From a90151493facca70848f91326f57d315d95ed27e Mon Sep 17 00:00:00 2001 From: Lord Hepipud Date: Thu, 17 Mar 2022 11:35:08 +0100 Subject: [PATCH] Adds feature checking Icinga Agent cert sign state --- doc/100-General/10-Changelog.md | 1 + doc/300-Knowledge-Base.md | 1 + .../IWKB000013/01_Cert_Not_Signed.png | Bin 0 -> 25643 bytes doc/knowledgebase/IWKB000013.md | 17 +++++++++++++++++ .../Get-IcingaAgentHostCertificate.psm1 | 10 ++++++++++ lib/core/logging/Icinga_EventLog_Enums.psm1 | 10 ++++++++-- 6 files changed, 37 insertions(+), 2 deletions(-) create mode 100644 doc/images/04_knowledgebase/IWKB000013/01_Cert_Not_Signed.png create mode 100644 doc/knowledgebase/IWKB000013.md diff --git a/doc/100-General/10-Changelog.md b/doc/100-General/10-Changelog.md index 364b916..b14d8b1 100644 --- a/doc/100-General/10-Changelog.md +++ b/doc/100-General/10-Changelog.md @@ -22,6 +22,7 @@ Released closed milestones can be found on [GitHub](https://github.com/Icinga/ic ### Enhancements * [#469](https://github.com/Icinga/icinga-powershell-framework/pull/469) Improves plugin doc generator to allow multi-lines in code examples and updates plugin overview as table, adding a short description on what the plugin is for +* [#495](https://github.com/Icinga/icinga-powershell-framework/pull/495) Adds feature to check the sign status for the local Icinga Agent certificate and notifying the user, in case the certificate is not yet signed by the Icinga CA ## 1.8.0 (2022-02-08) diff --git a/doc/300-Knowledge-Base.md b/doc/300-Knowledge-Base.md index 7fd6999..18a4d7e 100644 --- a/doc/300-Knowledge-Base.md +++ b/doc/300-Knowledge-Base.md @@ -20,3 +20,4 @@ For this reason you will find a list of Icinga knowledge base entries below. Ent | [IWKB000010](knowledgebase/IWKB000010.md) | The Icinga PowerShell Framework is either not installed on the system or not configured properly. Please check https://icinga.com/docs/windows for further details Error: The term 'Use-Icinga' is not recognized as the name of a cmdlet, function, script file, or operable program. Check the spelling of the name, or if a path was included, verify that the path is correct and try again. | | [IWKB000011](knowledgebase/IWKB000011.md) | The Icinga PowerShell Framework is either not installed on the system or not configured properly. Please check https://icinga.com/docs/windows for further details Error: The term 'Use-Icinga' is not recognized as the name of a cmdlet, function, script file, or operable program. Check the spelling of the name, or if a path was included, verify that the path is correct and try again. | | [IWKB000012](knowledgebase/IWKB000012.md) | Icinga for Windows cannot be used with Microsoft Defender: `Windows Defender Antivirus has detected malware or other potentially unwanted software` | +| [IWKB000013](knowledgebase/IWKB000013.md) | The local Icinga Agent certificate seems not to be signed by our Icinga CA yet. Using this certificate for the REST-Api as example might not work yet. Please check the state of the certificate and complete the signing process if required | diff --git a/doc/images/04_knowledgebase/IWKB000013/01_Cert_Not_Signed.png b/doc/images/04_knowledgebase/IWKB000013/01_Cert_Not_Signed.png new file mode 100644 index 0000000000000000000000000000000000000000..5bb6ec6eb94151f0acc0a15af611cadb7ecc10c8 GIT binary patch literal 25643 zcmcF~cT`i$_b*;l?o|Q37DP%wq&KBXjfm2Vih$IB^sZDP5L7OpB3%dp0hKPj6G|c? zB?Rd$gd#%dAwVDy(q1gz^2dAYx88c|%~~wZnVB~Cbyh#FVOI`P=*%!9{be*dr? zZ9nsc5B28H3VopWmlIEq^vR&GtbCMPV!R?lnMsp%oosh5b!S^%<`)2HNfT9p9yi zS#MMTts8@|4J$GUp-cM*$GqE24UGWj zVmhMbLMaV~%a3FNS{AqVPZVl2nc_qHJWepZ$B=Zu9HseaU~AWauIDWe9F%x zZl*STCG@srVJ)szH4JZ}4@w760R!