Jean Flach
|
1bdd14b428
|
Limit anonymous connections to 25
|
2018-03-05 13:22:43 +01:00 |
Noah Hilverling
|
54ff60cd8c
|
Limit JSON-RPC message size
|
2018-03-05 10:29:05 +01:00 |
Gunnar Beutner
|
d23c03bfa5
|
Merge pull request #6134 from gunnarbeutner/fix/incorrect-content-length-limits
Fix incorrect HTTP content length limits
|
2018-02-28 14:16:15 +01:00 |
Gunnar Beutner
|
a3bf8cd26e
|
Merge pull request #6133 from Icinga/fix/cork-socket
Limit the number of HTTP/JSON-RPC requests we read in parallel
|
2018-02-28 12:48:06 +01:00 |
Gunnar Beutner
|
45c2803f3e
|
Fix incorrect HTTP content length limits
|
2018-02-28 12:28:02 +01:00 |
Gunnar Beutner
|
c1837ea90b
|
Merge pull request #6131 from Icinga/feature/log-master-ticket-invalid
Log which ticket was invalid on the master
|
2018-02-28 12:22:34 +01:00 |
Gunnar Beutner
|
6848af50ff
|
Add SetCorked() calls to the JsonRpcConnection class
|
2018-02-28 11:42:05 +01:00 |
Jean Flach
|
d0cf7c654e
|
Use cork in tlsstream and HTTP connection
|
2018-02-28 11:40:58 +01:00 |
Gunnar Beutner
|
a4a73fa67c
|
Fix null ptr dereference in HttpServerConnection::ProcessMessageAsync
|
2018-02-28 11:07:19 +01:00 |
Gunnar Beutner
|
6d01808adf
|
Fix incorrect return value
|
2018-02-28 10:50:33 +01:00 |
Michael Friedrich
|
ad31e0d118
|
Log which ticket was invalid on the master
This helps debugging a lot, especially to reproduce the issue
why the ticket is invalid.
|
2018-02-28 10:18:29 +01:00 |
Jean Flach
|
ef5e7e8510
|
Fix incorrect size of request limits
refs #6103
|
2018-02-23 14:29:18 +01:00 |
Jean Flach
|
6bb2ed4258
|
Merge branch 'feature/security-features'
|
2018-02-21 16:19:54 +01:00 |
Jean Flach
|
184580f705
|
Merge pull request #6103 from Icinga/fix/http-security-fixes
HTTP Security fixes
|
2018-02-21 15:04:02 +01:00 |
Jean Flach
|
85f45d9b94
|
Minor codestyle and doc changes
|
2018-02-21 14:52:44 +01:00 |
Noah Hilverling
|
64ffe4f840
|
Fix nullptr posibility in ProcessEvent
|
2018-02-21 13:47:46 +01:00 |
Noah Hilverling
|
948333225d
|
Fix nullptr deref in cluster events
|
2018-02-21 13:47:46 +01:00 |
Noah Hilverling
|
2823ebb831
|
Limit HTTP body size
|
2018-02-20 13:32:04 +01:00 |
Noah Hilverling
|
817415f6a5
|
Fix requests not being closed correctly
|
2018-02-20 13:32:04 +01:00 |
Jean Flach
|
8ffa4f04a7
|
Add timeout for TLS handshakes
|
2018-02-20 13:32:04 +01:00 |
Jean Flach
|
ee5954726d
|
Authenticate API user before parsing body
|
2018-02-20 13:32:04 +01:00 |
Jean Flach
|
73b85bcccb
|
Only read body from authenticated connections
This means we are not allowing unauthenticated requests anymore
|
2018-02-20 13:32:04 +01:00 |
Jean Flach
|
81c4004894
|
Fix nullptr deref
|
2018-02-20 13:32:04 +01:00 |
Gunnar Beutner
|
a9f2a8de19
|
Add HTTP Header size limits
|
2018-02-20 13:32:04 +01:00 |
Gunnar Beutner
|
2789d1a859
|
