[checkmk-commits] 3114 linux and windows agent can now be configured to directly encrypt their output. For real-time updates encryption is now optional (but active per default)

Module: check_mk Branch: master Commit: ef09824efa32c03d2db723b0b4c0939dcaf2f1b3 URL: http://git.mathias-kettner.de/git/?p=check_mk.git;a=commit;h=ef09824efa32c0… Author: Sebastian Herbord <sh(a)mathias-kettner.de> Date: Tue Apr 5 17:32:56 2016 +0200 3114 linux and windows agent can now be configured to directly encrypt their output. For real-time updates encryption is now optional (but active per default) This feature can be configured through Host&Service Parameters -> Access to agents -> Encryption. When "Encryption for Agents" is set to "enforce" or "enable", two things will happen: a) Baked windows or linux agents will be configured to encrypt their output b) check_mk will be configured to try to decrypt output from agents. In case of "enable" it will also accept unencrypted output, in case of "enforce" it won't. This change also affects real-time updates as these were already encrypted. The passphrase configured for real-time updates will now only serve as a default, agents with "Encryption" configured will use the same passphrase for rt and regular updates. Finally, it is now also possible to configure real-time updates to be unencrypted. All encryption happens with AES using 256bit keys and cbc. The above is completely optional, the default behaviour for everything (including real-time updates) is compatible with previous versions. --- .werks/3114 | 23 +++++ ChangeLog | 1 + agents/check_mk_agent.linux | 28 ++++++- agents/windows/Configuration.cc | 13 ++- agents/windows/Configuration.h | 8 +- agents/windows/OutputProxy.cc | 20 +++-- agents/windows/OutputProxy.h | 8 +- agents/windows/build_version | 2 +- agents/windows/check_mk.example.ini | 9 +- agents/windows/check_mk_agent-64.exe | Bin 939520 -> 939520 bytes agents/windows/check_mk_agent-64.unversioned.exe | Bin 939520 -> 939520 bytes agents/windows/check_mk_agent.cc | 97 ++++++++++++---------- agents/windows/check_mk_agent.exe | Bin 866304 -> 867328 bytes agents/windows/check_mk_agent.msi | Bin 2067456 -> 2068480 bytes agents/windows/check_mk_agent.unversioned.exe | Bin 866304 -> 867328 bytes agents/windows/install_agent-64.exe | Bin 431102 -> 431298 bytes agents/windows/install_agent.exe | Bin 421747 -> 422023 bytes modules/check_mk.py | 8 ++ modules/check_mk_base.py | 40 +++++++++ modules/config.py | 1 + web/htdocs/images/button_showhide.png | Bin 0 -> 3885 bytes web/htdocs/js/checkmk.js | 11 +++ web/htdocs/valuespec.py | 18 +++- web/plugins/wato/check_mk_configuration.py | 36 ++++++++ 24 files changed, 249 insertions(+), 74 deletions(-) Diff: http://git.mathias-kettner.de/git/?p=check_mk.git;a=commitdiff;h=ef09824efa…