Branch: refs/heads/master
Home: https://github.com/tribe29/checkmk
Commit: 59da6c1a4e9d5284de0f737a86c8c2ca6228290f
https://github.com/tribe29/checkmk/commit/59da6c1a4e9d5284de0f737a86c8c2ca6…
Author: Marcel Arentz <marcel.arentz(a)tribe29.com>
Date: 2023-04-04 (Tue, 04 Apr 2023)
Changed paths:
A .werks/15512
Log Message:
-----------
15512 FIX Cloud VM Dashboards: replace host summary dashlet with service summary dashlet
As piggyback hosts currently do not have a host state (except UP), the overview
dashlet is replaced by an overview of the VM specfic services of the particular
cloud special agent.
Change-Id: Idb064cd29663dd88ba4cff55559b29f1a0d48841
Commit: 9165b7d120daf5a8fb64fea3e40975e17aff3096
https://github.com/tribe29/checkmk/commit/9165b7d120daf5a8fb64fea3e40975e17…
Author: Moritz Kiemer <moritz.kiemer(a)tribe29.com>
Date: 2023-04-04 (Tue, 04 Apr 2023)
Changed paths:
M checks/db2_backup
M checks/ddn_s2a_faultsbasic
M checks/decru_fans
M checks/decru_power
M checks/dell_powerconnect_cpu
M checks/domino_transactions
M checks/domino_users
Log Message:
-----------
never discover string params IV: checks/d*
Change-Id: I9877514c9d8e1be2d5f666e33c8d61a17b70c78e
Compare: https://github.com/tribe29/checkmk/compare/a0a73995f160...9165b7d120da
Branch: refs/heads/master
Home: https://github.com/tribe29/checkmk
Commit: 687f0335aedca2f8ed69f5266e647d1872ca87d9
https://github.com/tribe29/checkmk/commit/687f0335aedca2f8ed69f5266e647d187…
Author: Joerg Herbel <joerg.herbel(a)tribe29.com>
Date: 2023-04-04 (Tue, 04 Apr 2023)
Changed paths:
M .werks/15411
Log Message:
-----------
Fix typo in werk #15411
Change-Id: Icd913dd74b1af60ce66f587dd2a357ec490f943e
Commit: cd74de3ac0968cd02ac0bbf939e702c1a9886e79
https://github.com/tribe29/checkmk/commit/cd74de3ac0968cd02ac0bbf939e702c1a…
Author: Moritz Kiemer <moritz.kiemer(a)tribe29.com>
Date: 2023-04-04 (Tue, 04 Apr 2023)
Changed paths:
M tests/unit/cmk/gui/watolib/test_services.py
Log Message:
-----------
fix test mocks
Change-Id: I82855fbb0c66c8c9ba4d3515d5eb6a5ab259e149
Commit: fda60b80dc7c5365038b9052179045adb629c95d
https://github.com/tribe29/checkmk/commit/fda60b80dc7c5365038b9052179045adb…
Author: Moritz Kiemer <moritz.kiemer(a)tribe29.com>
Date: 2023-04-04 (Tue, 04 Apr 2023)
Changed paths:
M cmk/automations/results.py
M cmk/base/agent_based/discovery/__init__.py
M cmk/base/agent_based/discovery/preview.py
M cmk/base/automations/check_mk.py
M cmk/gui/wato/pages/services.py
M cmk/gui/watolib/services.py
M cmk/utils/html.py
M tests/unit/cmk/automations/test_results.py
M tests/unit/cmk/gui/plugins/openapi/test_openapi_service_discovery.py
M tests/unit/cmk/gui/watolib/test_services.py
Log Message:
-----------
transport source results to UI
Transport the information of failed sources to the UI.
This allows us to give a more precise error message.
Also we can render the source results for the user to contemplate.
This is done in a follow-up commit.