-f!T7RV`)B)eZzA`nLl(bw-anPv6>=e~>w|YP z*h!O7nSfq$<1{>tp4sVf4c(^#$Ti$4Jig2g#4MjaT7?S`yOO9w0RyNIi>sFc7_%A- z-}zZ&2uQ)Zo}4UABIcO_1(A~bIC_M#@q$XC@6gr4xg1o{@gNJiTuFVRERZj4DEF26 z_HL0#3Ryfv+xO_1-hBdW3J?t9pDw*zb@Jz%s`~D&2C52Lzt={CQpV>ZEc@9sY68VJ z49gp!ABJ<1=in29b6}Ew=;^TB=19<{-|R+u3s9!=a5i-+Z>M0~!ABPy!9GKoNDk~+ zKN|RgWLS<|2XYf~pvy6R_Nz&L_`+38#IS=?J0kP^4!J5&j9k03$l6#g9Xrrlo7L?? zg_PE5dZg3x1e5(TJm|FeqM6|5>R2C5HE_Fogn%BgPH*Qp-Yu@TOf|*5benmM;wyE?`Px#EZ%YF&#v-QQq}yRxE&Gpk zD_bIjNy-wwS-r-}W4Cj{cMzrW$v(&SdZhL>YU%n&h&zn3u;7o}`zyBrF0UCIx zAxq4rL0zIjdx^%DGJQ?Drzm)#Z<+XyP7YNwJ5ssM|0S($xzP)(t$A3dJ|Cr*)#!aK zx3P%@V>*{E9jo|)`_kV&tfq1KSozRU8_s2lUsi~zUY*&Jt4GA5s4sZwz}pvJrJXbv zNmTQl3RuS3u@{pg;MW%Sjf;TX{2zUXJMt z$ZCGVXq`*oyTFH-a1M+F4B-z{?z+OEH}{|Q;nA)b>NkpO1VBLD(Lhv;K)md8+ldea zqte4cbOC^S!^7Tz0TgCTuzcUHZ4k=do9Q9V`FW%+P?2ETGw^V~o4H^0pt2y{s39c= zNR9$6H7wjfE{rJiG|e6EnGWH9oZT!eH_AU=Pa?03L<(qKE%%-)qwHTsuV{!W{#md& z7Z70kP39ID=5a%K)TWx(*la<8K>rdgHWx{83w}~|9O=KEMbW%rxfl^jaYM>6eAA^{ zY~O9o~Er&Y(L1I{>Fj;FVUc#3`VSaW-%_MF#l>Dip}0!=y6og^bwNIkK? zJj)7aEY=P=T~hwK)b=FOwtptrTj?{dwDGpyN<8eO4r9?!q^*gKb0#S_qXrku`ctS5 z_2vwC2RZ(ZK+EkZHkqWp2%H>{5%6L)Eqtx;prB1<@8uf#>B7y8l!WxTAP>y91uJD+ zDoPeLl6Iway($n@1sL~nADD5w-H-kDt@OLvkjx-EH{YB$m{+s8(paf-N*fw@5PW(| zq0-hBnnXyWMv$8|jyG6VN4&f9#QM>V-C(vM8miNQYppBkZQ{|WJc|wWpQ~ZfyYpB; zega(OlPi_)XE7*0q;ZCNH&peanzYUIY2Val(({x2Rc0@FfZInj=GvrJ6hCV4OP<)6 zwD)qQeRVCj9r)_d11Et`?j4rixvR+#h^*`zrmW}YBglWLmDv`-+5XlLH=VlfD)zz+ zP?g^ShkmM%MV$@H9TX6A1zma?eh+b9DFtrG0hE-Z>J%q=`wg=do{JwmO^zPsui3d3 z8>s#m)b-qkd(xp6gLDWd!biP}+eoU26HU*Sh-=_3uPI zaSC^Q{8Ub_)vOlID33HO?#z-Z4L3{$@q!e51~GU-W)5q18rLNWSC^yG*XSBt;V1uiCGlsEc{@%%3+=WD1GOeN6Vwlr;NZ;iX@>p^f043t&n(x7-@b5LtjiPkCj~dP>%K}NG_!oNdAVvGeBrf2 zSyh)@Ve=t4eIyVB%{2!&_p^6Tgl&I1=Chac5$>_?vN5-Q*FSXN!p6Y!Fx)KmvX9oK zLQNF;Tf1({;-jlGvvGA>&-8xDN3!yZ85%l~M}Ij17rn;19vyLYTu9Dh_o?`=cB%Vg z`#rXoTJp6C9Zx`jq?@PDuA?gw(y3cvzdO7+)%)uE5z}mp8r|y0A0&e|Pb` z=lSGG#(%nXnW6s;;COnb+rW*CKYw?v7v<_{h0vOFkN&Gd`0pO-N?szB31EMgV!qqY z`rf}6)GxRPQSuyX1MfSd)1~QW@2C}Lp$V0Y!%AGs9IYaJ-DWOjAYwBBB9VS6C^YEK zCQDVgyVDUCubJZvSr!NOL4l=YA>EC{)9lV`Za+uXWM^W`PnXUdy~e;JX^s8|TaKaI zom@Uwi4#bAJ?JMYeYzLNTu0fFd4VP5p(Uf&#LL~is@*7JNdD)_t7gyi9DS;I6YO|g ztMA6?KI&K{1XuKP^eWAtO*a5*L|J+#ax3?PLPm+~&!%zt|G-%L^UwOOsiYX_OYEx3 zEft3NO-dHI;cpiI)!FS?sdB>#7!on4o*5QWbk*|l2u;C8w}Sv3-0;A(@UB*v)fVmR zthx0nio~7vjdf40vOm{|GtZVV9FjTaajw3;U`6H07wTM_Y%~AfTy?+&uQIUqo=^9K zMr>kRQNc$koYbCTeiyd%7+)lFUJm5@7@>f~-7MK!Oc^-aiT~zntBoG-RCe8p zgHZiHS)?D(?!q(MBy`vJI^>QSPQ1j7fRcS+eEyw{LWj+l@k#=YvwysJ@FhrjSVsCz zQdh&9+^W+<>q9`w5~-81{g71G8n({ke=sg-URS?#Y2w9KP2zfKYUD%u(Blt^p={| z_{?E=BIZqWY$iT!q$sf`hMgSbFL;YTcy*a^b@N5zqaTTA``mJd)Co{}w z3TI2obZ%Hx!1Gy7)?TGzkO2Aa34kQtA+HVpJa8eF^8)Gcwf@Lxob4s@F`*z2!YUT> z{g2LZ%SM`zZr~*GOf8_ZBiARf{a#SmIJM=ycFYyqgy18^Y9s!59*U5bQIY+nVB6F< z%iRYDHGO;6C5q*%aiE*+J5y)RJ-|+@oT)Q!FoAkQH)5YF?FPE%fMiISyqW+v-0tif z?