Commit Graph

8731 Commits

Author SHA1 Message Date
Gunnar Beutner a7fe6467ba Improve log messages for the 'pki save-cert' command
refs #5450
2017-09-12 12:52:49 +02:00
Michael Friedrich 8040bda2e1 Change directory layout to /var/lib/icinga2/{ca,certs,certificate_requests}
refs #5450
2017-09-12 12:52:49 +02:00
Michael Friedrich 88b4a54e6b Fix ticket hash calculation for indirectly connected clients
refs #5450
2017-09-12 12:52:49 +02:00
Gunnar Beutner c02742925e Refactor PkiUtility class
refs #5450
2017-09-12 12:52:49 +02:00
Michael Friedrich 1e7860f2b1 Implement ApiListener::Get*Dir() functions
refs #5450
2017-09-12 12:52:49 +02:00
Gunnar Beutner 6a533796e5 Update output format for the new CLI commands
refs #5450
2017-09-12 12:52:49 +02:00
Gunnar Beutner 774936bfe8 Implement support for pki::UpdateCertificate messages
refs #5450
2017-09-12 12:52:49 +02:00
Gunnar Beutner 623208d617 Implement support for forwarding certificate requests
refs #5450
2017-09-12 12:52:49 +02:00
Gunnar Beutner 03f5ccd252 Implement support for cleaning up expired API callbacks
refs #5450
2017-09-12 12:52:49 +02:00
Gunnar Beutner cc43dc734b Refuse to sign certificate if it already has the correct chain and doesn’t expire soon
refs #5450
2017-09-12 12:52:49 +02:00
Gunnar Beutner 440f848c7c Improve error handling for JSON-RPC calls
refs #5450
2017-09-12 12:52:49 +02:00
Gunnar Beutner a8cc0a601b Add missing _unlink() calls for Windows
refs #5450
2017-09-12 12:52:49 +02:00
Gunnar Beutner cb49ac1264 Delete ticket file once we have a signed certificate
refs #5450
2017-09-12 12:52:49 +02:00
Gunnar Beutner 4cfbf6eb17 Disconnect all clients when we update our own certificate
refs #5450
2017-09-12 12:52:49 +02:00
Gunnar Beutner 439251532e Implement support for saving client tickets
refs #5450
2017-09-12 12:52:49 +02:00
Gunnar Beutner 192502f9e5 Implement support for reloading SSL certificates without a restart
refs #5450
2017-09-12 12:52:49 +02:00
Gunnar Beutner 0ec07bce51 Implement support for updating client certificates
refs #5450
2017-09-12 12:52:49 +02:00
Gunnar Beutner cdff792c11 Make the ticket optional in 'icinga2 node wizard'
refs #5450
2017-09-12 12:52:49 +02:00
Gunnar Beutner 8d05fc99c9 Improve message formatting for the 'icinga2 node wizard' command
refs #5450
2017-09-12 12:52:49 +02:00
Gunnar Beutner a4684d1bfd Implement support for sending pki::RequestCertificate messages in the cluster
refs #5450
2017-09-12 12:52:49 +02:00
Gunnar Beutner b08f5477dc Change PKI path from /etc/icinga2/pki to /var/lib/icinga2/pki
refs #5450
2017-09-12 12:52:49 +02:00
Gunnar Beutner abdd4b307b Implement the 'ca list' and 'ca sign' CLI commands
refs #5450
2017-09-12 12:52:49 +02:00
Gunnar Beutner 510e2d622a Implement support for ticket-less certificate requests
refs #5450
2017-09-12 12:52:49 +02:00
Michael Friedrich 1d75a15d8e ElasticWriter: Implement support for TLS connections (HTTP proxy)
This commit also enhances the log messages.

