* first version adding gl CA
* adding custom trutstore
* fixed SSLContext
* fixed SSLContext for connectivity check
* fix comments
* fixed imports
* reverting altnames tmp change
* reverting altnames tmp change
* fixed preflightconfig, fixed hostname-verifier
* added credentials to target string, set hostname
* added credentials from target string
* only add TrustManager if https is requested
* fixing tests
* add another alt name
* change creation of restBaseUrl
* DatanodeSecuritySetupIT adaptation for stable hostname of the datanode
* trying to fix naming/binding for docker
* adding another alt name
* added s to http
* changing exception
* more debug output
* change test
* change test
* adding debug
* switch back to http
* more debugging
* more debugging
* added exception to retryer
* fixed boolean eval
* going to the next step on FAILED, too
* fixing if clause
* cleanup
* cleanup
* cleanup
* cleanup
* cleanup
* cleanup
* cleanup
* cleanup
* removed wrong credentials provider
* added name verifying
* fix alt name handling
* removed unneccessary hostname verifier
* reverted DefaultX509TrustManager
* removed link to DefaultX509TrustManager because it's used in different contexts, singleton for SSL related stuff so we don't instantiate it all the time
* full rollback DefaultX509TrustManager
* reverted change on logging
* revert VersionProbe, unnecessary changes
* DatanodeSecuritySetupIT fixed, separated bind address and hostname
* changed to lambda
* changed to lambda
* small refactorings in csrsigner
* added test for CustomCAX509TrustManager
* added binding for CaService into Preflight
* fixing bindings
* fixing bindings
---------
Co-authored-by: Tomas Dvorak <tomas.dvorak@graylog.com>
* New configuration handling. Incomplete manual config ends with error. Empty config allows to try different config options.
* Trying to reflect functionality responsibilities with better naming
* Change ConfigProvider, so that it stops using PEM files, and starts using PKCS12 files.
Refactoring, splitting the functionality to different classes.
Some config changes that make things work in IDEA.
Reusable truststore.
Truststore stores only root certificates.
* Simpler root certificate finding
* Dir Sync does not remove cert files
* Removed unnecessary default config changes. Cleared confusing certificate copying and unnecessary certificate duplication in 2 folders
* Truststore path created outside of TruststoreCreator. Root certificate found in a different way, without considering its place in the certificate chain
* Fixed log message
* Integration test fixed
* Certs are not an exception in FullDirSync. Introduced second config location as a step towards final configuration. Certificates are moved between locations, as it was done previously
* Fixed a test. Minor refactoring.
* Config location has no default value. It is checked if it is provided, as it is required
* adds a config option to force single-node type so that (at least on macOS) the bootstrap checks won't run and fail
* add changelog
* reworded message
* Refactor data-node download and assembly
- Download OpenSearch aarch64 distribution in addition to x64
- Extract OpenSearch distribution into "target/opensearch/*" instead of
"bin/download".
- Include OpenSearch distributions in "dist/" instead of "bin/" in
assembly
* Fix data-node test container creation
* Adjust OpenSearch location for architecture dependent locations
* If the configured location exists, use it
Otherwise, check for architecture dependent distribution directories.
* Switch default config file to locations that work with the tarball
* Rename datanode.jar to graylog-datanode.jar
* Rename datanodectl to graylog-datanode.sh
* Include graylog-datanode.sh in assembly as bin/graylog-datanode
* Add a jvm.options config file
* Add a production log4j2.xml config file
* Use bundled JVM if it exists
* fixed docker image for datanode integration tests
---------
Co-authored-by: Tomas Dvorak <tomas.dvorak@graylog.com>