=27aEabadlx-r%CU?z5UUYVR?Zbr({GNz74@$x84}E;B$pC10Y!%VdATvW5j4Ba1rQAfEZ)J9eZ2F z9l?SXbg{f;kBXRA_An+u6M^Hau{i5O)2`>TRM+f&SfbN-`#mNH{E}8F{!PfQ)ic2| zi~P)OwupNAQ-IIXMN0Hpn3H<~Wvg36I^b07l$pO6coxvuv9sWZxbRUZ&42H6!Q(Gu zC)MoMZ|elxqIyMLXOF?%A$`)jx>Z;|8;}t8&cvd{!m--;0RP>UFr*A*i6aXYiI=YUat%2W z==3AeSfD(`Jc|t+0rzR}ff{4A(2+^Di=1YyW!M_)9TT#78%QGvX z{y1o1)$bafNQHpBXTnZk1`&u~- zw52$*G&~RVAu6b@QEN!`!CMWoU{E_Nr#I($V7ceg#mog?j!Iw*c+nvi$(;o(Y(&$W zq!!nr#~NgFW5(k&Xdh|=1NL-5O2i9?LR0w0nUO6eDQN7YW~UjxrS5`Cg7CURZ;9We zBOO_l=Ze{3JT9gVz;{gV)lrjdv+bSz>>X|kgF*uEKEn8WH+eFlkBm96<6_{LDV$`H z_Ok6gzfU#Od+vhe&-g4LRoV&(9{!i7#N|gU$>{-q_g-l zxrpVd?T@3cblL)B`KLsqZver9Ls-dtCO8t#5mHdjlXYbR7pgY~zihu_sHtdN= zzuL2}Dx)k=zh%h1nXDq&Fk;^CsJ7cf`%}L1Rah}!`jF{!{;0Hys1#RSm&K`t;de-I zkoyDOaR5|p7#X5*epAU~dSUMPMq(wO3}H+Tctx!y?-=Lg1HJ5+f@ev}-#6o-014|^ zRB*K^WZjkU&D*lN|je-y$FuKK>B9*PD7$ny2@CoTo<&IX*QMYk`dtxM3M#gC zO6l>n3n@V6u5ehDx+_5JCTHQX0I^M3TFK#YjG*=yJNy26YbIdfpW6W)J^YMRt$iUg zg4qF1r#f5S=c)Yaiu;|bqlQi!{#uo9q9;WX@#JdbkxSs(8ijg$Tl96m z=lPJzPA9vffPEt#Fh0XpjW-0;WzwR&I_0Xvx#7b3%dJw@&vHy-ZsfKsyP`;WcW%NaB)&FO&6QZ_YKqL1Wkcq+Yt$;bAND3OW|u@etsl{u zGJ9H3`vUCT%rmV9O6MDioel)g6?|iR1-5RmD)|<(7wq~+qsdwpHUKM*OttC9FI`2zqexdspq( zk+*I2vwc%(u@Pjmkhm3^6@j-kLrt?}R0(B!lHF@e_2JqKPvi=EX0*j`v3F2o`vH2c ze7*O&)%1=fRoy{auX!`Zd|alp{=GRj8d&CP!*l?66XdO4uI#PsyJ^a-;Oybm%CXLg z9FqIFe0=r@-577@iu;ti#b1ItZAB@88KtIqlY{fyL`SwG@OiPGqgE!_o@JPLrR*+fjU0-yMVq4;LcBy}$ zmbS^Wg8B-q6}aCRjZWiW18J37Y$A;851sE!OxoMH1bcR%K&)WbdW(_KEaY5R^Yv~X=EByG z{>N*X_#c4$UpQJQ=`UtKW_h=CrpGq#$6Du()JHeJ+jEOKXlrYy7!*)99?Hwh%Ms(a$vD|aaZY~qsuBLs#WUpZTu3o&WMqr? z9Ad`gH?DtLaPM(qAE)NQ4SENX!6~PyDF}$5R)?<|n)V{e%8c5GRd9A8F_7Et!ml~8 zq#N9RX2fnpf3y+1GhZ1g%?P(?qtYV}O?MI_546d#jBbVp=nyeKz_1OT@T*6!)Et%n z4gICkUi|^Hj0`l_M7iQ}Y5l+?#x{^Xx5G&vVTkh3v2*AK20pUBGV;KbKY5N!1VRVe z_5cNswR>es*MGnM(>*bso>A~aI)=G6cE$>EN6k#xxkDF#5@qZW78@gp$~&+D$T&ii zo`p=G(+n5Ga01`V!NZIje5TwdhJuJ)i+U0+1SEGWDJLhbEZ4>eIw$Fxe6e6j&~4*| z_vE85Z_?$#hmy%VA(cY@!Zwf2^@X*EYv}Zsy`9Yh5qi=Ngp|kI1d+ZBKH%8J^@Qx4 zI_hNd8}C00p&vz+X2SUcQVPMD5Z{(-=TYfnvm+uCovx;YujM=#9dEdxr%|(ZkesEg zkyWlz_hQe31HJCI%hpASSNP1&kM#euKA(9D9DC{XNTH`qlcV;dis%Yq($vBL^7*SQ zKP;DJ5xybOc02bJmcF!aS}9$}^!2lRIyBQvBFAxu?w$lCG3L3Dr^zi02_$W=5~mCZ z7eJEZkXwc?sEr_+0Ug^0-q~N8n?o=V)DR%WtRr(XAv;4JI~*;rX$8w%5hl%2lN z&&DSk7cO*;>m%?m&la=3Zo=Tlj6~W_^(FSUUQ-#CA+dQVfo}&pbC3a9A^Gzz$jxjB znG6Wlg$!EP7U4(;)9^#f#oUNmbfuce3?Ife6TYgCUf-ozVQZBqW918HZ^6}lo8G2% zKwhOPXnZLGcq`|2f68bL-pGsuZS?Ods)P$qA_In9i$v0RQasu&*0{jh!tN(*0;T+H z>F;yh`exH@{EcN2mRK>hjee+{t}ur9OAj|+w!Pjud6*AG_34^$W69J7h?BzgiGKZ- zw)CckN4rkh{5~fYUyuzJ_{ftok>-7tPouB-9K4TXb8#K?77J`UNdRHL`KUZe4!+0~ z?E}Bw<8phei;P78Lr9-S&Sk1uAKH(O2KD&ytG_rZ2RuY0-z3u4Di@WPK-u)|0f;Me zi&bA*!>yPTwYR4sFTaQhb>+*}YTL`45=m?m*N)w%e6!8sC2#@sJX4jFhpx;Cs8O*m z4)gpK9_TcnoWS9|PEeN>9HU%@dh0Xk%;~K&D6%qi;WfKV=584wpRiybYx!zHpnU*9(fm5 zFm-?8f{r`bZ|Za9)CIZe3kfKk4b9*2FZxrJQug+Cj*`Z|aFroJibw0Z%`9B{cbybBfx|Y<+jZdrdugKzMHfcQQzGEx`zcJtN;{pt|vh;32*? zX_bK>?ZO~d$JMBA1=7&yY@NZ<)aP%6ds;Td z6Y+c_!(5|e+bnD8eYW^0zVkE!@P4LEhGj2 zFKd!1NM#1)3nK7P6cDkve6E-6>2tuQ70nTW|G;}H<}K(J} zAu6wfLjL)qxzLsa)*RSc{)N+dj-tDMNxO&Zy>UNmM=iy_F>4TO~??O5)|EHO%{twV)X_nt!QA_`s*82E*9F zDGHY!>1|0KI>3PC{EmhqP32tV$)rED8}o;9Wi5l97w>FZ+r>-Jn+o#SDvYz_iw?