11996 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
Michael Friedrich	e4e26d66a6	Build fix	2020-02-17 18:40:28 +01:00
Michael Friedrich	a37472c479	Docs: Add pki verify and adopt TLS certificate troubleshooting	2020-02-17 18:17:44 +01:00
Michael Friedrich	6f263a4922	Add pki verify CLI command: print, signed by CA, valid CA, CN match	2020-02-17 18:10:51 +01:00
Michael Friedrich	a91b9f2ddf	Pki: Extend GetCertificateInformation() with version, serial, signature algorithm, SANs	2020-02-17 17:44:10 +01:00
Michael Friedrich	24397fbee8	CA Proxy: Catch exceptions from VerifyCertificate()	2020-02-17 17:43:11 +01:00
Michael Friedrich	548eb933c9	TlsUtility: Add getters for version, signature algorithm, SANs	2020-02-17 17:42:20 +01:00
Henrik Triem	099cc5d8df	Merge pull request #7833 from Icinga/feature/version-build-info-openssl ... CLI: Add OpenSSL version to 'Build' section in --version	2020-02-17 17:07:51 +01:00
Alexander A. Klimov	fbce756007	JsonRpcConnection#Send*Message(): keep this alive	2020-02-17 16:12:07 +01:00
Michael Friedrich	cfd9b80027	Merge pull request #7838 from Icinga/bugfix/catch-exception-in-node-setup ... Catch exception when trusted cert is not readable during node setup on agent/satellite	2020-02-14 09:51:17 +01:00
Michael Friedrich	b32ae4e8c1	Merge pull request #7835 from Icinga/feature/improve-node-setup-save-cert-cli ... Improve experience with 'Node Setup for Agents/Satellite'	2020-02-14 08:58:55 +01:00
Michael Friedrich	71c7eebe4e	CLI: Add OpenSSL version to 'Build' section in --version ... This helps to see against which OpenSSL version Icinga was built. Inspired by #5572	2020-02-14 08:55:39 +01:00
Michael Insel	e4f25269fe	Fix Build ... I have no idea how this got lost.	2020-02-14 07:56:23 +01:00
Michael Insel	90ac6cd9a1	CLI: Catch exception when trusted cert is not readable ... This catches an exception when the trusted cert is not readable during node setup.	2020-02-13 20:03:17 +01:00
Michael Friedrich	9028610735	Docs: Improve the 'automated node setup' chapter ... - Refine why the parent certificate is needed to prevent MITM attacks - Add sample output from 'pki save-cert' - Align parameter names and cross-links	2020-02-13 16:15:50 +01:00
Michael Friedrich	e65a27465c	Docs: Mention the removal of the deprecated parameters for 'pki save-cert'	2020-02-13 16:15:26 +01:00
Michael Friedrich	82e055bfb6	CLI: Clean up 'pki save-cert' command and remove deprecated params ... This got obsoleted 4 years ago in a monster commit. b297e8cfa7	2020-02-13 16:14:01 +01:00
Michael Friedrich	e1557def94	CLI: Verify --trustedcert being a client, non CA certificate in 'node setup' ... This commit also cleans some shell output with master vs. parent.	2020-02-13 16:09:16 +01:00
Michael Friedrich	a7436394cd	TlsUtility: Add IsCa() function to verify given certificate being a CA certificate	2020-02-13 16:03:43 +01:00
Michael Friedrich	be2178b993	Merge pull request #7824 from Icinga/bugfix/doc-debian-env-wrong-docker-image ... Doc: Fix wrong docker image for debian developemnt environment	2020-02-12 11:27:03 +01:00
Michael Insel	34417bef65	Doc: Fix wrong docker image for debian developemnt environment ... Fixes a small typo. The Debian based development environment should use the debian docker image instead of the ubuntu image.	2020-02-12 11:12:35 +01:00
Michael Friedrich	d53eb34520	Unify Application::GetStartTime() and drop GetMainTime() ... This essentially moves the start time into the scope when main starts to "do something", after the reload and configuration handling is done.	2020-02-11 17:26:15 +01:00
Michael Friedrich	57facbddd5	Merge pull request #7697 from Icinga/bugfix/icingadb-compiler-warnings ... IcingaDB: Fix enumeral mismatch compiler warnings	2020-02-11 17:22:28 +01:00
Michael Friedrich	ed58922389	Merge pull request #7785 from Icinga/feature/multi-parent-dependencies ... Change behaviour of multiple dependencies (all failed = unreachable)	2020-02-11 17:20:04 +01:00
Michael Friedrich	ae8a0b6a64	Introduce Application::GetUptime()	2020-02-11 16:47:50 +01:00
Michael Friedrich	a9214f7be4	Upgrading docs: Add multi parent dependencies with changed reachability logic	2020-02-11 15:50:04 +01:00
Michael Friedrich	3a4fb840d4	Tests: Add multi parent dependency test case	2020-02-11 15:13:25 +01:00