Change-Id: I86dc1a80d02af3d7cb207ad5b01c751854aa615e
display source results in page
Change-Id: Ieb3782691554b46377cfb90474c8493e0a9372a7
Commit: bc695612b8ccb71fa00859798e28aec77e39c7b4
https://github.com/tribe29/checkmk/commit/bc695612b8ccb71fa00859798e28aec77…
Author: Moritz Kiemer <moritz.kiemer(a)tribe29.com>
Date: 2023-04-04 (Tue, 04 Apr 2023)
Changed paths:
M cmk/base/config.py
R tests/integration/cmk/base/helper_verify_check_1.py
R tests/integration/cmk/base/helper_verify_check_2.py
R tests/integration/cmk/base/helper_verify_factory_settings.py
M tests/integration/cmk/base/test_check_variables.py
M tests/testlib/base.py
Log Message:
-----------
cleanup config loading I
We no longer load the config values found in .mk files
into the legacy check plugins contexts. See Werk 15250.
Change-Id: I2f2e177a2df500853fd83ee39e9b5eb093ef455d
Commit: c97abcc5f9d9b317515babe57e2fc76279d96a93
https://github.com/tribe29/checkmk/commit/c97abcc5f9d9b317515babe57e2fc7627…
Author: Moritz Kiemer <moritz.kiemer(a)tribe29.com>
Date: 2023-04-04 (Tue, 04 Apr 2023)
Changed paths:
M cmk/base/_autochecks.py
M cmk/base/config.py
M cmk/utils/type_defs/__init__.py
M cmk/utils/type_defs/_misc.py
Log Message:
-----------
cleanup config loading II
We no longer need the config values found in .mk files
for the legacy check plugins contexts. See Werk 15250.
Change-Id: I2e1137f8f6829528c4092ab8ecd3a7d284bb544a
Commit: ed1874936ca8a424d9a0ab486aae9fa8d8f0831a
https://github.com/tribe29/checkmk/commit/ed1874936ca8a424d9a0ab486aae9fa8d…
Author: Moritz Kiemer <moritz.kiemer(a)tribe29.com>
Date: 2023-04-04 (Tue, 04 Apr 2023)
Changed paths:
M cmk/base/config.py
M tests/testlib/base.py
Log Message:
-----------
cleanup config loading III
Drop unused variables. See Werk 15250.
Change-Id: I7c852325701ddaa60b5045836f84fed539ebd3fe
Commit: de01a88b64bafd7a3a19cf3f7a22eb384e402205
https://github.com/tribe29/checkmk/commit/de01a88b64bafd7a3a19cf3f7a22eb384…
Author: Moritz Kiemer <moritz.kiemer(a)tribe29.com>
Date: 2023-04-04 (Tue, 04 Apr 2023)
Changed paths:
M cmk/base/config.py
Log Message:
-----------
cleanup config loading IV
Remove check default variables from default config. See Werk 15250.
Change-Id: I4f9aedef33ff8c417948d0c24b214ea0e012312a
Commit: 7bc7fd536a23b7f507efa14aaf6e6c470aa951b9
https://github.com/tribe29/checkmk/commit/7bc7fd536a23b7f507efa14aaf6e6c470…
Author: Moritz Kiemer <moritz.kiemer(a)tribe29.com>
Date: 2023-04-04 (Tue, 04 Apr 2023)
Changed paths:
M cmk/base/config.py
Log Message:
-----------
cleanup config loading V
We no longer need to know whether all
checks have been loaded.
Change-Id: I46f3cd487f8d4212269ee86d483dc6d25f5d2ef0
Commit: 4d88a333adea532a910c130d242b13ed304048bb
https://github.com/tribe29/checkmk/commit/4d88a333adea532a910c130d242b13ed3…
Author: Moritz Kiemer <moritz.kiemer(a)tribe29.com>
Date: 2023-04-04 (Tue, 04 Apr 2023)
Changed paths:
M cmk/base/config.py
Log Message:
-----------
cleanup config loading VI
Remove unused context variable.