_~ zGG!??c437js_(p@;^*k)Jtk(51hJ6aJ0`-F==$RXJm02U zNS2lnj|8;ZKCO)q8)Y4oikvSd!=3B!sU5B;Y_wLM+`8qc*TRTv@O>Tr$dWZm>KLGH zEn$X^W?Gvo8pZ81l}3apQeIxP6UV|8X}`iqm#A#SmHm4@YHoxM_m3}^8!3~oIX}R} zi&_@Hx1a394J)}%NXy8u*W4z|zv%S9hCGOoNrb<{EwDHAH7dS(ogtU7yL$pK@WF|v zO?L@Sa?sHNCxHd@TTa0e$xiO$0FJ3_TH(y&b*uScu@d}W?8$(Za6?s)W^u9+5wj;( z?|}(I3R0rPTxfSgF{1^xBj-ng?bPeOjt;0b%pCQM^E+Aj#s1t52lA~KNby@P(n6N2 zEl96#|7Xm?%K~#_i3@pfn`u3$lF8ltsT-n8T)Ik((gm(LYC83Mbl%Po8{j~^KL&Wf z$`qmvtb;BnPB#zo%j>LQtbW+%0*5m!X+_1K1&5+Lj+QqB$b}trBbIG5jssfiPWoIq zSQ+kPr1WuiB!Fg3=D>Q3)NZ)I!tl;27Jt0mZ2xJl7tBXStX^7ZqQb@51|x{RtafQF z70o_|A!YELP<8Dk@E{V#LwL`@5ckNBh7DG#HiMIa)tp!0LNxG+%~0#=?+v0%g(dv; zfa3*k{U}viw zemKDxeZ0>Vr+I*xNgW_njoug@#7z%k5U)A;5s0+03RRmLA;ivu zon!iP(k)}CQIUW5vYUULcn8v%GA3(WIG3BV;K!S4bY0-?o`&4XX;``!_>xOjjI83P z3~JJ$^ZN$TkM^pn^=vpv|8<90Z)4a1n;!~?@JR0Gm>3zUpv1T@o1w=GIvQeK!^`J{ z*ko+sLeJGW&G@nr9Q zqVOS+jVa2fm+ojL!6RCzvrOO_5=om#QGIeplW0oRLVrWRFmv>A$hd&(nnO_^%q57= zuCY}~C4}iMs+C@9=Sh38ahR**5>`A4NGr9xHRWTqMmwlzemd8H-7&a>a1A4wLhhe? zI+~-rqtgQFYMa)!P3TS3F@q~a1*N7pj>JyUszAWD$knh9$5y#~8*3yM01Y21eYi1a z-k9Elzc;wFixsL_eiyj-2gav{P(>EqzkeV+7;JmU5KsN*p-JvvSx*yK&KhVxb0_;A@RA@U5rpZL}$&=g^J#X+D)FL*A8BpQNi6UtvFU z?b10A($tQDl?cxcpZ7VkY`70?=R1^88%^JRWt~Po#x$JSMAW*N9-&2ba)iYF$oybg z*OtgOaSI{LN>5aRpoyA?dNDCE8=R?CKOj2fI!POB#%N}&2JFB93}gyz1elf>xhJW{ zkVjHlg0I6#Uq%HAkDo(Mk<7`|WuV_O6Xr|()u#AGFnJyjO^CMJya-T2Xv_aWBtr>$HrTL2%e+ZqvjWX)v#1$GOHF*ssG6WDPyOD zem53d!NLDZ6uD9UO1+-$p6T~%rEx5edCm+gzAdt z38?JL&ozGuKjJYndYLtVPQ00+V69{U>vHbe@X`^fu>xwPda&b!ocxzyF3LXsBQ||H zJ6;)9-OpPadoV5YD$ydsc^=2HCx^Yclb*entffv_7ak)I(G*Wc2RA+~1Z;q*hzgC& zqTA!Y(@Dy}=1f*C+@=iZ?TFnRo7)hz{2(K}Ks=jLLCod)oPTY*YFJ^(`CU+|H}CmX zx!ilcAA6$JxRg5;H=-#OqLQ zU8Id(zoMZj%SlnAE?0>RJ#hT8SbQoZs7GGu%A}O+?kn4zL6(L5*CzYD4k7a=(oXnz ztp|H#=A;RDt0+VC`PDp>6athpF1x1ix(i?ZO?uB+I}41kpX_(GzM^b|jGVbuU0{cs` zx)IznX|NKVk_rBz)b5Q2+vI;{MPKo=@flQV=tu1g&9BYlj*A$RDe9|bTaPI3jLI^c zN>-O*dnmilZw}e~c@#UmuLXx$x?UE$ZppPnSrfI%%&|i3u>RC-mZzpKCH{aZ`ycrf z{`8(PDzM{eljBsX|3-LZ!4V5@+`~tYOXHr_jVl`JPSo|S)uALCEZxavi>%d3H!@C2WG+-i3~sm~ z>+XcwE{`bMDD%5NLM0yGBL*7R3L4Vb(1f zW*GG$7}gui^D?ckpFh+nc5J;_8H{VItdAkh>$rnxSJ+J&`Ogi7-5rbgl`F)u!a9vod8mYt$JSW?ulgu!a^TGjg00V^l5 zQv${v*>T~6#rcSlvyN~3Ht8)sUpeH`nX5VSX}&9rtRe5S9$Za% zq`Y$8lS|!&Q0if*NS%E(D`e&b@g>~s*21vytv(*idGF{-Ype%F|gswH2j_)3sR=+K)Wgv7?H&C zCLb^AVtSTp4Rykkz9Q0vS7Zz#8`udV+nZ@_&va|7R z_9pwN-Deg=RQN0-=XDNjNc8;6c&DkL*xS1AY#PcqabWig9x1F*XXP%lY46|qB|4U! z3r`aJwzQvo&cuzXiFQh5*i;;}OS{72HfLX}BGp<5-+e)_^p|InqjD!gr_vtZY@V6)T1AH5kO7vDgiKNVbHcieCLFQnfd`^S zQ4r(H#$l00K$Lf0$GICHOJ`bbE`J>`tlaG}`Rca+T0y2**LA15u1(LcNwlnGfZ`JN zWC{{YyH-EFi^$Nj0;NRwHh(?AB30zlr0W_a0s=QcXHl-(2v zFgb2bOL8KvsYmMRTsFm31brPw#)KvQPMchBmpCf-<0#IJ{98#&>-V@WWru_Qzpuq& z|KngK=1GoX zp)NU`!w96?W$e#iRDW+=Nx*r+aMk z>&J!65(WR&t4vXS;|HWEItRYGx@jMW60@d!DCzqZsPLmwlN__v@Pz zOmtr9JtFk5$1AUIRBLFJH$*HE zrQzjTqXO|h2;D;cg{fUW@dR;*)nQ^Iym5XHdeg3y*ZorZP$Sh%Ode3reOJgY zdP3M54UnND1=_=N*G4E=_>`|jR5{n#S}uFZ2-!ZA{P4*2%S58DUW-Vzr`2!mNFN+N zF4rxC9)y~rvLAiA3f4W`KZVLF=yIP>?n&_C4)y6frsigfysS;ieoyQxvg8Ut8szFw zAMK=#Ucv4m(gSMc_;y=IXH&B~{3ApJBU8J>IngF6Am8OiUufaHi3i`GF|)tzzqY@5!(; zyRgF*dQXLbJOdW|JwD!D3*cN?O-UxdYb*%eYdlyLRHafKEOa*HlnX*aVDz*g57<>S zM`4cBzmkN;(}dZb8?w>8V|iF=QR`uzCGM;mZ>w>?3sdKOE+w5rP9!cbrkdKy_LuTq z215CUPv5$=p4glCDkhz)%ukaO@=$a6Looy*7GK(asKm}^&2L}G+<70gQQ-W?