Branch: refs/heads/master
Home:
https://github.com/tribe29/checkmk
Commit: 595b1c498ea624c45c8cf043f22517f1ff1f028d
https://github.com/tribe29/checkmk/commit/595b1c498ea624c45c8cf043f22517f1f…
Author: Andreas Umbreit <andreas.umbreit(a)tribe29.com>
Date: 2023-02-02 (Thu, 02 Feb 2023)
Changed paths:
M omd/packages/omd/omdlib/main.py
Log Message:
-----------
CMK-11294: New agent CA
- Create new agent CA under ~/etc/ssl/agents/ca.pem on omd create
and omd update
- On omd update, if ~/etc/ssl/agents is not preexisting, create
symlink ~/etc/ssl/agents/legacy_ca.pem that links to ~/etc/ssl/ca.pem
- ~/etc/ssl/agents/ca.pem shall be used as signing CA for CSRs from
agent controllers
- All root certs under ~/etc/ssl/agents/ shall be used to verify
agent certificates (either as client or as server certs).
Change-Id: I1743f2fa931ba57540ee970ef8597ee15030b6f1