Change-Id: I9ddd74cc5920dc411d798b3c8806c3e8e9972f20
Compare: https://github.com/tribe29/checkmk/compare/a6873c374e31...4d88a333adea
Branch: refs/heads/2.2.0
Home: https://github.com/tribe29/checkmk
Commit: f482c5ff2fae1478eee9c1c8d8954416e861bf50
https://github.com/tribe29/checkmk/commit/f482c5ff2fae1478eee9c1c8d8954416e…
Author: Joerg Herbel <joerg.herbel(a)tribe29.com>
Date: 2023-04-04 (Tue, 04 Apr 2023)
Changed paths:
M .werks/15411
Log Message:
-----------
Fix typo in werk #15411
Change-Id: Icd913dd74b1af60ce66f587dd2a357ec490f943e
Commit: 12ce2b70023933964525f1373e7554e286dd7520
https://github.com/tribe29/checkmk/commit/12ce2b70023933964525f1373e7554e28…
Author: Moritz Kiemer <moritz.kiemer(a)tribe29.com>
Date: 2023-04-04 (Tue, 04 Apr 2023)
Changed paths:
M tests/unit/cmk/gui/watolib/test_services.py
Log Message:
-----------
fix test mocks
Change-Id: I82855fbb0c66c8c9ba4d3515d5eb6a5ab259e149
Commit: a36b101fc33ba26dea4781afb350daf787f155cf
https://github.com/tribe29/checkmk/commit/a36b101fc33ba26dea4781afb350daf78…
Author: Moritz Kiemer <moritz.kiemer(a)tribe29.com>
Date: 2023-04-04 (Tue, 04 Apr 2023)
Changed paths:
M cmk/automations/results.py
M cmk/base/agent_based/discovery/__init__.py
M cmk/base/agent_based/discovery/preview.py
M cmk/base/automations/check_mk.py
M cmk/gui/wato/pages/services.py
M cmk/gui/watolib/services.py
M cmk/utils/html.py
M tests/unit/cmk/automations/test_results.py
M tests/unit/cmk/gui/plugins/openapi/test_openapi_service_discovery.py
M tests/unit/cmk/gui/watolib/test_services.py
Log Message:
-----------
transport source results to UI
Transport the information of failed sources to the UI.
This allows us to give a more precise error message.
Also we can render the source results for the user to contemplate.
This is done in a follow-up commit.
CMK-12913 / CMK 12914
Change-Id: Ieb3782691554b46377cfb90474c8493e0a9372a7
Compare: https://github.com/tribe29/checkmk/compare/954f14f2433a...a36b101fc33b
Branch: refs/heads/2.2.0
Home: https://github.com/tribe29/checkmk
Commit: ce677f69862969ebc1b674f78daa103be646b7f4
https://github.com/tribe29/checkmk/commit/ce677f69862969ebc1b674f78daa103be…
Author: Sven Panne <sven.panne(a)tribe29.com>
Date: 2023-04-04 (Tue, 04 Apr 2023)
Changed paths:
M livestatus/src/NagiosCore.cc
M livestatus/src/NagiosCore.h
M livestatus/src/TableHosts.cc
M livestatus/src/TableServices.cc
M livestatus/src/test/test_Table.cc
M packages/livestatus/include/livestatus/MonitoringCore.h
Log Message:
-----------
Introduced comment/downtime iteration without locking.
This will be useful later when we fix our locking, avoiding the need for
recursive locks.
Change-Id: I34e61228f1608d5cbf63c04d9d2f6f0d14dadbd6
Commit: 362d3a984ba3b80ac5b7a21d681ad70102921093
https://github.com/tribe29/checkmk/commit/362d3a984ba3b80ac5b7a21d681ad7010…
Author: Sven Panne <sven.panne(a)tribe29.com>
Date: 2023-04-04 (Tue, 04 Apr 2023)
Changed paths:
M livestatus/src/TableComments.cc
M livestatus/src/TableDowntimes.cc
M livestatus/src/TableLog.cc
M livestatus/src/TableServices.cc
M livestatus/src/TableServices.h
M livestatus/src/TableServicesByGroup.cc
M livestatus/src/TableServicesByHostGroup.cc
M livestatus/src/TableStateHistory.cc
Log Message:
-----------
Fix one case of boolean blindness.
