12111 Commits

Author SHA1 Message Date
Michael Friedrich
e17d9544b8 Remove contrib/ directory
The scripts in there have been introduced years ago,
but neither do we support them nor are there any plans
to go further. Git history allows to restore them anyways.
2020-02-27 13:33:13 +01:00
Michael Friedrich
13d2416e29 Fix regression from JsonRPC PKI CA verification checks
refs #7835
2020-02-27 12:31:02 +01:00
Michael Friedrich
8e62fc8efb Fix 'check_timeout' not being forwarded to agent command endpoints
fixes #6992
2020-02-27 11:46:52 +01:00
Michael Friedrich
cbbf12c590
Merge pull request #7860 from pdorschner/patch-1
Fix translation
2020-02-27 08:56:42 +01:00
Dirk Goetz
cdc7a820f6 SELinux: Let safe-reload run in icinga2_t
Fixes #7832
2020-02-27 08:45:33 +01:00
Philipp Dorschner
d674f34b4b
Fix Translation 2020-02-27 07:52:03 +01:00
Christian Jonak
a531889aba Add new Projects to documentation
* icinga2apic: Python API binding continued with community fixes & features
* Icinga-telegram-bot: A Telegram bot using the Icinga 2 API
2020-02-26 19:55:51 +01:00
Michael Friedrich
59354e8bbe
Merge pull request #7853 from Icinga/bugfix/windows-setup-save-cert
Windows setup wizard: Remove deprecated parameters for 'pki save-cert'
2020-02-26 09:49:39 +01:00
Michael Friedrich
4f1061203b Windows setup wizard: Remove deprecated parameters for 'pki save-cert' 2020-02-25 12:50:06 +01:00
Michael Friedrich
06d0c3ea4e
Merge pull request #7843 from Icinga/feature/cli-pki-verify
CLI: Add `pki verify` command for better TLS certificate troubleshooting
2020-02-25 09:07:24 +01:00
Michael Friedrich
fdb13d1b7d TlsUtility: Replace deprecated OpenSSL function with ASN1_STRING_get0_data() 2020-02-21 13:02:58 +01:00
Michael Friedrich
456b0779bb JsonRpcConnection PKI: Document swalled exception 2020-02-20 15:15:54 +01:00
Michael Friedrich
12b6c1aab9 CLI: Improve error handling for 'pki verify' command 2020-02-20 15:10:57 +01:00
Alexander A. Klimov
0f84ce0470 Consider a JsonRpcConnection being seen on a single byte of TLS payload, not only a whole message 2020-02-19 11:11:53 +01:00
Alexander A. Klimov
b65aed1dd3 IoEngine#SpawnCoroutine(): always terminate coroutines cleanly 2020-02-19 10:51:26 +01:00
Michael Friedrich
e4e26d66a6 Build fix 2020-02-17 18:40:28 +01:00
Michael Friedrich
a37472c479 Docs: Add pki verify and adopt TLS certificate troubleshooting 2020-02-17 18:17:44 +01:00
Michael Friedrich
6f263a4922 Add pki verify CLI command: print, signed by CA, valid CA, CN match 2020-02-17 18:10:51 +01:00
Michael Friedrich
a91b9f2ddf Pki: Extend GetCertificateInformation() with version, serial, signature algorithm, SANs 2020-02-17 17:44:10 +01:00
Michael Friedrich
24397fbee8 CA Proxy: Catch exceptions from VerifyCertificate() 2020-02-17 17:43:11 +01:00
Michael Friedrich
548eb933c9 TlsUtility: Add getters for version, signature algorithm, SANs 2020-02-17 17:42:20 +01:00
Henrik Triem
099cc5d8df
Merge pull request #7833 from Icinga/feature/version-build-info-openssl
CLI: Add OpenSSL version to 'Build' section in --version
2020-02-17 17:07:51 +01:00
Alexander A. Klimov
fbce756007 JsonRpcConnection#Send*Message(): keep this alive 2020-02-17 16:12:07 +01:00
Michael Friedrich
cfd9b80027
Merge pull request #7838 from Icinga/bugfix/catch-exception-in-node-setup
Catch exception when trusted cert is not readable during node setup on agent/satellite
2020-02-14 09:51:17 +01:00
Michael Friedrich
b32ae4e8c1
Merge pull request #7835 from Icinga/feature/improve-node-setup-save-cert-cli
Improve experience with 'Node Setup for Agents/Satellite'
2020-02-14 08:58:55 +01:00
Michael Friedrich
71c7eebe4e CLI: Add OpenSSL version to 'Build' section in --version
This helps to see against which OpenSSL version Icinga was built.
Inspired by #5572
2020-02-14 08:55:39 +01:00
Michael Insel
e4f25269fe
Fix Build
I have no idea how this got lost.
