Branch: refs/heads/2.1.0
Home:
https://github.com/tribe29/checkmk
Commit: 2f84580217378dd7627451122300a1bc7a1e5cd9
https://github.com/tribe29/checkmk/commit/2f84580217378dd7627451122300a1bc7…
Author: Joerg Herbel <joerg.herbel(a)tribe29.com>
Date: 2022-06-30 (Thu, 30 Jun 2022)
Changed paths:
M agents/cmk-agent-ctl/src/agent_receiver_api.rs
M agents/cmk-agent-ctl/src/certs.rs
M agents/cmk-agent-ctl/src/config.rs
Log Message:
-----------
agent controller: some refactoring
Reduce the number of call variants for certs::client, which makes the
following changes easier. This is a preparation for implementing a
check which ensures that the server certificate presented by the
receiver does not contain a valid UUID as CN.
CMK-10709
Change-Id: I97a4bb2380625ae2d960d217c3cab3ae79754896
Commit: 039a93b3fe6786c945c140f30f47995f739197a1
https://github.com/tribe29/checkmk/commit/039a93b3fe6786c945c140f30f47995f7…
Author: Joerg Herbel <joerg.herbel(a)tribe29.com>
Date: 2022-06-30 (Thu, 30 Jun 2022)
Changed paths:
M agents/cmk-agent-ctl/src/certs.rs
M agents/cmk-agent-ctl/src/constants.rs
M agents/cmk-agent-ctl/src/tls_server.rs
Log Message:
-----------
agent controller: some refactoring
This is a preparation for implementing a check which ensures that the
server certificate presented by the receiver does not contain a valid
UUID as CN.
CMK-10709
Change-Id: Ida517dadcac3784b16d38f3235f429221b201c51
Commit: 2672f7f66ed3348c7353933c9bd6b762ac5e0755
https://github.com/tribe29/checkmk/commit/2672f7f66ed3348c7353933c9bd6b762a…
Author: Joerg Herbel <joerg.herbel(a)tribe29.com>
Date: 2022-06-30 (Thu, 30 Jun 2022)
Changed paths:
M agents/cmk-agent-ctl/src/certs.rs
M agents/cmk-agent-ctl/src/config.rs
Log Message:
-----------
agent controller: Verify that CN is no UUID when contacting receiver
This mitigates possible attack vectors where a compromised controller
certificate is used to impersonate the receiver.
CMK-10709
Change-Id: I432b413375fca526bba95ad989c1e6632b2c79e2
Commit: 63daf7cba763328b60b24c18b38fa24e9f577bbb
https://github.com/tribe29/checkmk/commit/63daf7cba763328b60b24c18b38fa24e9…
Author: Joerg Herbel <joerg.herbel(a)tribe29.com>
Date: 2022-06-30 (Thu, 30 Jun 2022)
Changed paths:
M agents/cmk-agent-ctl/Cargo.lock
M agents/cmk-agent-ctl/Cargo.toml
Log Message:
-----------
agent controller: Switch to rustls in reqwest package
Change-Id: I0ecf49b45c6a1ded809e5f22f99c34cf65aed201
Compare:
https://github.com/tribe29/checkmk/compare/467a28ed2a64...63daf7cba763