tyler.durden
/
icinga2
mirror of https://github.com/Icinga/icinga2.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
8,826 Commits 347 Branches 117 Tags 197 MiB
Commit Graph

84 Commits

Author SHA1 Message Date
Gunnar Beutner 1ad83886ac Replace a few more NULLs with nullptr 2017-12-14 15:37:20 +01:00
Gunnar Beutner 42744fde5b Remove extraneous whitespace 2017-12-14 08:50:09 +01:00
Gunnar Beutner 6d09efc907 Use std::shared_ptr instead of boost::shared_ptr 2017-11-30 17:41:00 +01:00
Gunnar Beutner 6b3931973e
Merge pull request #5555 from Icinga/feature/ecc-certs 
Implement support for ECC certificates
 2017-11-27 15:11:04 +01:00
Michael Friedrich 9a04a99400 Merge pull request #5554 from Icinga/feature/cn-check-for-san 
Add subjectAltName extension for all non-CA certificates
 2017-10-10 17:50:01 +02:00
Gunnar Beutner 774936bfe8 Implement support for pki::UpdateCertificate messages 
refs #5450
 2017-09-12 12:52:49 +02:00
Gunnar Beutner 0ec07bce51 Implement support for updating client certificates 
refs #5450
 2017-09-12 12:52:49 +02:00
Gunnar Beutner abdd4b307b Implement the 'ca list' and 'ca sign' CLI commands 
refs #5450
 2017-09-12 12:52:49 +02:00
Gunnar Beutner 510e2d622a Implement support for ticket-less certificate requests 
refs #5450
 2017-09-12 12:52:49 +02:00
Gunnar Beutner 10691db5b1 Implement support for ECC certificates 2017-09-06 12:29:30 +02:00
Gunnar Beutner 3385122bc3 Add subjectAltName extension for all non-CA certificates 2017-09-06 12:25:36 +02:00
Michael Friedrich 79c45ea811 Build fix for OpenSSL 0.9.8 and stack_st_X509_EXTENSION 2017-05-26 13:16:20 +02:00
Gunnar Beutner b366483466 Add subjectAltName X509 ext for certificate requests 2017-05-11 15:38:17 +02:00
Gunnar Beutner 0c25d14d0c Fix crash in SHA1 
refs #4991
 2017-03-29 10:17:03 +02:00
Michael Friedrich 0b466aabc0 Start working on checksum config dump 
refs #4991
 2017-03-29 10:17:03 +02:00
Sebastian Marsching 118d36f384 Fixed return code check in CRL loading 
The code for loading CRLs was incorrectly assuming that OpenSSL's
X509_LOOKUP_load_file function returns zero on success, but actually it
returns one on success. This commit fixes this return code check so
that a CRL can be loaded.

fixes #5040

Signed-off-by: Gunnar Beutner <gunnar.beutner@icinga.com>
 2017-02-28 14:08:24 +01:00
Michael Friedrich b7caf0820d Ensure that *.icinga.com is used everywhere 
fixes #13897
fixes #13277
 2017-01-10 17:19:12 +01:00
Gunnar Beutner 0df4b4edfb Fix incorrect #ifdef 
fixes #12749
 2016-09-28 08:30:47 +02:00
Gunnar Beutner ec87b9e795 Use hash-based serial numbers for new certificates 
fixes #12453
 2016-08-16 15:03:01 +02:00
Gunnar Beutner 231fd8d38b Build fix for CentOS 5 
refs #11292
 2016-08-08 15:27:16 +02:00
Uwe Ebel b2ac05ad7d Make the minimum TLS protocol version configurable 
The ApiListener accepts all TLS versions that the underlying
OpenSSL library supports. This patch give the ability to restrict
the connection to a minimum TLS version.

fixes #11292

Signed-off-by: Gunnar Beutner <gunnar.beutner@netways.de>
 2016-08-03 07:46:50 +02:00
Michael Friedrich e712d6ffe7 Fix error message for specified ciphers 
refs #11063
 2016-07-19 20:13:34 +02:00
Uwe Ebel 1ca8b293cb Make the cipher list configurable for TLS streams 
fixes #11063

