ID: 8647
Title: cmk-update-agent: Fixed certificate verification issues in case openssl tools are not available
Component: Agent Bakery
Level: 1
Class: Bug Fix
Version: 1.4.0i3
When communicating via HTTPS with the update server, the cmk-update-agent script needs to verify
the certificates of the server. The allowed certificates are stored at <tt>/var/lib/check_mk_agent/cas</tt>.
In this directory there need to be the certificates (.pem files) and symlinks named with the "subject hashes"
of the certificates. In previous versions these symlinks were created by the <tt>c_rehash</tt> command
which is not available on all plaftforms.
We have changed that now to use the python OpenSSL bindings (if available) and fallback to the c_rehash
command only in case they are not available.
ID: 8673
Title: Do not swallow I/O errors when communicating to mkeventd
Component: Livestatus
Level: 1
Class: Bug Fix
Version: 1.4.0i3
Previously, I/O errors caused by communicating with mkeventd were silently
swallowed by the Livestatus interface, returning just an empty result. Now
you get an appropriate error when using the "fixed16" response header.
ID: 8674
Title: Do not require a "hostname|" prefix when querying services columns in the host table.
Component: Livestatus
Level: 1
Class: New Feature
Version: 1.4.0i4
While the requirement makes sense for the servicegroups table (there can be
multiple hosts with the same service), it is actually harmful when querying
the host table: One can't formulate queries like "give me all hosts which
don't have service FOO".
To keep backwards compatibility *and* enabling such queries, the "hostname|"
prefix is optional for those columns in the host table now.
ID: 8675
Title: Fixed filtering on custom_variable_values columns.
Component: The Check_MK Micro Core
Level: 1
Class: Bug Fix
Version: 1.4.0i4
Previously even internal key/value pairs were considered when filtering on
custom_variable_values, which is wrong and inconsistent with other
operations on custom variable columns. This has been fixed.
ID: 8649
Title: cmk-update-agent: Prevent using proxy for HTTP calls
Component: Agent Bakery
Level: 1
Class: Bug Fix
Version: 1.4.0i4
On systems where <tt>curl</tt> is installed, the agent updater
is using this command to communicate with it's update server.
By default curl is using proxies configured via environment
variables http_proxy, https_proxy, etc.. Since the update server
is usually an internal host which is directly reachable and not
via proxy, we have now disabled usage of the *proxy* environment
variables during the curl calls.
ID: 8676
Title: Fixed edge cases for various Livestatus columns.
Component: Livestatus
Level: 1
Class: Bug Fix
Version: 1.4.0i4
All host/service-related tables had some issues with various columns:
* The columns "comments", "comments_with_info", "downtimes" and
"downtimes_with_info" could miss some data.
* The "metrics" column did not always contain a list.
The bugs only manifested for some rare edge cases, and only CMC was
affected.