Change-Id: I0912f8097d81b26390002269505f3accc0fd0373
Commit: 954f14f2433aecbbc88c837565db925b36ba3599
https://github.com/tribe29/checkmk/commit/954f14f2433aecbbc88c837565db925b3…
Author: Sven Panne <sven.panne(a)tribe29.com>
Date: 2023-04-04 (Tue, 04 Apr 2023)
Changed paths:
M livestatus/src/TableComments.cc
M livestatus/src/TableDowntimes.cc
M livestatus/src/TableEventConsoleEvents.cc
M livestatus/src/TableHosts.cc
M livestatus/src/TableHosts.h
M livestatus/src/TableHostsByGroup.cc
M livestatus/src/TableLog.cc
M livestatus/src/TableServices.cc
M livestatus/src/TableServices.h
M livestatus/src/TableServicesByGroup.cc
M livestatus/src/TableServicesByHostGroup.cc
M livestatus/src/TableStateHistory.cc
M packages/livestatus/include/livestatus/Table.h
Log Message:
-----------
Fix locking of comments and downtimes columns.
This needs some serious cleanup, but at least it's correct now.
Change-Id: Ic2369b2df06aca4858d068e85517842464caf2a3
Compare: https://github.com/tribe29/checkmk/compare/ff698562605e...954f14f2433a
Branch: refs/heads/master
Home: https://github.com/tribe29/checkmk
Commit: 58d31a1c0eaeadf40ae9cd7033d452160dd6db96
https://github.com/tribe29/checkmk/commit/58d31a1c0eaeadf40ae9cd7033d452160…
Author: Joerg Herbel <joerg.herbel(a)tribe29.com>
Date: 2023-04-04 (Tue, 04 Apr 2023)
Changed paths:
A .werks/15411
M checks/ups_eaton_enviroment
M cmk/base/plugins/agent_based/aruba_chassis.py
M cmk/base/plugins/agent_based/utils/temperature.py
M tests/unit/checks/generictests/datasets/ups_eaton_environment.py
M tests/unit/cmk/base/plugins/agent_based/test_aruba_chassis.py
M tests/unit/cmk/base/plugins/agent_based/test_aruba_psu.py
M tests/unit/cmk/base/plugins/agent_based/test_bluecoat_sensors.py
M tests/unit/cmk/base/plugins/agent_based/test_brocade_optical.py
M tests/unit/cmk/base/plugins/agent_based/test_cisco_meraki_org_sensor_readings.py
M tests/unit/cmk/base/plugins/agent_based/test_cisco_temperature.py
M tests/unit/cmk/base/plugins/agent_based/test_cmciii.py
M tests/unit/cmk/base/plugins/agent_based/test_entity_sensors.py
M tests/unit/cmk/base/plugins/agent_based/test_etherbox.py
M tests/unit/cmk/base/plugins/agent_based/test_liebert_temp_air.py
M tests/unit/cmk/base/plugins/agent_based/test_liebert_temp_fluid.py
M tests/unit/cmk/base/plugins/agent_based/test_lnx_thermal.py
M tests/unit/cmk/base/plugins/agent_based/test_nvidia_smi.py
M tests/unit/cmk/base/plugins/agent_based/test_primekey_temperature.py
M tests/unit/cmk/base/plugins/agent_based/test_synology_disk.py
M tests/unit/cmk/base/plugins/agent_based/test_ups_modulys_battery.py
M tests/unit/cmk/base/plugins/agent_based/utils/test_enviromux.py
M tests/unit/cmk/base/plugins/agent_based/utils/test_temperature.py
Log Message:
-----------
15411 FIX Render temperature units with space in service outputs
CMK-12911
Change-Id: I298e179703ea4585d0f9d7d2d07fcd0cab0d1305
Commit: 30d226297663e54c4b732a55c26110d28a9393b6
https://github.com/tribe29/checkmk/commit/30d226297663e54c4b732a55c26110d28…
Author: Konstantin Baikov <konstantin.baikov(a)tribe29.com>
Date: 2023-04-04 (Tue, 04 Apr 2023)
Changed paths:
M cmk/ec/actions.py
M cmk/ec/main.py
Log Message:
-----------
Remove some Any from EC
Temporary use object where possible
Change-Id: Ie8f4e8a8a27fca2b528ac585892592a60b1db4cb
Commit: c8c598223180d9cc0e92a89afbf3c05341ca7a1f
https://github.com/tribe29/checkmk/commit/c8c598223180d9cc0e92a89afbf3c0534…
