log
The initial config object sync for each new connection (in
`ApiListener::SendRuntimeConfigObjects()`) only considers currently
existing objects and has no way to pass the information that objects
were deleted in the meantime.

This commit logs config object deletions to the replay log if required
so that there is a chance that it will be propagated to nodes that were
offline when the deletion happened.

Note that this can only be considered a workaround as the replay log
might be pruned or could even be completely disabled. Also, there still
seems to be a race-condition between the config sync and replay log of
multiple new connections at the same time.
2020-11-10 17:42:43 +01:00
Noah Hilverling
a2d14dcdd2 API: Don't accept object updates for unknown zone 2020-11-09 16:37:25 +01:00
Alexander A. Klimov
29e5d7def7 Include HTTP status codes in log
refs #7053
2020-11-09 10:20:13 +01:00
Alexander A. Klimov
38110e55d3 ApiListener#NewClientHandlerInternal(): reject connections from already connected endpoints 2020-10-26 15:20:58 +01:00
Alexander Aleksandrovič Klimov
cdee5a6069
Merge pull request #8379 from Icinga/bugfix/ido-do-not-log-if-paused-2.12
IDO: Do not log, if paused
2020-10-15 11:42:40 +02:00
Alexander Aleksandrovič Klimov
494f52b115
Merge pull request #8376 from Icinga/bugfix/docker-memory-leak
icinga2 daemon: reap remaining child processes after reload
2020-10-15 11:26:50 +02:00
Noah Hilverling
ceb00ba8c3 IDO: Do not log stats, if paused 2020-10-15 10:39:21 +02:00
Alexander A. Klimov
91265a5b0e icinga2 daemon: reap remaining child processes after reload
... as we may be PID 1.
2020-10-15 10:25:14 +02:00
Noah Hilverling
47a6daf341
Merge pull request #8293 from Icinga/bugfix/icinga2-doesn-t-close-connections-7203
Add timeout for boost::asio::ssl::stream#async_shutdown()
2020-10-14 09:44:12 +02:00