Alexander A. Klimov
dba332ec38
[TEST] Smaller RSA fixes unit test?
2023-12-07 16:28:48 +01:00
Alexander A. Klimov
638e838aec
[TEST] Small RSA fixes unit test?
2023-12-07 16:28:48 +01:00
Alexander A. Klimov
8979d2a70f
[TEST] Function pointer fixes unit test?
2023-12-07 16:28:48 +01:00
Alexander A. Klimov
2d9b4db16c
[REVERT THIS] GHA hack
2023-12-07 16:28:34 +01:00
Alexander A. Klimov
6705f17c78
Test IsCertUptodate()
2023-12-07 13:04:29 +01:00
Alexander A. Klimov
2a26a1ac66
IsCertUptodate(): consider root not up-to-date if not valid longer than a leaf
2023-12-07 12:05:24 +01:00
Alexander A. Klimov
398dcf588e
IsCertUptodate(): consider root certs created before 2017 up-to-date
...
Only leaves created before 2017 should be renewed (yet).
This enables IsCertUptodate() for roots as expected.
2023-11-22 17:41:20 +01:00
Alexander A. Klimov
b43f1e7706
RequestCertificateHandler(): renew agent cert on master if satellite wants it
...
ignoring that cert seems up-to-date. This is to process renewals
needed to keep the CA up-to-date despite the leaf is already up-to-date.
2023-11-09 10:40:48 +01:00
Alexander A. Klimov
ef50e5ac2a
RequestCertificateHandler(): also renew if CA needs a renewal
2023-11-09 10:33:22 +01:00
Alexander A. Klimov
415ea3a5b7
IsCertUptodate(): allow raw pointer input
2023-11-06 14:00:39 +01:00
Alexander A. Klimov
b3315a4f7e
ApiListener#Start(): auto-renew CA on its owner
...
otherwise it would expire.
2023-11-06 10:35:56 +01:00
Alexander A. Klimov
4cef2a95a6
ApiListener#RenewCert(): enable optional CA creation
2023-11-06 10:35:56 +01:00
Alexander A. Klimov
1d038b6479
CreateCertIcingaCA(EVP_PKEY*, X509_NAME*): enable optional CA creation
2023-11-06 10:35:56 +01:00
Julian Brost
76b460c8ba
Merge pull request #9872 from Icinga/Al2Klimov-patch-5
...
GHA: add upcoming (already frozen) Ubuntu 23.10
2023-10-06 13:05:29 +02:00
Alexander Aleksandrovič Klimov
bb6cfe94d3
GHA: add upcoming (already frozen) Ubuntu 23.10
2023-10-06 10:34:36 +02:00
Julian Brost
17858eae5b
Merge pull request #9871 from Icinga/Al2Klimov-patch-5
...
GHA: add upcoming (already frozen) Fedora 39
2023-10-05 12:18:11 +02:00
Alexander Aleksandrovič Klimov
9ebf585ec7
GHA: add upcoming (already frozen) Fedora 39
2023-10-04 16:35:26 +02:00
Julian Brost
bb60110368
Merge pull request #9863 from Icinga/Al2Klimov-patch-5
...
GHA: drop EOL Ubuntu 22.10
2023-10-04 11:42:12 +02:00
Alexander Aleksandrovič Klimov
a3dfb525c0
GHA: drop EOL Ubuntu 22.10
2023-09-26 11:40:28 +02:00
Julian Brost
bba6a76f4a
Merge pull request #9853 from Icinga/GelfWriter-m_StreamMutex
...
GelfWriter: protect m_Stream via m_WorkQueue, not ObjectLock(this)
2023-09-07 11:46:38 +02:00
Julian Brost
65dab469b7
Merge pull request #9856 from Icinga/Al2Klimov-patch-5
...
Doc: ITL: correct $ifw_api_crl$ default
2023-09-05 16:01:13 +02:00
Alexander Aleksandrovič Klimov
08a4aef4df
Doc: ITL: correct $ifw_api_crl$ default
...
In contrast to cert/key/CA, no CRL means no CRL.
(The behavior of the API is the same.)
2023-08-25 12:26:32 +02:00
Alexander Aleksandrovič Klimov
e5d988a2fe
Merge pull request #7799 from Icinga/bugfix/file-end
...
Fix file endings
2023-08-25 11:06:19 +02:00
Alexander A. Klimov
4ee10a6c20
GelfWriter: protect m_Stream via m_WorkQueue, not ObjectLock(this)
...
On shutdown or HA re-connect ConfigObject#SetAuthority(false) is called which
does ObjectLock(this) and ConfigObject#Pause(). GelfWriter#Pause(), with the
above ObjectLock, calls m_WorkQueue.Join(). But items inside that also doing
ObjectLock(this) cause a deadlock.
2023-08-24 17:48:09 +02:00
Alexander Aleksandrovič Klimov
66088050b5
Merge pull request #9848 from Icinga/mailmap-mathiasaerts
...
Update .mailmap
2023-08-14 12:58:47 +02:00
Julian Brost
e94ca5b24e
Update .mailmap
2023-08-14 09:45:00 +02:00
Julian Brost
986991ed48
Merge pull request #9802 from mathiasaerts/patch-1
...