Author: Konstantin Baikov <konstantin.baikov(a)tribe29.com>
Date: 2023-04-04 (Tue, 04 Apr 2023)
Changed paths:
M livestatus/api/perl/inc/Module/Install/Makefile.pm
M livestatus/api/python/livestatus.py
M livestatus/nagios4/fanout.h
M livestatus/nagios4/pqueue.h
M livestatus/nagios4/worker.h
M livestatus/src/RRDColumn.cc
M livestatus/src/TableEventConsoleEvents.cc
M livestatus/src/TableLog.cc
M livestatus/src/TableStateHistory.cc
M livestatus/src/TimeperiodsCache.cc
M livestatus/src/nagios.h
M livestatus/src/test/DummyNagios.cc
M packages/livestatus/include/livestatus/LogCache.h
M packages/livestatus/include/livestatus/LogEntry.h
M packages/livestatus/include/livestatus/RendererCSV.h
M packages/livestatus/include/livestatus/Table.h
M scripts/run-in-docker.sh
Log Message:
-----------
Fix typos in livestatus
Change-Id: I1e276e82cc0958ef9e850a1922009c748794e6a8
Commit: 3de766da48eea5f29c3cc8e8f54975f927fe1fe7
https://github.com/tribe29/checkmk/commit/3de766da48eea5f29c3cc8e8f54975f92…
Author: Mathias Laurin <mathias.laurin(a)tribe29.com>
Date: 2023-04-04 (Tue, 04 Apr 2023)
Changed paths:
M cmk/gui/main_modules.py
M cmk/gui/plugins/main_modules/registration.py
M cmk/gui/raw/plugins/main_modules/registration.py
Log Message:
-----------
Let "plugins" handle edition
The modules are loaded explicitly via import and over the plugin-
specific `load_plugins()` magic. However, the `load_plugins()` magic
didn't respect the edition. This resulted in plugins loaded with the
wrong edition-specific code.
The edition-specific plugins are now loaded under an edition guard. The
edition guard is independent from the the loading mechanism and is
therefore less fragile.
CMK-12635
Change-Id: I8b5aa03a5ff4f1ac2a927388b0de0d484b6b8e4b
Commit: 8dbc1771508a9400763649e29adba0b75dcb4c5d
https://github.com/tribe29/checkmk/commit/8dbc1771508a9400763649e29adba0b75…
Author: Maximilian Wirtz <maximilian.wirtz(a)tribe29.com>
Date: 2023-04-04 (Tue, 04 Apr 2023)
Changed paths:
M .werks/15069
Log Message:
-----------
Update Werk text
Clarify the affected versions and what this Werk actually does.
CMK-12828
Change-Id: I2e42646615f48be7e854ee7dcc8bff4109a46831
Commit: 99cc7174cfb97aced81e71e79460b7c10447aceb
https://github.com/tribe29/checkmk/commit/99cc7174cfb97aced81e71e79460b7c10…
Author: Rebekka Seltmann <rebekka.seltmann(a)tribe29.com>
Date: 2023-04-04 (Tue, 04 Apr 2023)
Changed paths:
M cmk/utils/licensing/export.py
M tests/unit/cmk/utils/licensing/test_export.py
M tests/unit/cmk/utils/licensing/test_usage.py
Log Message:
-----------
Correctly parse ntop extension when written by activate_changes
CMK-12864
Change-Id: Ic32c436632a2f809026c175ae88857e8d4573c18
Commit: a6873c374e3137bd0c57c68197fc62c5669a7344
https://github.com/tribe29/checkmk/commit/a6873c374e3137bd0c57c68197fc62c56…
Author: Sven Panne <sven.panne(a)tribe29.com>
Date: 2023-04-04 (Tue, 04 Apr 2023)
Changed paths:
M livestatus/src/TableComments.cc
M livestatus/src/TableDowntimes.cc
M livestatus/src/TableEventConsoleEvents.cc
M livestatus/src/TableHosts.cc
M livestatus/src/TableHosts.h
M livestatus/src/TableHostsByGroup.cc
M livestatus/src/TableLog.cc
M livestatus/src/TableServices.cc
M livestatus/src/TableServices.h
M livestatus/src/TableServicesByGroup.cc
M livestatus/src/TableServicesByHostGroup.cc
M livestatus/src/TableStateHistory.cc
M packages/livestatus/include/livestatus/Table.h
Log Message:
-----------
Fix locking of comments and downtimes columns.
