Branch: refs/heads/master
Home:
https://github.com/tribe29/checkmk
Commit: 9633635ee891f2ad064736bad15e8fa0f0ec6f06
https://github.com/tribe29/checkmk/commit/9633635ee891f2ad064736bad15e8fa0f…
Author: Joerg Herbel <joerg.herbel(a)tribe29.com>
Date: 2022-06-30 (Thu, 30 Jun 2022)
Changed paths:
M agents/cmk-agent-ctl/src/agent_receiver_api.rs
M agents/cmk-agent-ctl/src/certs.rs
M agents/cmk-agent-ctl/src/config.rs
Log Message:
-----------
agent controller: some refactoring
Reduce the number of call variants for certs::client, which makes the
following changes easier. This is a preparation for implementing a
check which ensures that the server certificate presented by the
receiver does not contain a valid UUID as CN.
CMK-10709
Change-Id: I97a4bb2380625ae2d960d217c3cab3ae79754896
Commit: 2820ca57f6ba6114162dcc8b0a2f53066bed6b01
https://github.com/tribe29/checkmk/commit/2820ca57f6ba6114162dcc8b0a2f53066…
Author: Joerg Herbel <joerg.herbel(a)tribe29.com>
Date: 2022-06-30 (Thu, 30 Jun 2022)
Changed paths:
M agents/cmk-agent-ctl/src/certs.rs
M agents/cmk-agent-ctl/src/constants.rs
M agents/cmk-agent-ctl/src/tls_server.rs
Log Message:
-----------
agent controller: some refactoring
This is a preparation for implementing a check which ensures that the
server certificate presented by the receiver does not contain a valid
UUID as CN.
CMK-10709
Change-Id: Ida517dadcac3784b16d38f3235f429221b201c51
Commit: 954455ed785ca9dbb196828a32061e2cd38436cc
https://github.com/tribe29/checkmk/commit/954455ed785ca9dbb196828a32061e2cd…
Author: Joerg Herbel <joerg.herbel(a)tribe29.com>
Date: 2022-06-30 (Thu, 30 Jun 2022)
Changed paths:
M agents/cmk-agent-ctl/src/certs.rs
M agents/cmk-agent-ctl/src/config.rs
Log Message:
-----------
agent controller: Verify that CN is no UUID when contacting receiver
This mitigates possible attack vectors where a compromised controller
certificate is used to impersonate the receiver.
CMK-10709
Change-Id: I432b413375fca526bba95ad989c1e6632b2c79e2
Commit: 4d7fe5d8a288a2b07227742184e95fffc6626182
https://github.com/tribe29/checkmk/commit/4d7fe5d8a288a2b07227742184e95fffc…
Author: Joerg Herbel <joerg.herbel(a)tribe29.com>
Date: 2022-06-30 (Thu, 30 Jun 2022)
Changed paths:
M agents/cmk-agent-ctl/Cargo.lock
M agents/cmk-agent-ctl/Cargo.toml
Log Message:
-----------
agent controller: Switch to rustls in reqwest package
Change-Id: I0ecf49b45c6a1ded809e5f22f99c34cf65aed201
Compare:
https://github.com/tribe29/checkmk/compare/31484db1868c...4d7fe5d8a288