Michael Friedrich	9b0365ab43	Fix logical error with zero dependencies in IsReachable()	2020-02-11 15:13:25 +01:00
Michael Friedrich	76d531b4f0	Unit tests: Also test reachability in icinga_checkresult/* tests	2020-02-11 15:13:25 +01:00
Henrik Triem	d0c0beb8be	Change behaviour of multiple dependencies (all failed = unreachable)	2020-02-11 15:13:25 +01:00
Michael Insel	5930d640e4	IcingaDB: Fix enumeral mismatch compiler warnings ... This fixes 3 enumeral mismatch compiler warnings when building the IcingaDB target.	2020-02-10 18:56:11 +01:00
Michael Friedrich	2f82047737	Merge pull request #7769 from Icinga/bugfix/m_lexbuffer ... Make ConfigCompiler#m_LexBuffer a String	2020-02-10 16:27:42 +01:00
Michael Friedrich	04edda531c	Merge pull request #7788 from Icinga/bugfix/windows-timeout-unknown-state ... Terminate windows check processes with UNKNOWN state on timeout	2020-02-10 15:34:28 +01:00
Michael Friedrich	ccd354c16c	Merge pull request #7810 from Icinga/bugfix/spawncoroutine-copy ... IoEngine#SpawnCoroutine(): don't copy parameter	2020-02-10 15:31:31 +01:00
Michael Friedrich	d99f76bdae	Merge pull request #7767 from Icinga/bugfix/replay-log-windows-rename ... Ensure that log replay files are properly renamed on Windows	2020-02-10 11:42:25 +01:00
Michael Friedrich	8324970ab9	Merge pull request #7809 from Icinga/bugfix/handshake-timeout-7805 ... Close connections w/o sucessful TLS handshakes during 10s	2020-02-07 16:01:30 +01:00
Michael Friedrich	37f022e58c	Dev Docs: Update debugging instructions	2020-02-06 15:40:11 +01:00
Michael Friedrich	7488d2614b	Merge pull request #7811 from Icinga/bugfix/config-sync-log ... Cluster config sync: Use a more friendly message when configs are equal and don't need a reload	2020-02-06 14:32:46 +01:00
Michael Friedrich	bf2d6abfad	Merge pull request #7747 from Icinga/bugfix/heartbeat-unauthenticated-7746 ... Don't send event::Heartbeat to unauthenticated peers	2020-02-06 14:32:25 +01:00
Michael Friedrich	77a0b8423d	Merge pull request #7817 from Icinga/bugfix/quality-apievents ... ApiEvents: Fix AcknowledgementCleared code quality	2020-02-06 13:37:25 +01:00
Michael Friedrich	f961370e36	ApiEvents: Fix AcknowledgementCleared code quality	2020-02-06 13:03:04 +01:00
Alexander A. Klimov	35c9f2e7b3	Close connections w/o sucessful TLS handshakes during 10s ... refs #7805	2020-02-05 15:53:56 +01:00
Alexander A. Klimov	0ed0f73d9d	IoEngine#SpawnCoroutine(): remove redundand overload	2020-02-05 15:31:57 +01:00
Michael Friedrich	cdfc6e6f50	Cluster config sync: Use a more friendly message when configs are equal and don't need a reload ... This also adds an entry to the troubleshooting docs.	2020-02-05 15:31:41 +01:00
Alexander A. Klimov	d98493c90f	IoEngine#SpawnCoroutine(): don't copy parameter	2020-02-05 15:30:03 +01:00
Noah Hilverling	572c912c96	Merge pull request #7804 from Icinga/bugfix/not-overdue-active-checks-disabled-7790 ... Checkable#next_update: ignore re-scheduled #next_check if !#enable_active_checks	2020-01-31 14:17:30 +01:00
Alexander Aleksandrovič Klimov	431e4f64c9	Merge pull request #7794 from Icinga/bugfix/icingadb-fix-last-update ... IcingaDB: Fix last_update	2020-01-31 12:12:49 +01:00
Alexander A. Klimov	86bbb79869	Checkable#next_update: ignore re-scheduled #next_check if !#enable_active_checks ... refs #7790	2020-01-31 11:49:47 +01:00
Noah Hilverling	b77bc7b963	IcingaDB: Fix last_update	2020-01-29 14:43:29 +01:00
Alexander Aleksandrovič Klimov	c37c40d8c6	Merge pull request #7793 from Icinga/feature/dev-debug-delay-worker ... Dev: Allow to delay main worker process in order to attach with LLDB	2020-01-29 13:05:08 +00:00
Michael Friedrich	5812dae55b	Dev: Allow to delay main worker process in order to attach with LLDB ... Introduce `-DInternal.DebugWorkerDelay=120` and sleep inside `RunWorker()`. Rationale: With 2.11 we've introduced a real umbrella process where the main process is spawned as child fork. Running icinga2 in foreground on a macOS shell with LLDB will now exit, and not follow the child process. LLDB doesn't support `follow-fork-mode child` like GDB and therefore we need to: - Print the child process PID - Sleep for X seconds to allow the developer to run `lldb -p <PID>`, set breakpoints, etc. This commit also documents all available debug build enabled internal constants.	2020-01-29 13:21:05 +01:00