2020-02-14 07:56:23 +01:00
Michael Insel
90ac6cd9a1 CLI: Catch exception when trusted cert is not readable
This catches an exception when the trusted cert is not readable during
node setup.
2020-02-13 20:03:17 +01:00
Michael Friedrich
9028610735 Docs: Improve the 'automated node setup' chapter
- Refine why the parent certificate is needed to prevent MITM attacks
- Add sample output from 'pki save-cert'
- Align parameter names and cross-links
2020-02-13 16:15:50 +01:00
Michael Friedrich
e65a27465c Docs: Mention the removal of the deprecated parameters for 'pki save-cert' 2020-02-13 16:15:26 +01:00
Michael Friedrich
82e055bfb6 CLI: Clean up 'pki save-cert' command and remove deprecated params
This got obsoleted 4 years ago in a monster commit.
b297e8cfa7
2020-02-13 16:14:01 +01:00
Michael Friedrich
e1557def94 CLI: Verify --trustedcert being a client, non CA certificate in 'node setup'
This commit also cleans some shell output with master vs. parent.
2020-02-13 16:09:16 +01:00
Michael Friedrich
a7436394cd TlsUtility: Add IsCa() function to verify given certificate being a CA certificate 2020-02-13 16:03:43 +01:00
Michael Friedrich
be2178b993
Merge pull request #7824 from Icinga/bugfix/doc-debian-env-wrong-docker-image
Doc: Fix wrong docker image for debian developemnt environment
2020-02-12 11:27:03 +01:00
Michael Insel
34417bef65
Doc: Fix wrong docker image for debian developemnt environment
Fixes a small typo. The Debian based development environment should use the debian docker image instead of the ubuntu image.
2020-02-12 11:12:35 +01:00
Michael Friedrich
d53eb34520 Unify Application::GetStartTime() and drop GetMainTime()
This essentially moves the start time into the scope when main
starts to "do something", after the reload and configuration handling
is done.
2020-02-11 17:26:15 +01:00
Michael Friedrich
57facbddd5
Merge pull request #7697 from Icinga/bugfix/icingadb-compiler-warnings
IcingaDB: Fix enumeral mismatch compiler warnings
2020-02-11 17:22:28 +01:00
Michael Friedrich
ed58922389
Merge pull request #7785 from Icinga/feature/multi-parent-dependencies
Change behaviour of multiple dependencies (all failed = unreachable)
2020-02-11 17:20:04 +01:00
Michael Friedrich
ae8a0b6a64 Introduce Application::GetUptime() 2020-02-11 16:47:50 +01:00
Michael Friedrich
a9214f7be4 Upgrading docs: Add multi parent dependencies with changed reachability logic 2020-02-11 15:50:04 +01:00
Michael Friedrich
3a4fb840d4 Tests: Add multi parent dependency test case 2020-02-11 15:13:25 +01:00
Michael Friedrich
9b0365ab43 Fix logical error with zero dependencies in IsReachable() 2020-02-11 15:13:25 +01:00
Michael Friedrich
76d531b4f0 Unit tests: Also test reachability in icinga_checkresult/* tests 2020-02-11 15:13:25 +01:00
Henrik Triem
d0c0beb8be Change behaviour of multiple dependencies (all failed = unreachable) 2020-02-11 15:13:25 +01:00
Michael Insel
5930d640e4 IcingaDB: Fix enumeral mismatch compiler warnings
This fixes 3 enumeral mismatch compiler warnings when building the
IcingaDB target.
2020-02-10 18:56:11 +01:00
Michael Friedrich
2f82047737
Merge pull request #7769 from Icinga/bugfix/m_lexbuffer
Make ConfigCompiler#m_LexBuffer a String
2020-02-10 16:27:42 +01:00
Michael Friedrich
04edda531c
Merge pull request #7788 from Icinga/bugfix/windows-timeout-unknown-state
Terminate windows check processes with UNKNOWN state on timeout
2020-02-10 15:34:28 +01:00
Michael Friedrich
ccd354c16c
Merge pull request #7810 from Icinga/bugfix/spawncoroutine-copy
IoEngine#SpawnCoroutine(): don't copy parameter
2020-02-10 15:31:31 +01:00
Michael Friedrich
d99f76bdae Merge pull request #7767 from Icinga/bugfix/replay-log-windows-rename
Ensure that log replay files are properly renamed on Windows
2020-02-10 11:42:25 +01:00
Michael Friedrich
8324970ab9
Merge pull request #7809 from Icinga/bugfix/handshake-timeout-7805
Close connections w/o sucessful TLS handshakes during 10s
2020-02-07 16:01:30 +01:00