11801 Commits

Author SHA1 Message Date
Michael Friedrich
e17d9544b8 Remove contrib/ directory
The scripts in there have been introduced years ago,
but neither do we support them nor are there any plans
to go further. Git history allows to restore them anyways.
2020-02-27 13:33:13 +01:00
Michael Friedrich
cbbf12c590
Merge pull request #7860 from pdorschner/patch-1
Fix translation
2020-02-27 08:56:42 +01:00
Philipp Dorschner
d674f34b4b
Fix Translation 2020-02-27 07:52:03 +01:00
Michael Friedrich
59354e8bbe
Merge pull request #7853 from Icinga/bugfix/windows-setup-save-cert
Windows setup wizard: Remove deprecated parameters for 'pki save-cert'
2020-02-26 09:49:39 +01:00
Michael Friedrich
4f1061203b Windows setup wizard: Remove deprecated parameters for 'pki save-cert' 2020-02-25 12:50:06 +01:00
Michael Friedrich
06d0c3ea4e
Merge pull request #7843 from Icinga/feature/cli-pki-verify
CLI: Add `pki verify` command for better TLS certificate troubleshooting
2020-02-25 09:07:24 +01:00
Michael Friedrich
fdb13d1b7d TlsUtility: Replace deprecated OpenSSL function with ASN1_STRING_get0_data() 2020-02-21 13:02:58 +01:00
Michael Friedrich
456b0779bb JsonRpcConnection PKI: Document swalled exception 2020-02-20 15:15:54 +01:00
Michael Friedrich
12b6c1aab9 CLI: Improve error handling for 'pki verify' command 2020-02-20 15:10:57 +01:00
Michael Friedrich
e4e26d66a6 Build fix 2020-02-17 18:40:28 +01:00
Michael Friedrich
a37472c479 Docs: Add pki verify and adopt TLS certificate troubleshooting 2020-02-17 18:17:44 +01:00
Michael Friedrich
6f263a4922 Add pki verify CLI command: print, signed by CA, valid CA, CN match 2020-02-17 18:10:51 +01:00
Michael Friedrich
a91b9f2ddf Pki: Extend GetCertificateInformation() with version, serial, signature algorithm, SANs 2020-02-17 17:44:10 +01:00
Michael Friedrich
24397fbee8 CA Proxy: Catch exceptions from VerifyCertificate() 2020-02-17 17:43:11 +01:00
Michael Friedrich
548eb933c9 TlsUtility: Add getters for version, signature algorithm, SANs 2020-02-17 17:42:20 +01:00
Henrik Triem
099cc5d8df
Merge pull request #7833 from Icinga/feature/version-build-info-openssl
CLI: Add OpenSSL version to 'Build' section in --version
2020-02-17 17:07:51 +01:00
Michael Friedrich
cfd9b80027
Merge pull request #7838 from Icinga/bugfix/catch-exception-in-node-setup
Catch exception when trusted cert is not readable during node setup on agent/satellite
2020-02-14 09:51:17 +01:00
Michael Friedrich
b32ae4e8c1
Merge pull request #7835 from Icinga/feature/improve-node-setup-save-cert-cli
Improve experience with 'Node Setup for Agents/Satellite'
2020-02-14 08:58:55 +01:00
Michael Friedrich
71c7eebe4e CLI: Add OpenSSL version to 'Build' section in --version
This helps to see against which OpenSSL version Icinga was built.
Inspired by #5572
2020-02-14 08:55:39 +01:00
Michael Insel
e4f25269fe
Fix Build
I have no idea how this got lost.
2020-02-14 07:56:23 +01:00
Michael Insel
90ac6cd9a1 CLI: Catch exception when trusted cert is not readable
This catches an exception when the trusted cert is not readable during
node setup.
2020-02-13 20:03:17 +01:00
Michael Friedrich
9028610735 Docs: Improve the 'automated node setup' chapter
- Refine why the parent certificate is needed to prevent MITM attacks
- Add sample output from 'pki save-cert'
- Align parameter names and cross-links
2020-02-13 16:15:50 +01:00
Michael Friedrich
e65a27465c Docs: Mention the removal of the deprecated parameters for 'pki save-cert' 2020-02-13 16:15:26 +01:00
Michael Friedrich
82e055bfb6 CLI: Clean up 'pki save-cert' command and remove deprecated params
This got obsoleted 4 years ago in a monster commit.
b297e8cfa7
2020-02-13 16:14:01 +01:00
Michael Friedrich
e1557def94 CLI: Verify --trustedcert being a client, non CA certificate in 'node setup'
This commit also cleans some shell output with master vs. parent.