`Jfzq z7_Gb%s>7X*NLlz2-y$zp@73Zxw$Gey=*OBWXS*<4Uy>4P*BiF`>ytlKe24;&YR`2Y z%K78biTaQA0;QR|CA&Q;dGBgBtw{ zQ$lQUTdcMV#yO|LY{S&RmvB#-6aK|J9PIQ8MpidAXIgNFd+WnLI7c^l>)SI01%(4s zLk|lR!i-3F#WC&od-Ix6!xe2@UekDNBQ9B&e>>MRm%pRF4*6S&J|^?Sm|;Or3r!R| zO|wzt`R`mT77HC?4(Z=V;M1%BNgn#|9C#gmQf=^R2jtgSEK;)n={Eb}4;TP)@ILbQ z5G?4}e@&jH_?nFfv*x2e3Yg-K?zwvPnm#D9*r8TwjbzIa%Q+Y4 zwap@T6*E${ALWlpjVR9u#}j-Qmhiy5-Cu?tDIyY`73m^EZubF)M>X zj3JLn$ceJfXbfN9xnolQ&-0ET4}E3IevC#WN2|a9Ko9fNk;6hiH2|}nz=EUKl z8I0b*?K##*0;x8I!qa#(>Eg*k&RbzynE47w4hPRbmyX!-m#%9zYxxypI&v;Dt+v-` zwQhMD652$ir5IL9gzOaPYqu76y7(%lgmPB-l(OnS%JTCeU%ZQg%phuKm4tlNU`BDd zv#Y}piHny3yKhHvs<`lRAIp7VYlOt+#ipH;g~vQ%MtajcyjA|`gz8sh2$4@tJo~I3 z-InwUsdr($}rk^9NXl(0Sd)DE3v@>Z1;8-JG+X;Asnj4-T6T3Nh1N7Zp;!iTePwr*9e*{62NSb4zv=AnN(T)YKIB&xQd z34XP2Gm&C;!&lmxO(Ns$0e3D#`PCUDSUHl5yX&5oaB{dS5y zkWT3%H~T!&A@T&w8|>z-=8AXWsfo|hK{7sO5Y~X9xY-zbC``j(%2kP9ZZi`=>xM=iaF6S>8TdsE<19o4d1hmW$0-)1O3RoL6?8M)1 z+Pl%TU9j*W-ZmGuC!ghQ+H_ky=u}izRY4(6W1q;5azu5N?Rqg(yBhlP>c#0cAM^l+ zq=^Kue$szyeObqLfL(9y5j0SJ0SLXzB&=C&#ydIqS?-64c8RT;tEArXc!S`<&4K9e zI}NMCqtTbm$g#5r_G#@AA~O*W271<^H8}7{1&QpqRG1iodbF&ga)IMqmXpFe+`Hw0 ziqy{KM9i`z!c6|BW`DX@{EQzKl#+8Xx$91%-u~5814To|i<5OLhco^Hz`zFbvDGyG zP=nb1-~l}+qr{tSx{hXdE1Oh3X66R#2h6>~Z7vPvdvWKMRsGD@u5{!kev?Imjvn zFeiGyeionws0j=XduS&%dL>@IqG&}2oM?~=0CsaI`thcpjF&ZN_73SA(*Tw&LBP2K z)7wLqAr{ugF}qYu(7S>Is>QVohmFwATl^xpbJL1W{DX~O=uc2*B} z_pRJpn$#_AMnx-=Mq1Xz-yWH-QFB{7po#DKO>$OIoKU;tsg=1soQ++X57)aYV#a{M0j$HyGm-Q;kVoR{?&9c(->|6c^`3IwZx`{W=Gx7Fr?@|e{C|cn|HVxIix2;Q z8rDKMNhQ=f)qA?BdS%R?RMDT-*L8urDJ$rtrBC&`sJ?+^k(;xe%|kF#lpogn$pexO za!$Pp^5O--UdG~59jMo(%F=EwG8v7F-MnMOWz@a#pnz~2Oo*_wJ~z3LK{pCLZ} zs!=0AZt!o<37g}6Z^W?ltOgHUCtru$UJz#8{$*JGhdsm%$1Kk&tZ^1~+cut-sh(bH zY8Z0Dq__GuPJ1E|0!3MRX;hF`+tpjv+w0MYX>!&i1T*H z@(N+r{4Zyv+)QXJCm?g;g?g4JlbIjV-y5knj>%T{j~2LmpZ~$cmvOEpWr$Uo)y&P* zb~vu}&V?La!;)`b65hPW_%2rk#;d;}zg*5|3SH5KtK6gy#VEPEc2GXb_0Nfn1vO3N z^W}lCniQWz+QSAj*Mt_*G~)Q}t`1Ay+CHz5SZ{1yV2~F#_PuZ=*t||z(wcCRBspA| z8Cuw;vCA4TlcR?v1>`E!p z>Pi79OzpPLbK=5MFicVM3Pe;c+E%WGZXM}HPbiUkjU2pO2gJOw(#;dWx`Y^4J z;;B^l<66u7BCt54s@kIb%XVcTk71ka=G56b+K`Bs$`r9vthoEy#GtL_g|YNeYlPR# z&9%i7Z_R#wnW3U>YyMv!M%be3LqE=dS8k3gF7a`IF7#Al48->9*WNlKRKYeCfLwMh zD)0b5_Aqh{?k%ACp|xrEJfjianJ3o+H^F7;URx1CxA-H)@dJMaKzRFP+5-Vq%;3jx zqDn}C<^kX8{<1VaZDQJQBC_FKF}F2><7+(Vg38wO)<-uMcfR;Hd?_u_Z}3wDo}!7e zl%i~tn!$_JaYQADR4198)xl->w&7(;Zlh1C{iAA&CQ|U;hBXdv`3^o4&YhKxxi@yW z>GQ+h!OPCQ1&q}!r^3g9kpi9Me@xSwcOS22HeWf5KI{%FLyRFvQfYfBobN6~^!8Vl zV+%aOlqM+m7c}GB+Ahn7MC^B}R0A8WKRoM$KfAE{<_tH%M69ei%;OZI+k|ODEn}N1 zi@)wr^%)vwMF8vPtM^1#U&iiKAv^j}Ug=BUz|}Lk!=B1Xp&@sypZgZGzMnU5m@pm0 zDF~g#b(!d<&xyfaZtWbKv81W1-A9|2LY_1bYIyYJsZdo0L}1iTSuj$Xl{Fc;bvq_k zm_t}T&2k~5Jm}tprw|PO%GV=4FzybvQTXoN}vR zN=U6qg|tKuC@Jwy&UEORspSWc_wuiof1KivG)eP0yWE8vzW)xNQ0nrpARot`nr~USU3M%{b~mJ)JD`j&VNs_#-vI8GxXUTf{%e$^+;rfLz5->~akZkbe6^nL4^2e<$~_yKeXh5r6}-nqZidE{Ti)GX4m}oB zSzOkqx^(HStXd9gu1hjzYPMQZY;0Fmiph_|58E|8F-PTvaEra491Pv?(WFHTVr%V?4AXgz@0YkSLzO0xKdX7(bv)--^GI_&ajgX zp>j=EoZr-?D%D9vxlC&cZx{;WE?RZrGtNBOL4o=3_~TX@g>X*@BPecQb7ZL@`n0Q3uuHq{x? z&^T_muvOgZlK9yU2J?J#xV1mD?Nmb?J_5(gNtNW=I~-~>tT*A0tc3+GvE~Hr#mgxM zG!