Gunnar Beutner
a7fe6467ba
Improve log messages for the 'pki save-cert' command
...
refs #5450
2017-09-12 12:52:49 +02:00
Michael Friedrich
8040bda2e1
Change directory layout to /var/lib/icinga2/{ca,certs,certificate_requests}
...
refs #5450
2017-09-12 12:52:49 +02:00
Michael Friedrich
88b4a54e6b
Fix ticket hash calculation for indirectly connected clients
...
refs #5450
2017-09-12 12:52:49 +02:00
Gunnar Beutner
c02742925e
Refactor PkiUtility class
...
refs #5450
2017-09-12 12:52:49 +02:00
Michael Friedrich
1e7860f2b1
Implement ApiListener::Get*Dir() functions
...
refs #5450
2017-09-12 12:52:49 +02:00
Gunnar Beutner
6a533796e5
Update output format for the new CLI commands
...
refs #5450
2017-09-12 12:52:49 +02:00
Gunnar Beutner
774936bfe8
Implement support for pki::UpdateCertificate messages
...
refs #5450
2017-09-12 12:52:49 +02:00
Gunnar Beutner
623208d617
Implement support for forwarding certificate requests
...
refs #5450
2017-09-12 12:52:49 +02:00
Gunnar Beutner
03f5ccd252
Implement support for cleaning up expired API callbacks
...
refs #5450
2017-09-12 12:52:49 +02:00
Gunnar Beutner
cc43dc734b
Refuse to sign certificate if it already has the correct chain and doesn’t expire soon
...
refs #5450
2017-09-12 12:52:49 +02:00
Gunnar Beutner
440f848c7c
Improve error handling for JSON-RPC calls
...
refs #5450
2017-09-12 12:52:49 +02:00
Gunnar Beutner
a8cc0a601b
Add missing _unlink() calls for Windows
...
refs #5450
2017-09-12 12:52:49 +02:00
Gunnar Beutner
cb49ac1264
Delete ticket file once we have a signed certificate
...
refs #5450
2017-09-12 12:52:49 +02:00
Gunnar Beutner
4cfbf6eb17
Disconnect all clients when we update our own certificate
...
refs #5450
2017-09-12 12:52:49 +02:00
Gunnar Beutner
439251532e
Implement support for saving client tickets
...
refs #5450
2017-09-12 12:52:49 +02:00
Gunnar Beutner
192502f9e5
Implement support for reloading SSL certificates without a restart
...
refs #5450
2017-09-12 12:52:49 +02:00
Gunnar Beutner
0ec07bce51
Implement support for updating client certificates
...
refs #5450
2017-09-12 12:52:49 +02:00
Gunnar Beutner
cdff792c11
Make the ticket optional in 'icinga2 node wizard'
...
refs #5450
2017-09-12 12:52:49 +02:00
Gunnar Beutner
8d05fc99c9
Improve message formatting for the 'icinga2 node wizard' command
...
refs #5450
2017-09-12 12:52:49 +02:00
Gunnar Beutner
a4684d1bfd
Implement support for sending pki::RequestCertificate messages in the cluster
...
refs #5450
2017-09-12 12:52:49 +02:00
Gunnar Beutner
b08f5477dc
Change PKI path from /etc/icinga2/pki to /var/lib/icinga2/pki
...
refs #5450
2017-09-12 12:52:49 +02:00
Gunnar Beutner
abdd4b307b
Implement the 'ca list' and 'ca sign' CLI commands
...
refs #5450
2017-09-12 12:52:49 +02:00
Gunnar Beutner
510e2d622a
Implement support for ticket-less certificate requests
...
refs #5450
2017-09-12 12:52:49 +02:00
Michael Friedrich
1d75a15d8e
ElasticWriter: Implement support for TLS connections (HTTP proxy)
...
This commit also enhances the log messages.
refs #5538
2017-09-12 12:52:49 +02:00
Michael Friedrich
95fbd75df8
ElasticWriter: Add basic auth support for Elasticsearch behind an HTTP proxy
...
refs #5538
2017-09-12 12:52:49 +02:00
Michael Friedrich
344b047ea0
Move Base64 class into libbase
...
refs #5538
2017-09-12 12:52:49 +02:00
Michael Friedrich
386b9de042
Drop obsolete code
...
refs #4054
2017-09-12 12:52:49 +02:00
Jean Flach
e19d3f57c7
Add ElasticWriter
...
fixes #5538
2017-09-12 12:52:49 +02:00
Michael Friedrich
9e17ff874b
Logs: Change config sync update to highlight an information, not an error
...