Add validation for HTTP connection sizes
|
2018-02-20 13:32:04 +01:00 |
Gunnar Beutner
|
8a8d42b154
|
Remove redundant 'this->'
|
2018-02-19 08:08:16 +01:00 |
Jean Flach
|
0a0795f09d
|
Code style
|
2018-02-16 11:47:13 +01:00 |
Jean Flach
|
df86245fe8
|
Fix crash when using incorrectly formatted password hash
|
2018-02-15 13:09:22 +01:00 |
Jean Flach
|
65a806f5dc
|
Move new password functions into tlsutility
|
2018-02-15 13:09:22 +01:00 |
Jean Flach
|
92e2faaa08
|
Hash API password and comparison
fixes #4920
|
2018-02-15 13:09:22 +01:00 |
Michael Friedrich
|
ad7e801db9
|
Fix crash with anonymous clients on certificate signing request and storing sent bytes
refs #5753
|
2018-02-09 17:18:20 +01:00 |
Jean Flach
|
cc73eed2af
|
Merge pull request #5992 from Icinga/feature/remove-includes
Remove unused includes
|
2018-01-25 09:13:02 +01:00 |
Gunnar Beutner
|
0cc9af6bee
|
Remove duplicate semicolons
|
2018-01-24 12:07:52 +01:00 |
Gunnar Beutner
|
94e6be1a65
|
Remove unused includes
|
2018-01-22 09:52:29 +01:00 |
Jean Flach
|
1da6b2c883
|
Fix whitespaces in CMakeLists files
Uses 2 space indentation as standard
|
2018-01-19 09:19:40 +01:00 |
Gunnar Beutner
|
9d436605f0
|
Fix compatibility with CMake < 3.1
|
2018-01-18 15:12:46 +01:00 |
Gunnar Beutner
|
71a032579b
|
Merge pull request #5995 from Icinga/fix/influxdb-requests
Fix InfluxDB requests
|
2018-01-17 10:28:15 +01:00 |
Noah Hilverling
|
e19ae4e052
|
Fix HTTP response parsing for HTTP 1.1
refs #5987
|
2018-01-17 10:25:00 +01:00 |
Gunnar Beutner
|
2a9dceb367
|
Use CMake object libraries for our libs
|
2018-01-17 04:28:21 +01:00 |
Gunnar Beutner
|
c2fb9fe226
|
Use initializer lists for arrays and dictionaries
|
2018-01-16 12:27:44 +01:00 |
Gunnar Beutner
|
21254fb610
|
Avoid accessing attributes for validators where not necessary
|
2018-01-11 08:20:16 +01:00 |
Michael Friedrich
|
d073a807b0
|
API: Add 'pretty' parameter for beautified JSON response bodies
fixes #5877
|
2018-01-08 20:55:36 +01:00 |
Gunnar Beutner
|
91c256261a
|
Apply clang-tidy fix 'modernize-use-default-member-init'
|
2018-01-04 12:24:58 +01:00 |
Gunnar Beutner
|
becfa85094
|
Apply clang-tidy fix 'modernize-use-emplace'
|
2018-01-04 12:24:57 +01:00 |
Gunnar Beutner
|
e3ad0be769
|
Apply clang-tidy fix 'modernize-use-auto'
|
2018-01-04 12:24:57 +01:00 |
Gunnar Beutner
|
d6062eefbf
|
Apply clang-tidy fix 'modernize-raw-string-literal'
|
2018-01-04 12:24:57 +01:00 |
Gunnar Beutner
|
621eed3f13
|
Apply clang-tidy fix 'modernize-pass-by-value'
|
2018-01-04 12:24:57 +01:00 |
Gunnar Beutner
|
9ca682496c
|
Apply clang-tidy fix 'modernize-use-override'
|
2018-01-04 12:24:57 +01:00 |
Gunnar Beutner
|
ac155d1dda
|
Apply clang-tidy fix 'modernize-redundant-void-arg'
|
2018-01-04 12:24:57 +01:00 |
Gunnar Beutner
|
efe99a3e5e
|
Add the final keyword to classes
|
2018-01-04 05:20:20 +00:00 |