Werk #12560: Cascading livestatus proxy can now open encrypted sockets

Komponente Livestatus-Proxy
Titel Cascading livestatus proxy can now open encrypted sockets
Datum 16.04.2021
Checkmk-Editon Checkmk Enterprise (CEE)
Checkmk-Version 2.0.0p4 1.6.0p23 2.1.0i1
Level Kleine Änderung
Klasse Bugfix
Kompatibilität Kompatibel - benötigt kein manuelles Eingreifen

The livestatus proxy can be configured to cascade livestatus connections. The feature was introduced with 1.5.0 by werk #5970 which describes how this can be used.

In previous versions the livestatus proxy was always offering a plain text livestatus connection. Even if the site configuration offered the option "Encrypt communication". Changing the option simply did not have any effect. Trying to connect to this socket using a livestatus client with encryption enabled simply failed all the time.

With this change the livestatus proxy is now respecting the "Encrypt communication" and offering a TLS encrypted server socket using the certificate of the site where the livestatus proxy is running on.

Zur Liste aller Werks