[checkmk-commits] [tribe29/checkmk] 595b1c: CMK-11294: New agent CA

Branch: refs/heads/master Home: https://github.com/tribe29/checkmk Commit: 595b1c498ea624c45c8cf043f22517f1ff1f028d https://github.com/tribe29/checkmk/commit/595b1c498ea624c45c8cf043f22517f1f… Author: Andreas Umbreit <andreas.umbreit(a)tribe29.com> Date: 2023-02-02 (Thu, 02 Feb 2023) Changed paths: M omd/packages/omd/omdlib/main.py Log Message: ----------- CMK-11294: New agent CA - Create new agent CA under ~/etc/ssl/agents/ca.pem on omd create and omd update - On omd update, if ~/etc/ssl/agents is not preexisting, create symlink ~/etc/ssl/agents/legacy_ca.pem that links to ~/etc/ssl/ca.pem - ~/etc/ssl/agents/ca.pem shall be used as signing CA for CSRs from agent controllers - All root certs under ~/etc/ssl/agents/ shall be used to verify agent certificates (either as client or as server certs). Change-Id: I1743f2fa931ba57540ee970ef8597ee15030b6f1