_>v-z>8H!e*8$KIBub!wM_BiAYb=!ds{g|A^mFHN=dCF`@b-BtF(L{zZ7m*1)tx zbs(7;Fl*tV$b2M3l#f~JXz1sp7_#{`hc1oHeLwLL&UoL4^{@%Zh+l0Zq94?nMdrMRYoTU8yn{5qdiq{c5w@Va?bkmS~V| z)7jk(u`*E?JrO-6%zQJRA0)cEFeF1y&Fk=Ac@naHwfIXz@mujo`&|msy>okS_N`w< zg6LRkFE;0q%KcFhB_HL`1TTU*dvKLQ}CH*3-N! zKXiY*PbvQ3lg#7Er{PBQvA!c36&^hRZSpB~=i&8HPVJTME2{(s?;5VT+q74S1lUG} z!e!CT0A<{#f^3p*0p&B|20i>l#a`#KnJpOSCj3HU06pH;RP*;LKT<5dLH#S$Bsp%O z!q~{y@WXO@bfr(tgf`UmU{b8s`_VL2vGBTI8oxF)z0DqmpIU!JDg$*lCPPr_mTakr z($0y}d?K)K!|)hBfPQ#4yqtq^!^4-;E~}68`D$Uf=@T{oZn~a$h)<$gZe3foQ@^uj zO5(w~Eugp&0$fb2WYs*6F_7mg(C;)z9&m2nizJSQ(&=)Z`=W1Fmq{ zsCZ9qUEjSoQM}@peh_9W0qFH>d_E@?74Uctdvag4*z7Lzv=}6`Q1=rJ5F^F;%{BH$&!>c)UPaSsp*L8o$^*AHQy2QPzgy8233B( zxtt`vzEZEqu*nzRv-liZiZ%Q=@|VkbOHJ3Qm)$ZK$^b>vA@|R}Eed0oRHwI-Z9O7n zMX6xv65sm)>M5i8%$Pd9pAZS*DqVdzSe4pOCr zfD{Q;X^~I`fkBWSkPgyBq(}*!2+Gh2h7uqlh!7$rp@bGfd4n_i-5<`ru6@3pv%asD zwbqlT-T&WxuL;^#Zvx<@_~7aV`Jkm22u`Y4NXh1h0$Xme+F}W5bd}fSF>a_JX4_Lf z6)e6SC9|=@VsWn$Upp-q$$EjBEo%Rjrsr2^vx;|wWe5J!UnVUj6FmQf!I3V)B7XUq zLpd5pr(j-L8*^mx78dmvU<{K*THyZX?eVOFSkO>`5-P#uy$I$1Y2S8Uo z$-k<|fU}${HNp^Qp|P5>rHnum_Dju%i*W50IaN<-V^4G4N@FOJz09elXq*#lT?p8={(}s zt{x{X71|{}=i5tp3(h{O&9bZ;0#MVRo!EWc)56GW9DDl*+OhDlLVF4KNv%zWKujXC z(h$tmI=-Ni<}ES5*}GmMZL_^CDukdF#dWz8Iv)Gh7qqTxm+y6WfL!Lv&3!=4M1#R5 zqYy~P1&kPIVTiFna8cP|Q1jSpNa2|J zXveF?YIR#LtHZQ{UP`dKrGJDy&p|-Z=CD}NO&VySD9w2)d;Ke-e+@E~hbfmqQ3Hb} z%S9ZbI$b6+fr{#zQ%UVr@8brV4n(>oGD&_DNeCP zKf~sJxhUY^o(LX}_9nM;wAt9A+eiHUXss%UH%S5s*sCn7 zY3SPOYyrt1Zza0bgeEqHz5~A;gveTku6f?w zj%rd^CvcOOrjN&&bV-(@lXB!zQA&U0DfAiS>m5u4L9uaW$vGma@APSL>a59P(3_V> zME1>f)LVsl-WB|C$Br)I1)%?$Xo@-d9wFw6Sq1K%(pRiS$k3Q z$#d-3%wU80H_o}>FWdUcA}?FRZ1?#_&YEZE$=gZ!2_4Tw5hpY7f&3|E;}XQ}bv1)y z%*%^=-M1rQJNVzgwDED@LWhvdYyND}>9Ei{ZjcZa0Y6~ffaSFXi!CSs6D~!xQ>ono zQpj;xNgn`ovxHBPeMwt6@(eYIHXX1exlfxsnwRLyTKIX*4R!?+RkkE3-gt2;(La5T zVo+-{L;}HxrO1glm?m>hGv6bwLTeU+8b&CYSjRr` zfI<;;S6M^uu4(6_Z_a5|2Fx*j_~pu|qs!$wonhO9JH)b0&*AHqgqnf9Qg*b(fq4rx z#;o8(RjTx{yY@cyLaA{F%B#aOosMn^aAQy{DSCa8rt(s7VjP037JmK*eD+b}!8hJj zE$D+^2sMY7-zv8U)BydRp7drx)}73^S~WQY=^8z%)}0PZ+{(w64B&)p+r53&K;~EV z>(Zl;!-qY=Tzh%tBd1bj^HYHm6q5`~$Vr41t~S%Wr};f<$u&DsX^hcI2WoiQQDLrd zVo+zJ_^7T%C#>5Ai78VCR=jTtyNq!8WdfJD8Ew~97A_jX)WoL!R`El`8Q|;|r*rW# zJnJhpCaZB*?{SKr))rdRnA&@3RjgCPy|`^5lh71a6LkAPMYLBS;Oy%yjD>bs~uyoJvtqiEvn~!BlEO{ql9}aoe(`F@4_D`=;1mes6SV&nkrMTOEbIh<|lW1{z zznZe>v$>eL`Niqx>8OleUDZ`nFxN4O8!So5{!3HY)mvLYV>?iO^yR9VB*ae?*n+YA zq7{)$LjNdrujZaWy|ar1-W=TUM9EaARlkUM$_x!}-Q9D%H78*(fn*h|fqTPnDb5Ba z9xbbHG-UfS>wsmpCS3vMx8%E?0jDI1z|(GK_Xw0A>q{ZNn9oaVJ73|Yl$v5be=Se! zmN370+Ri$-yH|0tRuv)i*|*Nz7ZLbt>AXy+Uupyx9{Ex_==cp@a9L~O1NBPT5~uVy zP0yZ>2!*o3oE|z0x$!dHpXyZSl$#vd=-07{56U5JsN2U6Cu*qArW3TUXVhW9Ewx<; z{qd};L0~1^ACjM5^%ITL6WfR)a2=Tya??|Jd*{Mlhb}Z(YM@8}K4dRw!?Fk$v0;J1 z6IOm!I!mthQV={^;{@Ny$?yDz5k|aSnyX-ZI{$}pNcYUMl48}2HPb36-xM}-qN!A- zEqJn1Ir8*f*LJfNoCGrmcS(BtiCe;%^^{Nb_i%MtjUP`?#J`%!3Fzuxm*&*{FL<$T zV~O$|=oRnMu(nvRseGeBOJsclW!r6dqRuZyeRL0ykq4i^aShEMG%BBWq-(9QM#WoU z;$Iy5^p*eK2k@jeN)-U+snI#>(C_?{GGj2fkXxIVQL19sU+e^*>;3iS!sp#eNNQI# zAS3}1k$GC{8uQX3;%eKOs+y`4gIxs8DY++sfD^#>o|}7f{_sPFG=zYoN7#qAC(`Ny zj8Yl5d{uPN3F2#zXCN||9nO8p2c)mRnq@kib>K$sf`7jkJr!nSqD&tFf7!*t>AjRg z@Uf*Qh8|J_13}_5g$tEaen>KU{MwoHtU=ua#+rWLj;T}ksx_YW;@}q4`GNxCOf={; zsCCoFr#gs~4#!$WnpmCYJr#>YTMliw(Do@n4hMUyDzZX}i3rTff!DjD&Hj2TctJdL zxZ6O8|IEDq!XbZ-w^JcRMMN!f#q`4 zYGCjIY2N?jC}?