Commit Graph

1373 Commits

Author SHA1 Message Date
Michael Friedrich bd2c266bf1 Log warning when sysconfig file cannot be read
refs 

refs 
2018-04-19 12:29:43 +02:00
Jean Flach 978d707e3b Add improved error messages for resource limits
refs 

refs 
2018-04-19 12:29:23 +02:00
lihan bf959371c4 fixup set rlimit stack failed condition
refs 
refs 
2018-04-19 11:35:05 +02:00
Jan Beich e3ecf83bfb Explicitly use long with boost::posix_time 2018-04-16 15:39:57 +02:00
Gunnar Beutner ddab94feb3 Build fix 2018-03-07 09:57:08 +01:00
Jean Flach f357439485 Code style 2018-03-07 09:57:08 +01:00
Gunnar Beutner 6670024f62 Ensure that SetCorked() works properly 2018-03-06 09:35:57 +01:00
Gunnar Beutner 0b9869917f Fix incorrect argument type for JsonRpc::SendMessage 2018-03-06 09:02:05 +01:00
Jean Flach fda4faac06 Limit anonymous connections to 25 2018-03-06 08:53:52 +01:00
Noah Hilverling fdf2dc43d5 Limit JSON-RPC message size 2018-03-06 08:53:14 +01:00
Jean Flach 8b334fe259 Use cork in tlsstream and HTTP connection 2018-02-28 12:57:22 +01:00
Jean Flach 419103b407 Add cork 2018-02-28 12:50:49 +01:00
Jean Flach d4b336ad20 Remove need for RunAsUser/Group
They are now read form the sysconfig file which is owned by root
2018-02-23 14:01:43 +01:00
Jean Flach 6387f5442e Move new password functions into tlsutility 2018-02-23 13:06:22 +01:00
Jean Flach 6504606e23 Hash API password and comparison
fixes 
2018-02-23 11:23:19 +01:00
Jean Flach c5b92defec Minor codestyle and doc changes 2018-02-23 10:09:28 +01:00
Jean Flach 70c81734c5 Add timeout for TLS handshakes 2018-02-23 10:09:26 +01:00
Jean Flach 9de36c0999 Rename macro RequireNotNull to REQUIRE_NOT_NULL 2018-02-22 15:07:36 +01:00
Noah Hilverling 3ba5090867 Add marco RequireNotNull
This is used to fix a number of possible nullptr dereferences
2018-02-22 14:55:42 +01:00
Gunnar Beutner 5dab779df6 Fix incorrect ::Start call 2018-01-24 12:04:53 +01:00
Gunnar Beutner 680939a289 Fix incorrect socket handling for the HTTP client 2018-01-17 15:02:33 +01:00
Michael Friedrich c3fe1a6323 Revert "Fix incorrect socket handling for the HTTP client"
This reverts commit 59da943548.

refs 
2018-01-16 10:44:31 +01:00
Gunnar Beutner 59da943548 Fix incorrect socket handling for the HTTP client 2017-12-12 11:18:09 +01:00
Noah Hilverling 3e8f78e2cc Process: Fix fork error handling
refs 
2017-10-23 11:01:42 +02:00
Noah Hilverling 7930ae5094 Process: Remove log message from child process 2017-10-23 11:01:16 +02:00
Gunnar Beutner f2d437e96c Implement support for migrating certificates to /var/lib/icinga2/certs
This commit includes documentation too.

Signed-off-by: Michael Friedrich <michael.friedrich@icinga.com>
2017-10-20 14:06:02 +02:00
Michael Friedrich 9d68ae9f1f Merge pull request from Icinga/fix/config-validation-fails-on-windows-with-unprivileged-account-5515
Add windows process elevation and log message if user does not have privileges to read/write files
2017-10-13 16:31:12 +02:00
Michael Friedrich 0b1ce7111c Merge pull request from Al2Klimov/bugfix/failure-to-kill-check-command-after-exceeding-timeout-is-not-reported-4981
Report failure to kill check command after exceeding timeout
2017-10-13 13:57:26 +02:00
Michael Friedrich 9a04a99400 Merge pull request from Icinga/feature/cn-check-for-san
Add subjectAltName extension for all non-CA certificates
2017-10-10 17:50:01 +02:00
Michael Friedrich c0a3de64fb Fix match(), regex(), cidr_match() behaviour with MatchAll and empty arrays
fixes 
2017-09-29 14:45:15 +02:00
Noah Hilverling aab50f669c Add process elevation & log message if user does not have enough privileges
refs 
2017-09-22 10:25:17 +02:00
Noah Hilverling ea24af6590 SyslogLogger: Implement option to set syslog facility
fixes 
2017-09-20 14:09:51 +02:00
Gunnar Beutner 5179faceab Implement new script functions: path_exists, glob and glob_recursive 2017-09-18 13:59:03 +02:00
Gunnar Beutner 774936bfe8 Implement support for pki::UpdateCertificate messages
refs 
2017-09-12 12:52:49 +02:00
Gunnar Beutner 0ec07bce51 Implement support for updating client certificates
refs 
2017-09-12 12:52:49 +02:00
Gunnar Beutner abdd4b307b Implement the 'ca list' and 'ca sign' CLI commands
refs 
2017-09-12 12:52:49 +02:00
Gunnar Beutner 510e2d622a Implement support for ticket-less certificate requests
refs 
2017-09-12 12:52:49 +02:00
Michael Friedrich 344b047ea0 Move Base64 class into libbase
refs 
2017-09-12 12:52:49 +02:00
Gunnar Beutner 3385122bc3 Add subjectAltName extension for all non-CA certificates 2017-09-06 12:25:36 +02:00
Michael Friedrich 732a5849d5 Change FIFO::Optimize() frequency for large messages
refs 
2017-08-21 11:24:39 +02:00
Noah Hilverling 5b9337e130 Process: Fix JSON parsing error on process helper crash 2017-08-14 08:27:04 +02:00
Gunnar Beutner c8b4fee843 Make rlimits configurable by adding three variables: RLimitFiles, RLimitProcesses and RLimitStack
refs 
2017-06-23 12:42:12 +02:00
Michael Friedrich 6036ec20f5 Build fix for Debian Wheezy
fixes 
2017-06-16 16:57:05 +02:00
Gunnar Beutner f9feb41877 Implement support for handling exceptions in user scripts 2017-06-13 14:03:41 +02:00
Michael Friedrich 79c45ea811 Build fix for OpenSSL 0.9.8 and stack_st_X509_EXTENSION 2017-05-26 13:16:20 +02:00
Michael Friedrich 456cfdc636 Implement WorkQueue metric stats and periodic logging
refs 
2017-05-23 16:00:21 +02:00
Michael Friedrich 52d986d02b Revert "Add LogstashWriter feature"
This reverts commit f5a971f5b0.

refs 
2017-05-23 12:05:01 +02:00
Michael Friedrich 4c7660190f Revert "Review LogstashWriter feature implementation"
This reverts commit bd5ff814f2.

refs 
2017-05-23 12:04:08 +02:00
Gunnar Beutner fa874e659b Build fix for I2_LEAK_DEBUG 2017-05-22 11:42:47 +02:00
Gunnar Beutner 7130e5e387 Merge pull request from Icinga/feature/array-match
Implement new array match functionality

fixes  
fixes 
2017-05-16 14:22:35 +02:00