Werk #12560: Cascading livestatus proxy can now open encrypted sockets
| Component | Livestatus proxy |
| Title | Cascading livestatus proxy can now open encrypted sockets |
| Date | Apr 16, 2021 |
| Checkmk Edition | Checkmk Enterprise (CEE) |
| Checkmk Version | 1.6.0p23 2.0.0p4 2.1.0b1 |
| Level | Trivial Change |
| Class | Bug Fix |
| Compatibility | Compatible - no manual interaction needed |
The livestatus proxy can be configured to cascade livestatus connections. The feature was introduced with 1.5.0 by werk #5970 which describes how this can be used.
In previous versions the livestatus proxy was always offering a plain text livestatus connection. Even if the site configuration offered the option "Encrypt communication". Changing the option simply did not have any effect. Trying to connect to this socket using a livestatus client with encryption enabled simply failed all the time.
With this change the livestatus proxy is now respecting the "Encrypt communication" and offering a TLS encrypted server socket using the certificate of the site where the livestatus proxy is running on.
