[dev.icinga.com #9085] Certificate-based authentication for the API

[icinga-migration]

This issue has been migrated from Redmine: https://dev.icinga.com/issues/9085

Created by gbeutner on 2015-04-17 12:50:00 +00:00

Assignee: mfriedrich
Status: Resolved (closed on 2015-07-09 13:31:18 +00:00)
Target Version: 2.4.0
Last Update: 2015-11-06 17:07:53 +00:00 (in Redmine)

Backport?: No
Include in Changelog: 1

---

• Authentication using certificates
  • Implement 'ApiUser' object
  • attributes: client_cn
  • Support for client certificates

Attachments

• icinga2_http_client_certificate.png mfriedrich - 2015-07-09 13:29:56 +00:00

Changesets

2015-07-09 13:27:14 +00:00 by (unknown) 8bf9498

API: Implement password- and certificate-based authentication

fixes #9086
fixes #9085
refs #9594

---

Parent Task: #9074

[icinga-migration]

Updated by gbeutner on 2015-04-17 12:55:06 +00:00

• Description updated

[icinga-migration]

Updated by mfriedrich on 2015-05-19 08:06:18 +00:00

• Priority changed from Normal to High

[icinga-migration]

Updated by mfriedrich on 2015-05-19 08:36:31 +00:00

• Estimated Hours set to 8

[icinga-migration]

Updated by mfriedrich on 2015-07-09 13:24:44 +00:00

• Status changed from New to Assigned
• Assigned to set to mfriedrich

Tests

With Firefox:

Set a password.

sudo openssl pkcs12 -export -inkey /etc/icinga2/pki/nbmif.int.netways.de.key -in /etc/icinga2/pki/nbmif.int.netways.de.crt -nodes -out icinga2_http.p12

Import as own certificate, and give it the password.

[icinga-migration]

Updated by mfriedrich on 2015-07-09 13:30:01 +00:00

• File added icinga2_http_client_certificate.png

[icinga-migration]

Updated by Anonymous on 2015-07-09 13:31:18 +00:00

• Status changed from Assigned to Resolved
• Done % changed from 0 to 100

Applied in changeset 8bf9498.

[icinga-migration]

Updated by mfriedrich on 2015-07-13 08:38:45 +00:00

• Backport? changed from TBD to No

[icinga-migration]

Updated by gbeutner on 2015-11-06 17:07:53 +00:00

• Subject changed from Implement certificate-based authentication to Certificate-based authentication for the API