Fix 'healt' typo
2023-08-14 09:38:41 +02:00
Julian Brost
7ae91ce504
Merge pull request #9826 from Icinga/Al2Klimov-patch-9
...
Release issue template: Harden OpenSSL Defaults
2023-08-01 10:31:07 +02:00
Alexander A. Klimov
b84dda1790
.github/ISSUE_TEMPLATE/release.md: Harden global TLS defaults
2023-07-31 16:30:20 +02:00
Julian Brost
756aa18c18
Merge pull request #9828 from Icinga/release.md
...
Replace `RELEASE.md' with issue template
2023-07-31 16:18:01 +02:00
Alexander A. Klimov
4164bee6c7
Release issue template: restore non-trivial info from removed RELEASE.md
...
We have dedicated repositories for packages, so this stuff is already
fragmented into visible and invisible. The docs can be fragmented the same
way. But then everything about this repo should be documented in this repo,
too. This just re-adds docs about the publicly visible stuff. Ex. the last
section, but it is easy to miss, so it's here.
2023-07-31 10:46:12 +02:00
Julian Brost
2d6ea43a7b
Merge pull request #9834 from Icinga/probot/update-authors/master/e3cca711ef464505db0cd891239bc66686b641b6
...
Update AUTHORS
2023-07-24 14:01:04 +02:00
icinga-probot[bot]
7e5dc97ecb
Update AUTHORS
2023-07-14 12:56:21 +00:00
Alexander Aleksandrovič Klimov
e3cca711ef
Merge pull request #9831 from Icinga/probot/update-authors/master/a81f95d6abcbf8b6811b1379badb262abedee46a
...
Update AUTHORS
2023-07-14 14:55:56 +02:00
Alexander Aleksandrovič Klimov
52a3604680
Merge pull request #9759 from liip-forks/OdyX-sslcert_allow-setting-url
...
ssl_cert allow HTTP request URL setting
2023-07-14 10:24:23 +02:00
Alexander Aleksandrovič Klimov
1af5109ad3
Merge pull request #9734 from Icinga/remove-unused-stream-peek-
...
Remove unused Stream#Peek()
2023-07-13 16:52:29 +02:00
icinga-probot[bot]
b6c5e1663c
Update AUTHORS
2023-07-13 11:57:09 +00:00
Alexander Aleksandrovič Klimov
a81f95d6ab
Merge pull request #9746 from LordHepipud/patch-1
...
Adds ProgressPreference SilentlyContinue
2023-07-13 13:56:38 +02:00
Alexander Aleksandrovič Klimov
0d5802937b
Merge pull request #9829 from Icinga/probot/sync-changelog/master/cc104f8208351785aba6ee031d92c978d4f5c966
...
CHANGELOG.md: add v2.13.8
v2.14.0
2023-07-12 11:00:28 +02:00
Alexander A. Klimov
0ef0c7a3fd
CHANGELOG.md: add v2.13.8
2023-07-12 08:19:38 +00:00
Alexander Aleksandrovič Klimov
cc104f8208
Icinga 2.14 ( #9760 )
2023-07-12 10:19:24 +02:00
Eric Lippmann
62d7e2af80
Replace `RELEASE.md' with issue template
...
Apart from the Windows-related notes, all instructions are common to our
releases and therefore do not need to be explicitly listed here. In
addition, most of the information was severely outdated, especially with
respect to how our packaging works.
2023-07-11 15:40:59 +02:00
Alexander Aleksandrovič Klimov
1df14d60d2
Merge pull request #9827 from Icinga/application-m_lastreloadfailed-uint32_t
...
Application::m_LastReloadFailed: if double isn't always lock free, use uint32_t
2023-07-10 14:14:58 +02:00
Alexander A. Klimov
8f8a6ee2a0
Application::m_LastReloadFailed: if double isn't always lock free, use uint32_t
...
which will overflow in 2106, not 2038.
This fixes a compile failure on 32-bit Raspbian.
2023-07-10 10:51:02 +02:00
Alexander Aleksandrovič Klimov
2e4af46d46
Merge pull request #9787 from Icinga/OpenSSL30
...
Windows: bump OpenSSL v1.1 (soon EOL) -> v3.0
2023-07-07 10:17:17 +02:00
Alexander Aleksandrovič Klimov
681f9eed62
Merge pull request #9743 from Icinga/Al2Klimov-patch-5
...
GHA: Linux: add Fedora 38, Ubuntu 23.04, Debian 12, openSUSE 15.5
2023-07-06 17:26:54 +02:00
Alexander A. Klimov
656d9d439b
GHA: add Amazon Linux 2023
...
which unfortunately seems not to have ccache. 🤷
2023-07-06 14:21:03 +02:00
Alexander Aleksandrovič Klimov
000a776dfb
Built-in check command: ifw-api ( #9062 )
2023-07-06 14:18:21 +02:00
Julian Brost
26a75f8a6f
Merge pull request #9812 from Icinga/support-elasticsearch-8-0-9251
...
ElasticsearchWriter: switch to v7+ URL schema to support v8
2023-07-05 10:15:10 +02:00
Alexander Aleksandrovič Klimov
8047c25537
GHA: add Debian and Raspbian 12
2023-07-04 14:49:32 +02:00