fixes #5484
2017-09-12 12:52:49 +02:00
Gunnar Beutner
b316de8aea
Implement additional logging for the JsonRpc class
2017-09-12 12:52:49 +02:00
Jean Flach
de51966f52
Don't sent scheme and hostname in request
2017-09-06 16:01:02 +02:00
Gunnar Beutner
10691db5b1
Implement support for ECC certificates
2017-09-06 12:29:30 +02:00
Gunnar Beutner
3385122bc3
Add subjectAltName extension for all non-CA certificates
2017-09-06 12:25:36 +02:00
Federico Cuello
a6b4bd48e2
Fix parameter order for Acknowledge{,Svc,Host}Problem in API actions/external commands
...
It was preventing email notifications with default settings, as `persistent` defaults to false and therefore `notify` was not set.
Signed-off-by: Michael Friedrich <michael.friedrich@icinga.com>
2017-09-05 08:50:22 +02:00
Michael Friedrich
261bd93c0b
Implement get_services(host {name,object}) and add host object support for get_service()
...
This includes some debug console examples too which involve advanced
map() and filter examples for better readability.
refs #4912
2017-08-28 19:54:26 +02:00
Michael
ac0fdd7144
Change more loglines for checkables so checkable is quoted
...
refs #5528
2017-08-24 13:35:55 +02:00
Thomas Widhalm
de9a097a97
Change loglines for checkables so checkable is quoted
2017-08-23 19:11:46 +02:00
Michael Friedrich
e88b97079c
API: Add execution_{start,end} attribute to 'process-check-result' action
...
fixes #5002
2017-08-21 17:20:56 +02:00
Michael Friedrich
445ee949da
Merge pull request #5523 from Icinga/feature/enhance-client-connect-logging
...
Enhance client connect/sync logging and include bytes/zone in logs
2017-08-21 11:36:52 +02:00
Michael Friedrich
778c742b75
Merge pull request #5524 from Icinga/fix/cluster-fifo-optimize
...
Change FIFO::Optimize() frequency for large messages
2017-08-21 11:36:32 +02:00
Michael Friedrich
873a553a4f
Enhance client connect/sync logging and include bytes/zone in logs
...
refs #5513
2017-08-21 11:31:24 +02:00
Michael Friedrich
732a5849d5
Change FIFO::Optimize() frequency for large messages
...
refs #5513
2017-08-21 11:24:39 +02:00
Michael Friedrich
d075665d1b
Merge pull request #5486 from Icinga/feature/remove-deprecated-graphite-legacy-mode
...
Graphite: Remove deprecated legacy schema mode
2017-08-17 20:06:47 +02:00
Michael Friedrich
cb94b218a6
Merge pull request #5504 from spjmurray/fix/influxdb_timeouts_5460_5469
...
Fix TLS Race Connecting to InfluxDB
2017-08-17 18:25:17 +02:00
Michael Friedrich
52dcce972f
Livestatus: Fix crash with empty stats columns
...
refs #5078
refs #5503
2017-08-16 15:28:15 +02:00
Michael Friedrich
a43ae941b6
Merge pull request #5497 from Icinga/fix/api-object-query-type-error
...
API: Fix requested attrs/joins/meta type errors in object query response
2017-08-15 12:52:33 +02:00
Simon Murray
abc3652b00
Fix TLS Race Connecting to InfluxDB
...
Rather than leaving stale connections about we tried to poll for data coming in
from InfluxDB and timeout if it didn't repond in a timely manner. This introduced
a race where the timeout triggers, a context switch occurs where data is actually
available and the TlsStream spins trying to asynchronously notify that data is
available, but which never gets read. Not only does this use up 100% of a core,
but it also slowly starves the system of handler threads at which point metrics
stop being delivered.
This basically removes the poll and timeout, any TLS socket erros should be
detected by TCP keep-alives.
Fixes #5460 #5469
2017-08-14 16:20:49 +01:00
Gunnar Beutner
6bc79b6b37
Merge pull request #5503 from Icinga/fix/livestatus-stats-groups
...
Fix grouping for Livestatus queries with 'Stats'
2017-08-14 16:19:18 +02:00
Gunnar Beutner
5402c1d610
Fix grouping for Livestatus queries with 'Stats'
...
refs #5078
2017-08-14 15:30:06 +02:00
Noah Hilverling
5b9337e130
Process: Fix JSON parsing error on process helper crash
2017-08-14 08:27:04 +02:00