refs #5538
2017-09-12 12:52:49 +02:00
Michael Friedrich 95fbd75df8 ElasticWriter: Add basic auth support for Elasticsearch behind an HTTP proxy
refs #5538
2017-09-12 12:52:49 +02:00
Michael Friedrich 344b047ea0 Move Base64 class into libbase
refs #5538
2017-09-12 12:52:49 +02:00
Michael Friedrich 386b9de042 Drop obsolete code
refs #4054
2017-09-12 12:52:49 +02:00
Jean Flach e19d3f57c7 Add ElasticWriter
fixes #5538
2017-09-12 12:52:49 +02:00
Michael Friedrich 9e17ff874b Logs: Change config sync update to highlight an information, not an error
fixes #5484
2017-09-12 12:52:49 +02:00
Gunnar Beutner b316de8aea Implement additional logging for the JsonRpc class 2017-09-12 12:52:49 +02:00
Michael Friedrich 532336bc4f Merge pull request #5569 from Icinga/feature/elastic-writer-http-proxy
ElasticWriter: Add basic auth and TLS support for Elasticsearch behind an HTTP proxy
2017-09-12 12:29:38 +02:00
Michael Friedrich d801aaa611 ElasticWriter: Implement support for TLS connections (HTTP proxy)
This commit also enhances the log messages.

refs #5538
2017-09-12 11:36:28 +02:00
Claudio Kuenzler cfd7f1ff5e check_esxi_hardware.py with new --no-lcd parameter 2017-09-12 09:09:30 +02:00
Michael Friedrich 7c264673d4 ElasticWriter: Add basic auth support for Elasticsearch behind an HTTP proxy
refs #5538
2017-09-11 17:00:33 +02:00
Michael Friedrich d74b15d640 Move Base64 class into libbase
refs #5538
2017-09-11 16:51:13 +02:00
Jean Flach a6741af73e Merge pull request #5564 from Icinga/feature/elasticwriter-5538
Add Elasticwriter feature
2017-09-11 14:50:39 +02:00
Michael Friedrich 0457117d8e Drop obsolete code
refs #4054
2017-09-11 14:29:24 +02:00
Jean Flach 651379db6f Add ElasticWriter
fixes #5538
2017-09-11 14:27:04 +02:00
Michael Friedrich 116c35331f Logs: Change config sync update to highlight an information, not an error
fixes #5484

refs #5566
2017-09-08 13:40:44 +02:00
Michael Friedrich 60ce16fbda Merge pull request #5566 from Icinga/fix/config-sync-wrong-log
Logs: Change config sync update to highlight an information, not an error
2017-09-08 13:39:39 +02:00
Michael Friedrich f204f12935 Logs: Change config sync update to highlight an information, not an error
fixes #5484
2017-09-08 13:28:11 +02:00
Gunnar Beutner fc3d8636d4 Merge pull request #5563 from Icinga/feature/jsonrpc-logging
Implement additional logging for the JsonRpc class

fixes #5563
2017-09-07 14:45:13 +02:00
Gunnar Beutner fbaaea5cbc Implement additional logging for the JsonRpc class 2017-09-07 14:37:02 +02:00
Michael Friedrich ef8a6cad1d Merge pull request #5559 from rhopfer/fix/disk-exclude-configfs
Exclude configfs from disk checks
2017-09-07 12:32:23 +02:00
Roland Hopferwieser c5dad15d3a Exclude configfs from disk checks 2017-09-07 11:49:52 +02:00
Michael 4551113538 Add Edit button to Windows Setup Wizard
This adds an edit button to the windows setup wizard. This updates also the affected screenshots, where you can see the windws form, in the documentation.
2017-09-07 11:30:19 +02:00
Michael Friedrich 08486a0f7c Fix tests for URL formatting changes
refs #5558
2017-09-07 11:26:19 +02:00
Michael Friedrich 94707f9765 Merge pull request #5558 from Icinga/fix/http-request
Don't sent scheme and hostname in request
2017-09-06 16:18:36 +02:00
Jean Flach de51966f52 Don't sent scheme and hostname in request 2017-09-06 16:01:02 +02:00
Gunnar Beutner 3385122bc3 Add subjectAltName extension for all non-CA certificates 2017-09-06 12:25:36 +02:00