Commit Graph

58 Commits

Author SHA1 Message Date
Gunnar Beutner 6e11836791 Add missing comment
refs #10988
2016-02-23 10:50:42 +01:00
Michael Friedrich d1cc56bbaa Only set SSL_OP_NO_COMPRESSION if supported
OpenSSL 0.9.8 does not support this flag.

fixes #10988
2016-02-23 10:50:29 +01:00
Tobias von der Krone ae50334995 Support TLSv1.1 and TLSv1.2 for the cluster transport encryption
From https://wiki.openssl.org/index.php/SSL/TLS_Client:
SSLv23_method specifies the protocols used and behavior of the handshake.
The method essentially means SSLv2 or above, and includes the TLS protocols.
The protocols are further tuned through SSL/TLS options. By using
SSLv23_method (and removing the SSL protocols with SSL_OP_NO_SSLv2 and
SSL_OP_NO_SSLv3), then you will use TLS v1.0 and above, including TLS v1.2.
You will also use a TLS handshake in the TLS Record.

If you use TLSv1_method, then you will only use TLS v1.0.

fixes #10988
2016-02-23 10:50:23 +01:00
Jean Flach e80b335edf Plug two memory leaks
refs #10963
2016-02-23 09:57:40 +01:00
Gunnar Beutner c544c686a8 Update copyright headers for 2016 2016-01-12 08:31:24 +01:00
Michael Friedrich f0a5a0c23c Fix openssl certificate not after overflow on rhel5
refs #10266
2015-10-02 12:11:21 +02:00
Michael Friedrich 9a2ae6e58f Fix missing zero padding for generated CA serial
fixes #10074
2015-09-03 17:12:01 +02:00
Gunnar Beutner c37a23ccba Implement the Icinga Studio application
fixes #10042
2015-08-31 07:50:01 +02:00
Gunnar Beutner 5a72eaa768 Make sure the serial number field is always initialized
fixes #9947
2015-08-18 15:05:53 +02:00
Gunnar Beutner 0b495d1858 Set correct X509 version for certificates
fixes #9769
2015-07-29 12:59:12 +02:00
Gunnar Beutner b357012ded Implement HTTP support
refs #9447
2015-07-09 11:42:34 +02:00
Gunnar Beutner c08aa37c99 Fix crash in MakeX509CSR when using ancient versions of OpenSSL
fixes #8844
2015-03-26 08:23:24 +01:00
Gunnar Beutner bb393a9d4f Remove unused variables 2015-03-02 12:52:37 +01:00
Michael Friedrich 78bfd0204c Update copyright year 2015-01-22 12:00:23 +01:00
Gunnar Beutner 55b7f00382 Remove unnecessary includes 2014-12-15 10:16:06 +01:00
Gunnar Beutner a8b7710800 Fix crash in CreateCert
fixes #7862
2014-11-27 09:35:24 +01:00
Gunnar Beutner 478f03b49a Replace boost::shared_ptr with boost::intrusive_ptr
refs #7622
2014-11-09 16:54:41 +01:00
Gunnar Beutner 196bd89c7a Use OpenSSL's default algorithms for certificate signatures
fixes #7434
2014-10-27 11:32:39 +01:00
Gunnar Beutner 8ce4b3f122 Implement support for serial files
fixes #7393
2014-10-27 10:52:07 +01:00
Gunnar Beutner e80fd0fbfa Update the constants.conf file for "agent setup"
refs #7423
2014-10-23 15:05:25 +02:00
Gunnar Beutner b96e9d26a9 Improve error messages for CLI commands
fixes #7395
2014-10-20 13:40:17 +02:00
Gunnar Beutner 2d5e9514a5 Refactor logging code 2014-10-19 17:52:17 +02:00
Gunnar Beutner b18f57a745 Remove logger_fwd.hpp 2014-10-19 14:50:39 +02:00
Gunnar Beutner 97cf93089b Build fix for FreeBSD 2014-10-16 13:36:25 +02:00
Gunnar Beutner f433679b13 Implement the "pki request" and "pki ticket" commands
refs #7244
2014-10-16 12:27:34 +02:00
Gunnar Beutner 575a9eb849 Implement error handling for the "pki sign-csr" command
refs #7247
2014-10-15 18:23:49 +02:00
Gunnar Beutner c1b92756b5 Implement the "pki sign-csr" command
refs #7274
2014-10-15 16:01:15 +02:00
Gunnar Beutner fab9d7eedf Set CA flag for new CA certificates
refs #7247
2014-10-13 13:58:18 +02:00
Gunnar Beutner a01fb6d6e6 Make sure we're using the right user/group for CLI commands
refs #7246
2014-10-13 13:44:45 +02:00
Gunnar Beutner 4ba3d74c0e Implement the "pki new-csr" command
refs #7247
2014-10-13 12:34:31 +02:00
Gunnar Beutner 39248dad42 Build fix for Windows 2014-08-07 14:23:20 +02:00
Michael Friedrich 87e63edb93 Use a local buffer for ERR_error_string()
refs #6724
refs #6682
2014-08-05 11:30:06 +02:00
Michael Friedrich 9ae37bf109 Add verbose SSL error messages
refs #6682
2014-08-04 17:23:41 +02:00
Gunnar Beutner 541dacb636 Build fix for Linux (oops) 2014-08-04 09:50:30 +02:00
Gunnar Beutner 0de728db64 Build fix for OS X. 2014-08-01 17:05:51 +02:00
Gunnar Beutner 3f647bb779 Fix OpenSSL errors during (re-)negotiation
fixes #6724
2014-08-01 15:23:07 +02:00
Gunnar Beutner 61ba2e647e Add some missing SSL flags
refs #6368
2014-06-30 15:44:08 +02:00
Gunnar Beutner 632026cd9f Rename C++ header files.
Fixes #6291
2014-05-25 16:27:14 +02:00
Gunnar Beutner 12c8814bd8 Fix some more compiler warnings.
Refs #5823
2014-05-11 06:43:01 +02:00
Gunnar Beutner 0fb55f3404 Fix NSIS installer and Windows service.
Refs #4865
2014-04-18 12:15:01 +02:00
Gunnar Beutner 0ea144a64d Set OpenSSL locking callback.
Refs #4865
2014-04-12 21:22:59 +02:00
Michael Friedrich ce737ff2f3 Change copyright header (again).
Fixes #5424
2014-03-19 11:42:47 +01:00
Michael Friedrich 555d72150a Update copyright header.
Fixes #5424
2014-01-09 00:32:11 +01:00
Gunnar Beutner f5f8de8137 Fix compatibility with OpenSSL <1.0.0.
Refs #3657
2013-11-13 10:36:57 +01:00
Gunnar Beutner a5e3c70bcc Implement support for CRLs.
Fixes #3657
2013-11-13 10:30:40 +01:00
Gunnar Beutner 5647694c2a Build fix. 2013-10-17 15:52:26 +02:00
Gunnar Beutner 492aed030e Improve the error message for GetX509Certificate(). 2013-10-17 15:46:50 +02:00
Gunnar Beutner a03c58f27e MakeSSLContext: Check if keys match. 2013-10-15 21:24:55 +02:00
Gunnar Beutner bf1a800e39 Update copyright information. 2013-09-25 07:45:56 +02:00
Gunnar Beutner 4c23245898 Re-enable TLS compression (again). 2013-09-11 17:12:28 +02:00