%+eoOY&e=LJAzZhZGTepzg`F5E%k~*)6bhe3Ro}eyF78kQ* z^SQ$T!g9QBO*cupI4?8iCg!8h^I!HU&9;SiEM>OAWnFVL6h&o)(Ir79$}0nDzvb4! zDR}^CzB2%1Z9ZA)5Q>VmL!ujg89q6Y-G-Kz<{XtR7VxygYjf=m3rqT4EaxbWzneP< zdu<8i6bWQJhPry%#PD{1VDdidc|zyJ+@KW`bKRtRFiiG4nf1;?R_iXG+jz=c;OSo& zFXPck!wbW{ZHVd`rBmo(*rL|vg$qJb2M70SZM+6AuD*XBzd88}CZOeTvE&zk*U&k5 zJr7niAUw%FcEW0?dF!)R3Q{NU7rW;uW7p!*V1D(;f$7C5>QaeDWs^$8RvF?>mGxX) zSO`f4(-k+=IK3tmg}1;uN)sW?&EinCnT^;5!8XSl<5B-1bQ6QAK>o-;g)y(&lJ0@0QYac}mXSU?b8aJWnZZUi-5Rww zj}W9`B?O&c_h&1bU#$MacNYCz&2@h2Ut{2qJz_}6;Z{k=d?uZrx|9@5TVx#t*nXmk z3OWt2GWbQ0tE{)!wH|425%JH-Q3f^U=j_H&T)EdRz8P9&{-b_cp&Vef^6#P=4fHIy zyMk?X$X!cMc2Cng`%II;#^t3N7jfy3AU(Jsv~XS5cDx$Jf?-s@c zD~Y|Iwn5`*W&lnr|J;IEwPI5zxWjwTue8E-rS?z817m&DqJd%-HN>n0YJy+xR+u?J zMP~4Mp0etEr>^$Vh^8&?HLO@R3pO)ECGezVS5eXM>{w?tU3hg0Pqh!@`N_EYKF@uD zxgdIcI#XViF9;jF&!Dw98r-eYYIQWqn}<`Op^S~d28!ivhY0P$t}VM&=Z%cVWtC60 zR|qlTlE0Gvd4CW4?ygKGy$~d3pl@MX=zBVaSNV++yExo|cFB;~n0y@ey%B?&WV4M6 zpitIOF~9EUj(eQXIYNVq7us-p+lQ~_1%V>+FSKSD_qO2YcDn?Df4nW zGtwRY0A{Ud4W#KuUkNckKeN1{08EQ@MZ0x_VMg z&E1N~-h)r^Y**S~!hipKRFIF)|MGiVRhs`!O|!?}U7?MozUi-^3x?s%`FAXOcUPCW z$!D6%^K~vDDZp>Q54y%fAB;?c7p&$ zw`8(+zg7+s-(pX{sc!MDRoar~;Q-cyg#i@4BAIMcP_iE-<#}-uyyE!9RhVR>nO!oG z+y*5d8iKiBO9Vwo>b4zO-?Oa)S6^kXd7CWV0%N-Sqdm;ptS+CE0gx2=WYtUysgmLp z%I`(K`A}xfR9rw7sBw2;16Hy4AjIpE<^x#f)XPM^3EK91 zu**I<+$Z9+%rGD=Z~-Ur(zUiB+TYv5pD^mlPc9et`q7%S5!Hm&^#7v8yce1Wle|5- zpL`lwx5Ix7EMl_eD+}yO0OWAaUS;ZN?$RKCYLi<$H1u#Bo^32C)azS)5wAxGeQ<;` zWTONE*laW2*AgbArkeH1=*-QZ9(FPtBP`cG&EvaI_c%t_$EB4g?no@KsaSk z7sUFA?6q$dN=u>j_;%osJJ`oRF+n0ZeLq}(;`3<(b9&$?q1T^nSeyN57yc`Bq;xn_ zrhnSFClHhz5xO11+#%6YDPSnte;507dT=q|`c(na{uHd#MCLus7DFL&!h)8=+LuJ2 zLU6U)+{%$7OlpyDT5fJ>;@z{G@dEye4jNi2T(fXYoW*O!`63ggqC1oYa7E6=C8(hn zZ7QLcySxS?xzs-&IL%e&F_Ek#>7aHt8Q08;-vqqzAS|uv^lrCMQmP|=G{F1hDPB8V z6A*sXQa+`B^sLmO@KEloZHA^tGb!??X0>0FR2G_GrrX(aM#!(TQY%ena7DonNu!QA zq!EV802Lt8tU&QKbmBOQRc_T=Ff$}CSuY?m;?F?zlRuuhM(iSJMVkUeln_@pT)*9I z+{bU(HfK%A1#X%1%}4d-$q_9E03k>7z0pjoD;5;zzmSfB6wMK zG9*}p^NxR*w}w;ZBYA%t%+5Z?0=+{nmZv(XkGWP@RD^<3ADg%L^@iUm0&S!(n#mvr zB|f2oRDD)%;ce#Y`}Ir=GJEN?XCN`k+>s+0$&J1T>3qNX`rN*OdVB@q#xWVxGOrh& zr+QQE)lF%^wx(}G%FtRJWF-niT4jqoRh6I_y@(X@^OJlBU+4&qYUfoZ{bFLU2ttAK zzNhJ?!l0Ir#);8tMB8kkAF|@OM#9M5CrD}>>pVurf&_KlpxMi7!`MTiG@_jsu zSrhK;4KYSI0*`dabm}AJ8HU!OFXwPpb1q_n9~%$W`L?LEju3O9ji}g?hnxWL@|OK7 z-_{y$fYtqpSo1y9w18EH-QK!z^HQiP|B!`bhM7*(IhJ|)BL?ll+uy6%1}2@Wl=Gnt+QrguZ0C4Q2Xcxf z(x=#=9?9#nZSUn@e-ZQFrXyYqvVi7k{?yr5-*Zs|+m7=2{$wh~mit49;xLg#hQr2M z;@Z=NJBQO!{`+*ipOeI~=pVA_{^W!se1dB4P+aL6!ANr{x}@ZXR5#?p6h#^*PHXTJ zRjtX=X`eeiZ~sv<&s^H$RGsUB!%ytjy%321J?QASn?z?yK68HC;=sGP2FH)^Z2MHj zAMz~6_OSLGPuEG5L)LbiK6ioowHoAW1!MQ++CtE;yPU^Q(rBPY<~Uo{sKQa)$%#@BE|bx^ z&9*K!u9ve_<)(!(X0)(!B$_8|cY;gk>dxF|oV`suGtf6%FxM}uLzRR1mQWUq^%^05 z*ILZdvAvrg<#*Z)79w`=XN5Vm2Rtu$+Z$fvHC5>IczL8;H$?XP_CsMrta#)@q-Dfm ztFhu_09r3B)x<10W|7D4A}G0zN&`Usnc!)eHWtYu0->_o;OR7fBjvGuhlhvTb%rU! zqd4IlmLQqr%;r%W^vCPRUh3vpehpz)YS+oSsqcdZCPj}P<%Jwo)zj3^1U zolKSjQem3z*)DNyet@-Zentf27e}(lZhhsx`aL(Dt>=@?h`)%1h-;-(BX@{*Hb^q{ zq4nS3W??}aL)CI9+Uf?