[checkmk-commits] [tribe29/checkmk] 963363: agent controller: some refactoring

Branch: refs/heads/master Home: https://github.com/tribe29/checkmk Commit: 9633635ee891f2ad064736bad15e8fa0f0ec6f06 https://github.com/tribe29/checkmk/commit/9633635ee891f2ad064736bad15e8fa0f… Author: Joerg Herbel <joerg.herbel(a)tribe29.com> Date: 2022-06-30 (Thu, 30 Jun 2022) Changed paths: M agents/cmk-agent-ctl/src/agent_receiver_api.rs M agents/cmk-agent-ctl/src/certs.rs M agents/cmk-agent-ctl/src/config.rs Log Message: ----------- agent controller: some refactoring Reduce the number of call variants for certs::client, which makes the following changes easier. This is a preparation for implementing a check which ensures that the server certificate presented by the receiver does not contain a valid UUID as CN. CMK-10709 Change-Id: I97a4bb2380625ae2d960d217c3cab3ae79754896 Commit: 2820ca57f6ba6114162dcc8b0a2f53066bed6b01 https://github.com/tribe29/checkmk/commit/2820ca57f6ba6114162dcc8b0a2f53066… Author: Joerg Herbel <joerg.herbel(a)tribe29.com> Date: 2022-06-30 (Thu, 30 Jun 2022) Changed paths: M agents/cmk-agent-ctl/src/certs.rs M agents/cmk-agent-ctl/src/constants.rs M agents/cmk-agent-ctl/src/tls_server.rs Log Message: ----------- agent controller: some refactoring This is a preparation for implementing a check which ensures that the server certificate presented by the receiver does not contain a valid UUID as CN. CMK-10709 Change-Id: Ida517dadcac3784b16d38f3235f429221b201c51 Commit: 954455ed785ca9dbb196828a32061e2cd38436cc https://github.com/tribe29/checkmk/commit/954455ed785ca9dbb196828a32061e2cd… Author: Joerg Herbel <joerg.herbel(a)tribe29.com> Date: 2022-06-30 (Thu, 30 Jun 2022) Changed paths: M agents/cmk-agent-ctl/src/certs.rs M agents/cmk-agent-ctl/src/config.rs Log Message: ----------- agent controller: Verify that CN is no UUID when contacting receiver This mitigates possible attack vectors where a compromised controller certificate is used to impersonate the receiver. CMK-10709 Change-Id: I432b413375fca526bba95ad989c1e6632b2c79e2 Commit: 4d7fe5d8a288a2b07227742184e95fffc6626182 https://github.com/tribe29/checkmk/commit/4d7fe5d8a288a2b07227742184e95fffc… Author: Joerg Herbel <joerg.herbel(a)tribe29.com> Date: 2022-06-30 (Thu, 30 Jun 2022) Changed paths: M agents/cmk-agent-ctl/Cargo.lock M agents/cmk-agent-ctl/Cargo.toml Log Message: ----------- agent controller: Switch to rustls in reqwest package Change-Id: I0ecf49b45c6a1ded809e5f22f99c34cf65aed201 Compare: https://github.com/tribe29/checkmk/compare/31484db1868c...4d7fe5d8a288