Signed-off-by: Gunnar Beutner <gunnar.beutner@netways.de>
 2016-07-18 13:40:00 +02:00
Gunnar Beutner 6de6ea5e42 Build fix for OpenSSL 1.1.0 
fixes #12044
 2016-06-27 08:28:22 +02:00
Gunnar Beutner 8b7d59eb34 Implement support for subjectAltName in SSL certificates 
fixes #11556
 2016-04-21 15:25:57 +02:00
Tobias von der Krone ce3062904f Use the server's preferred cipher for the API connection 
When using SSL_OP_CIPHER_SERVER_PREFERENCE the server's preferred cipher
is used instead of the client preference, see
https://www.openssl.org/docs/manmaster/ssl/SSL_CTX_set_options.html

fixes #11290
 2016-03-04 14:57:06 +01:00
Gunnar Beutner 23edd6cb8f Add missing comment 
refs #10988
 2016-01-26 08:35:29 +01:00
Michael Friedrich a4562fb433 Only set SSL_OP_NO_COMPRESSION if supported 
OpenSSL 0.9.8 does not support this flag.

fixes #10988
 2016-01-25 14:53:26 +01:00
Tobias von der Krone 1c67bf394c Support TLSv1.1 and TLSv1.2 for the cluster transport encryption 
From https://wiki.openssl.org/index.php/SSL/TLS_Client:
SSLv23_method specifies the protocols used and behavior of the handshake.
The method essentially means SSLv2 or above, and includes the TLS protocols.
The protocols are further tuned through SSL/TLS options. By using
SSLv23_method (and removing the SSL protocols with SSL_OP_NO_SSLv2 and
SSL_OP_NO_SSLv3), then you will use TLS v1.0 and above, including TLS v1.2.
You will also use a TLS handshake in the TLS Record.

If you use TLSv1_method, then you will only use TLS v1.0.

fixes #10988
 2016-01-20 16:48:00 +01:00
Jean Flach cb70d97dcf Plug two memory leaks 
refs #10963
 2016-01-15 10:11:52 +01:00
Gunnar Beutner 599929b0f6 Update copyright headers for 2016 2016-01-12 08:29:59 +01:00
Michael Friedrich f0a5a0c23c Fix openssl certificate not after overflow on rhel5 
refs #10266
 2015-10-02 12:11:21 +02:00
Michael Friedrich 9a2ae6e58f Fix missing zero padding for generated CA serial 
fixes #10074
 2015-09-03 17:12:01 +02:00
Gunnar Beutner c37a23ccba Implement the Icinga Studio application 
fixes #10042
 2015-08-31 07:50:01 +02:00
Gunnar Beutner 5a72eaa768 Make sure the serial number field is always initialized 
fixes #9947
 2015-08-18 15:05:53 +02:00
Gunnar Beutner 0b495d1858 Set correct X509 version for certificates 
fixes #9769
 2015-07-29 12:59:12 +02:00
Gunnar Beutner b357012ded Implement HTTP support 
refs #9447
 2015-07-09 11:42:34 +02:00
Gunnar Beutner c08aa37c99 Fix crash in MakeX509CSR when using ancient versions of OpenSSL 
fixes #8844
 2015-03-26 08:23:24 +01:00
Gunnar Beutner bb393a9d4f Remove unused variables 2015-03-02 12:52:37 +01:00
Michael Friedrich 78bfd0204c Update copyright year 2015-01-22 12:00:23 +01:00
Gunnar Beutner 55b7f00382 Remove unnecessary includes 2014-12-15 10:16:06 +01:00
Gunnar Beutner a8b7710800 Fix crash in CreateCert 
fixes #7862
 2014-11-27 09:35:24 +01:00
Gunnar Beutner 478f03b49a Replace boost::shared_ptr with boost::intrusive_ptr 
refs #7622
 2014-11-09 16:54:41 +01:00
Gunnar Beutner 196bd89c7a Use OpenSSL's default algorithms for certificate signatures 
fixes #7434
 2014-10-27 11:32:39 +01:00
Gunnar Beutner 8ce4b3f122 Implement support for serial files 
fixes #7393
 2014-10-27 10:52:07 +01:00
Gunnar Beutner e80fd0fbfa Update the constants.conf file for "agent setup" 
refs #7423
 2014-10-23 15:05:25 +02:00
Gunnar Beutner b96e9d26a9 Improve error messages for CLI commands 
fixes #7395
 2014-10-20 13:40:17 +02:00
Gunnar Beutner 2d5e9514a5 Refactor logging code 2014-10-19 17:52:17 +02:00
Gunnar Beutner b18f57a745 Remove logger_fwd.hpp 2014-10-19 14:50:39 +02:00
Gunnar Beutner 97cf93089b Build fix for FreeBSD 2014-10-16 13:36:25 +02:00