Added support for allowing self-signed certificates that the new Go agent can also use

This commit is contained in:
Muhammad Ibrahim
2025-10-23 20:57:31 +01:00
parent 95800e6d76
commit f42c53d34b
6 changed files with 5 additions and 1 deletions

Binary file not shown.

Binary file not shown.

Binary file not shown.

Binary file not shown.

View File

@@ -356,6 +356,7 @@ api_version: "v1"
credentials_file: "/etc/patchmon/credentials.yml" credentials_file: "/etc/patchmon/credentials.yml"
log_file: "/etc/patchmon/logs/patchmon-agent.log" log_file: "/etc/patchmon/logs/patchmon-agent.log"
log_level: "info" log_level: "info"
skip_ssl_verify: ${SKIP_SSL_VERIFY:-false}
EOF EOF
# Create credentials file # Create credentials file

View File

@@ -1441,10 +1441,12 @@ router.get("/install", async (req, res) => {
// Determine curl flags dynamically from settings (ignore self-signed) // Determine curl flags dynamically from settings (ignore self-signed)
let curlFlags = "-s"; let curlFlags = "-s";
let skipSSLVerify = "false";
try { try {
const settings = await prisma.settings.findFirst(); const settings = await prisma.settings.findFirst();
if (settings && settings.ignore_ssl_self_signed === true) { if (settings && settings.ignore_ssl_self_signed === true) {
curlFlags = "-sk"; curlFlags = "-sk";
skipSSLVerify = "true";
} }
} catch (_) {} } catch (_) {}
@@ -1454,12 +1456,13 @@ router.get("/install", async (req, res) => {
// Get architecture parameter (default to amd64) // Get architecture parameter (default to amd64)
const architecture = req.query.arch || "amd64"; const architecture = req.query.arch || "amd64";
// Inject the API credentials, server URL, curl flags, force flag, and architecture into the script // Inject the API credentials, server URL, curl flags, SSL verify flag, force flag, and architecture into the script
const envVars = `#!/bin/bash const envVars = `#!/bin/bash
export PATCHMON_URL="${serverUrl}" export PATCHMON_URL="${serverUrl}"
export API_ID="${host.api_id}" export API_ID="${host.api_id}"
export API_KEY="${host.api_key}" export API_KEY="${host.api_key}"
export CURL_FLAGS="${curlFlags}" export CURL_FLAGS="${curlFlags}"
export SKIP_SSL_VERIFY="${skipSSLVerify}"
export FORCE_INSTALL="${forceInstall ? "true" : "false"}" export FORCE_INSTALL="${forceInstall ? "true" : "false"}"
export ARCHITECTURE="${architecture}" export ARCHITECTURE="${architecture}"