#u|1-NuO4sZxj<;Do_$g&=udK_Fyvj0rM@e2dl<*7vYc~m z#8Mg&YsAyXx}Gp`>s8ByFJhyM%aj6Lq=ZXEq$W%B_nWE~3|oBBdTij2e|um)71Yef zN>S1eVIGp5DeS(%+L(~(f_fTkI;hA|Kcba$c@5)w>MRH4jUO0a*0aqEAU;A-ELY)% zPr=J`Otb`+(2lRK`~27Y;6Jr3&gQoCd*cEr`_hqxSu_30uUt*QSQIRtez7vXQcJ68 zKA2`ifnjt{7nR)B9F?XD*{sV62$fUmvwv)GW-9;Jt67w*uAMt5b^FORH?dJ>z2Px# zrS2t9^mO9N>(Zv1!RoucMS>tLY?r*0==8hPv z>zdk9bmi~sUi?gAAnQytN>sW(%PKNV@yFHf`cN|&{`EnK_ZR=23h` or by using a ticket during the setup process for signing the certificate right away. diff --git a/lib/core/icingaagent/getters/Get-IcingaAgentHostCertificate.psm1 b/lib/core/icingaagent/getters/Get-IcingaAgentHostCertificate.psm1 index 81463cf..7cab3c5 100644 --- a/lib/core/icingaagent/getters/Get-IcingaAgentHostCertificate.psm1 +++ b/lib/core/icingaagent/getters/Get-IcingaAgentHostCertificate.psm1 @@ -27,6 +27,16 @@ function Get-IcingaAgentHostCertificate() $Certificate = New-Object Security.Cryptography.X509Certificates.X509Certificate2 $CertPath; + if ($null -ne $Certificate) { + if ($Certificate.Issuer.ToLower() -eq ([string]::Format('cn={0}', $Hostname).ToLower())) { + Write-IcingaConsoleWarning ` + -Message 'The Icinga Agent certificate "{0}" seems not to be signed by our Icinga CA yet. Using this certificate for the REST-Api as example might not work. Please check the state of the certificate and complete the signing process if required. [IWKB000013]' ` + -Objects $CertPath; + + Write-IcingaEventMessage -EventId 1506 -Namespace 'Framework' -Objects $CertPath; + } + } + return @{ 'CertFile' = $CertPath; 'Subject' = $Certificate.Subject; diff --git a/lib/core/logging/Icinga_EventLog_Enums.psm1 b/lib/core/logging/Icinga_EventLog_Enums.psm1 index a11cac8..1ece133 100644 --- a/lib/core/logging/Icinga_EventLog_Enums.psm1 +++ b/lib/core/logging/Icinga_EventLog_Enums.psm1 @@ -101,9 +101,15 @@ if ($null -eq $IcingaEventLogEnums -Or $IcingaEventLogEnums.ContainsKey('Framewo 1505 = @{ 'EntryType' = 'Warning'; 'Message' = 'Icinga for Windows JEA context not available'; - 'Details' = 'The Icinga for Windows JEA session is no longer available and is attempted to be restarted on the system. This could have either happenend due to a crash or a user action, like restarting the WinRM service.'; + 'Details' = 'The Icinga for Windows JEA session is no longer available and is attempted to be restarted on the system. This could have either happened due to a crash or a user action, like restarting the WinRM service.'; 'EventId' = 1505; }; + 1506 = @{ + 'EntryType' = 'Error'; + 'Message' = 'Icinga Agent certificate not signed by Icinga CA'; + 'Details' = 'The local Icinga Agent certificate seems not to be signed by our Icinga CA yet. Using this certificate for the REST-Api as example might not work yet. Please check the state of the certificate and complete the signing process if required [IWKB000013]'; + 'EventId' = 1506; + }; 1550 = @{ 'EntryType' = 'Error'; 'Message' = 'Unsupported web authentication used'; @@ -113,7 +119,7 @@ if ($null -eq $IcingaEventLogEnums -Or $IcingaEventLogEnums.ContainsKey('Framewo 1551 = @{ 'EntryType' = 'Warning'; 'Message' = 'Invalid authentication credentials provided'; - 'Details' = 'A web request for a client was rejected because of invalid formated base64 encoded credentials.'; + 'Details' = 'A web request for a client was rejected because of invalid formatted base64 encoded credentials.'; 'EventId' = 1551; }; 1552 = @{