This needs some serious cleanup, but at least it's correct now.
Change-Id: Ic2369b2df06aca4858d068e85517842464caf2a3
Compare: https://github.com/tribe29/checkmk/compare/04ac1e68b3a0...a6873c374e31
Branch: refs/heads/2.1.0
Home: https://github.com/tribe29/checkmk
Commit: 073f4591d7fe27742da1333cc8b3970598bbb785
https://github.com/tribe29/checkmk/commit/073f4591d7fe27742da1333cc8b397059…
Author: Timotheus Bachinger <timotheus.bachinger(a)tribe29.com>
Date: 2023-04-04 (Tue, 04 Apr 2023)
Changed paths:
A .werks/13263
M checkman/check_mailboxes
M checks/check_mailboxes
M cmk/gui/plugins/wato/active_checks_mailbox.py
M cmk/utils/mailbox.py
M tests/unit/checks/test_check_mailboxes.py
Log Message:
-----------
Revert "Revert "13263 Add (non-legacy) OAuth2 support (using TenantID, ClientID and ClientSecret) to check_mailboxes active check""
This reverts commit 265499daddf60fff2882be304724909de4449456.
Change-Id: I39806b77ba1c2128aa73c1a48d84e096ba675e74
Commit: c3e4835f82a82e557b906f6e81d59bdeb8f87e6f
https://github.com/tribe29/checkmk/commit/c3e4835f82a82e557b906f6e81d59bdeb…
Author: Timotheus Bachinger <timotheus.bachinger(a)tribe29.com>
Date: 2023-04-04 (Tue, 04 Apr 2023)
Changed paths:
M cmk/gui/plugins/wato/active_checks_mailbox.py
Log Message:
-----------
Revert "Revert "check_mail_loop: Fix a ValueSpec transform bug""
This reverts commit 57c68e643c08909c619c1bd37dc9814a532b9f39.
Change-Id: I6f06b0b5be960aef000158521342ff27f624783c
Commit: 84bd20e2b2afdd99f0b9674157d50f623d71d63a
https://github.com/tribe29/checkmk/commit/84bd20e2b2afdd99f0b9674157d50f623…
Author: Timotheus Bachinger <timotheus.bachinger(a)tribe29.com>
Date: 2023-04-04 (Tue, 04 Apr 2023)
Changed paths:
M cmk/gui/plugins/wato/active_checks_mailbox.py
M tests/unit/cmk/gui/plugins/wato/test_active_checks.py
Log Message:
-----------
Make doctest a real unit test
... and add a bug revealing test case
Change-Id: I46e2dfe3c2a02842882672781c3433c483ed5cd1
Commit: 2d2751fd6f879d5d37ce3d165f83ebdc5c927221
https://github.com/tribe29/checkmk/commit/2d2751fd6f879d5d37ce3d165f83ebdc5…
Author: Timotheus Bachinger <timotheus.bachinger(a)tribe29.com>
Date: 2023-04-04 (Tue, 04 Apr 2023)
Changed paths:
M cmk/gui/plugins/wato/active_checks_mailbox.py
M tests/unit/cmk/gui/plugins/wato/test_active_checks.py
Log Message:
-----------
Fix check_mail_loop transform
+ synchronize transform code among check_mail* transform functions
... for updates within 2.1
Change-Id: I0f86aec8e6f90f56f0e91492e3e458c9334df2bf
Commit: 6243e36f3a66f35aa667d63a7b5b30116b1be6c2
https://github.com/tribe29/checkmk/commit/6243e36f3a66f35aa667d63a7b5b30116…
Author: Maximilian Wirtz <maximilian.wirtz(a)tribe29.com>
Date: 2023-04-04 (Tue, 04 Apr 2023)
Changed paths:
A .werks/15070
M omd/packages/stunnel/skel/etc/stunnel/server.conf
Log Message:
-----------
15070 SEC Drop support for weak DH ciphers
With this Werk two TLS ciphers are disabled from the <tt>stunnel</tt> configuration.
