[checkmk-commits] [tribe29/checkmk] 2f8458: agent controller: some refactoring

Branch: refs/heads/2.1.0 Home: https://github.com/tribe29/checkmk Commit: 2f84580217378dd7627451122300a1bc7a1e5cd9 https://github.com/tribe29/checkmk/commit/2f84580217378dd7627451122300a1bc7… Author: Joerg Herbel <joerg.herbel(a)tribe29.com> Date: 2022-06-30 (Thu, 30 Jun 2022) Changed paths: M agents/cmk-agent-ctl/src/agent_receiver_api.rs M agents/cmk-agent-ctl/src/certs.rs M agents/cmk-agent-ctl/src/config.rs Log Message: ----------- agent controller: some refactoring Reduce the number of call variants for certs::client, which makes the following changes easier. This is a preparation for implementing a check which ensures that the server certificate presented by the receiver does not contain a valid UUID as CN. CMK-10709 Change-Id: I97a4bb2380625ae2d960d217c3cab3ae79754896 Commit: 039a93b3fe6786c945c140f30f47995f739197a1 https://github.com/tribe29/checkmk/commit/039a93b3fe6786c945c140f30f47995f7… Author: Joerg Herbel <joerg.herbel(a)tribe29.com> Date: 2022-06-30 (Thu, 30 Jun 2022) Changed paths: M agents/cmk-agent-ctl/src/certs.rs M agents/cmk-agent-ctl/src/constants.rs M agents/cmk-agent-ctl/src/tls_server.rs Log Message: ----------- agent controller: some refactoring This is a preparation for implementing a check which ensures that the server certificate presented by the receiver does not contain a valid UUID as CN. CMK-10709 Change-Id: Ida517dadcac3784b16d38f3235f429221b201c51 Commit: 2672f7f66ed3348c7353933c9bd6b762ac5e0755 https://github.com/tribe29/checkmk/commit/2672f7f66ed3348c7353933c9bd6b762a… Author: Joerg Herbel <joerg.herbel(a)tribe29.com> Date: 2022-06-30 (Thu, 30 Jun 2022) Changed paths: M agents/cmk-agent-ctl/src/certs.rs M agents/cmk-agent-ctl/src/config.rs Log Message: ----------- agent controller: Verify that CN is no UUID when contacting receiver This mitigates possible attack vectors where a compromised controller certificate is used to impersonate the receiver. CMK-10709 Change-Id: I432b413375fca526bba95ad989c1e6632b2c79e2 Commit: 63daf7cba763328b60b24c18b38fa24e9f577bbb https://github.com/tribe29/checkmk/commit/63daf7cba763328b60b24c18b38fa24e9… Author: Joerg Herbel <joerg.herbel(a)tribe29.com> Date: 2022-06-30 (Thu, 30 Jun 2022) Changed paths: M agents/cmk-agent-ctl/Cargo.lock M agents/cmk-agent-ctl/Cargo.toml Log Message: ----------- agent controller: Switch to rustls in reqwest package Change-Id: I0ecf49b45c6a1ded809e5f22f99c34cf65aed201 Compare: https://github.com/tribe29/checkmk/compare/467a28ed2a64...63daf7cba763