2020-02-13 16:09:16 +01:00
Michael Friedrich
a7436394cd TlsUtility: Add IsCa() function to verify given certificate being a CA certificate 2020-02-13 16:03:43 +01:00
Michael Friedrich
be2178b993
Merge pull request #7824 from Icinga/bugfix/doc-debian-env-wrong-docker-image
Doc: Fix wrong docker image for debian developemnt environment
2020-02-12 11:27:03 +01:00
Michael Insel
34417bef65
Doc: Fix wrong docker image for debian developemnt environment
Fixes a small typo. The Debian based development environment should use the debian docker image instead of the ubuntu image.
2020-02-12 11:12:35 +01:00
Michael Friedrich
57facbddd5
Merge pull request #7697 from Icinga/bugfix/icingadb-compiler-warnings
IcingaDB: Fix enumeral mismatch compiler warnings
2020-02-11 17:22:28 +01:00
Michael Friedrich
ed58922389
Merge pull request #7785 from Icinga/feature/multi-parent-dependencies
Change behaviour of multiple dependencies (all failed = unreachable)
2020-02-11 17:20:04 +01:00
Michael Friedrich
a9214f7be4 Upgrading docs: Add multi parent dependencies with changed reachability logic 2020-02-11 15:50:04 +01:00
Michael Friedrich
3a4fb840d4 Tests: Add multi parent dependency test case 2020-02-11 15:13:25 +01:00
Michael Friedrich
9b0365ab43 Fix logical error with zero dependencies in IsReachable() 2020-02-11 15:13:25 +01:00
Michael Friedrich
76d531b4f0 Unit tests: Also test reachability in icinga_checkresult/* tests 2020-02-11 15:13:25 +01:00
Henrik Triem
d0c0beb8be Change behaviour of multiple dependencies (all failed = unreachable) 2020-02-11 15:13:25 +01:00
Michael Insel
5930d640e4 IcingaDB: Fix enumeral mismatch compiler warnings
This fixes 3 enumeral mismatch compiler warnings when building the
IcingaDB target.
2020-02-10 18:56:11 +01:00
Michael Friedrich
2f82047737
Merge pull request #7769 from Icinga/bugfix/m_lexbuffer
Make ConfigCompiler#m_LexBuffer a String
2020-02-10 16:27:42 +01:00
Michael Friedrich
04edda531c
Merge pull request #7788 from Icinga/bugfix/windows-timeout-unknown-state
Terminate windows check processes with UNKNOWN state on timeout
2020-02-10 15:34:28 +01:00
Michael Friedrich
ccd354c16c
Merge pull request #7810 from Icinga/bugfix/spawncoroutine-copy
IoEngine#SpawnCoroutine(): don't copy parameter
2020-02-10 15:31:31 +01:00
Michael Friedrich
d99f76bdae Merge pull request #7767 from Icinga/bugfix/replay-log-windows-rename
Ensure that log replay files are properly renamed on Windows
2020-02-10 11:42:25 +01:00
Michael Friedrich
8324970ab9
Merge pull request #7809 from Icinga/bugfix/handshake-timeout-7805
Close connections w/o sucessful TLS handshakes during 10s
2020-02-07 16:01:30 +01:00
Michael Friedrich
7488d2614b
Merge pull request #7811 from Icinga/bugfix/config-sync-log
Cluster config sync: Use a more friendly message when configs are equal and don't need a reload
2020-02-06 14:32:46 +01:00
Michael Friedrich
bf2d6abfad
Merge pull request #7747 from Icinga/bugfix/heartbeat-unauthenticated-7746
Don't send event::Heartbeat to unauthenticated peers
2020-02-06 14:32:25 +01:00
Michael Friedrich
77a0b8423d
Merge pull request #7817 from Icinga/bugfix/quality-apievents
ApiEvents: Fix AcknowledgementCleared code quality
2020-02-06 13:37:25 +01:00
Michael Friedrich
f961370e36 ApiEvents: Fix AcknowledgementCleared code quality 2020-02-06 13:03:04 +01:00
Alexander A. Klimov
35c9f2e7b3 Close connections w/o sucessful TLS handshakes during 10s
refs #7805
2020-02-05 15:53:56 +01:00
Alexander A. Klimov
0ed0f73d9d IoEngine#SpawnCoroutine(): remove redundand overload 2020-02-05 15:31:57 +01:00
Michael Friedrich
cdfc6e6f50 Cluster config sync: Use a more friendly message when configs are equal and don't need a reload
This also adds an entry to the troubleshooting docs.
2020-02-05 15:31:41 +01:00
Alexander A. Klimov
d98493c90f IoEngine#SpawnCoroutine(): don't copy parameter 2020-02-05 15:30:03 +01:00
Noah Hilverling
572c912c96
Merge pull request #7804 from Icinga/bugfix/not-overdue-active-checks-disabled-7790
Checkable#next_update: ignore re-scheduled #next_check if !#enable_active_checks
2020-01-31 14:17:30 +01:00