<tt>stunnel</tt> is used when the <i>Encrypt communication</i> option in <i>Enable Livestatus access via network (TCP)</i> or <i>Notification Spooler Configuration</i> is used.
To our knowledge no attacks on these ciphers are known, this is a hardening measure.
We rate this with a CVSS of 0 (None) (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N). This CVSS is primarily meant to please automatic scanners.
Change-Id: I0a098eccc7a90cd62dc156819b09e90003cba2db
Commit: f8156d4a97779f6a1123450d247e612f945ad28e
https://github.com/tribe29/checkmk/commit/f8156d4a97779f6a1123450d247e612f9…
Author: Maximilian Wirtz <maximilian.wirtz(a)tribe29.com>
Date: 2023-04-04 (Tue, 04 Apr 2023)
Changed paths:
M .werks/15069
Log Message:
-----------
Update Werk text
Clarify the affected versions and what this Werk actually does.
CMK-12828
Change-Id: I2e42646615f48be7e854ee7dcc8bff4109a46831
(cherry picked from commit 8dbc1771508a9400763649e29adba0b75dcb4c5d)
Compare: https://github.com/tribe29/checkmk/compare/a2eb47c786dc...f8156d4a9777
Branch: refs/heads/2.0.0
Home: https://github.com/tribe29/checkmk
Commit: 2def61975c0b42efcac0b3419230484fff135aaf
https://github.com/tribe29/checkmk/commit/2def61975c0b42efcac0b3419230484ff…
Author: Maximilian Wirtz <maximilian.wirtz(a)tribe29.com>
Date: 2023-04-04 (Tue, 04 Apr 2023)
Changed paths:
M .werks/15069
Log Message:
-----------
Update Werk text
Clarify the affected versions and what this Werk actually does.
CMK-12828
Change-Id: I2e42646615f48be7e854ee7dcc8bff4109a46831
(cherry picked from commit 8dbc1771508a9400763649e29adba0b75dcb4c5d)
Commit: ff83a055253f6f54ea541729aab38b0b44b885a5
https://github.com/tribe29/checkmk/commit/ff83a055253f6f54ea541729aab38b0b4…
Author: Maximilian Wirtz <maximilian.wirtz(a)tribe29.com>
Date: 2023-04-04 (Tue, 04 Apr 2023)
Changed paths:
A .werks/15070
M omd/packages/stunnel/skel/etc/stunnel/server.conf
Log Message:
-----------
15070 SEC Drop support for weak DH ciphers
With this Werk two TLS ciphers are disabled from the <tt>stunnel</tt> configuration.
<tt>stunnel</tt> is used when the <i>Encrypt communication</i> option in <i>Enable Livestatus access via network (TCP)</i> or <i>Notification Spooler Configuration</i> is used.
To our knowledge no attacks on these ciphers are known, this is a hardening measure.
We rate this with a CVSS of 0 (None) (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N). This CVSS is primarily meant to please automatic scanners.
Diff to the pick:
Set sslVersion to sslVersionMin, so we enable TLS1.3.
Change-Id: I0a098eccc7a90cd62dc156819b09e90003cba2db
Compare: https://github.com/tribe29/checkmk/compare/d2bcd2015d31...ff83a055253f