Michael Friedrich
|
578dcbe861
|
Add some more verbose logging details
refs #5450
|
2017-09-12 12:52:50 +02:00 |
Michael Friedrich
|
501ade374c
|
Remove debug logging, fix ticket path, enhance logging
refs #5450
|
2017-09-12 12:52:49 +02:00 |
Gunnar Beutner
|
88e57f7fd4
|
Implement support for cleaning up certificate requests
refs #5450
|
2017-09-12 12:52:49 +02:00 |
Michael Friedrich
|
181b91b759
|
Enhance logging for certificate requests
Examples:
https://github.com/Icinga/icinga2/issues/5450#issuecomment-327479874
This also adds code comments where applicable.
refs #5450
|
2017-09-12 12:52:49 +02:00 |
Michael Friedrich
|
ce88e89cc0
|
Fix wrong cert path for CLI commands
refs #5450
|
2017-09-12 12:52:49 +02:00 |
Michael Friedrich
|
8040bda2e1
|
Change directory layout to /var/lib/icinga2/{ca,certs,certificate_requests}
refs #5450
|
2017-09-12 12:52:49 +02:00 |
Michael Friedrich
|
88b4a54e6b
|
Fix ticket hash calculation for indirectly connected clients
refs #5450
|
2017-09-12 12:52:49 +02:00 |
Michael Friedrich
|
1e7860f2b1
|
Implement ApiListener::Get*Dir() functions
refs #5450
|
2017-09-12 12:52:49 +02:00 |
Gunnar Beutner
|
6a533796e5
|
Update output format for the new CLI commands
refs #5450
|
2017-09-12 12:52:49 +02:00 |
Gunnar Beutner
|
774936bfe8
|
Implement support for pki::UpdateCertificate messages
refs #5450
|
2017-09-12 12:52:49 +02:00 |
Gunnar Beutner
|
623208d617
|
Implement support for forwarding certificate requests
refs #5450
|
2017-09-12 12:52:49 +02:00 |
Gunnar Beutner
|
cc43dc734b
|
Refuse to sign certificate if it already has the correct chain and doesn’t expire soon
refs #5450
|
2017-09-12 12:52:49 +02:00 |
Gunnar Beutner
|
a8cc0a601b
|
Add missing _unlink() calls for Windows
refs #5450
|
2017-09-12 12:52:49 +02:00 |
Gunnar Beutner
|
cb49ac1264
|
Delete ticket file once we have a signed certificate
refs #5450
|
2017-09-12 12:52:49 +02:00 |
Gunnar Beutner
|
439251532e
|
Implement support for saving client tickets
refs #5450
|
2017-09-12 12:52:49 +02:00 |
Gunnar Beutner
|
192502f9e5
|
Implement support for reloading SSL certificates without a restart
refs #5450
|
2017-09-12 12:52:49 +02:00 |
Gunnar Beutner
|
0ec07bce51
|
Implement support for updating client certificates
refs #5450
|
2017-09-12 12:52:49 +02:00 |
Gunnar Beutner
|
a4684d1bfd
|
Implement support for sending pki::RequestCertificate messages in the cluster
refs #5450
|
2017-09-12 12:52:49 +02:00 |
Gunnar Beutner
|
510e2d622a
|
Implement support for ticket-less certificate requests
refs #5450
|
2017-09-12 12:52:49 +02:00 |