1. 16 May, 2020 4 commits
    • Brian Hartvigsen's avatar
      Fix shellcheck issues · 3a7c7fe4
      Brian Hartvigsen authored
      3a7c7fe4
    • Brian Hartvigsen's avatar
    • Brian Hartvigsen's avatar
      Fix support for wget · d15c14ab
      Brian Hartvigsen authored
      I'm actually not entirely sure why/how this worked with curl but not wget, but it did.  The short answer is that using a GET does not result in the HTTP_HEADER file being written, instead you must pass in the http_headers param ($2) which will return the HTTP headers as a string.  Luckily, the Token is in both the body and the header.  We need it and the id (and smid if 2fa) cookie to proceed.  So now we parrse the response for that instead of the HTTP_HEADER file.
      
      Interesting side note: wget is fine if the URL contains a \r or \n, but curl will barf on it.  So we need to make sure those are stripped from the token as it will be passed in the URL later.
      d15c14ab
    • Brian Hartvigsen's avatar
      need to _url_encode anything sent in GET requests · 52b81608
      Brian Hartvigsen authored
      Fixes issue raised by @tatablack
      52b81608
  2. 02 May, 2020 1 commit
  3. 26 Mar, 2020 1 commit
  4. 25 Mar, 2020 1 commit
    • Brian Torres-Gil's avatar
      fix(deploy/panos): data format improvements · 0453d656
      Brian Torres-Gil authored
      It was discovered in testing that PAN-OS < 9.0 has slightly different
      requirements for the multipart/form-data format and requires the `type`
      parameter to be passed in the URL. These corrections should work for all
      PAN-OS versions.
      0453d656
  5. 15 Mar, 2020 1 commit
  6. 11 Mar, 2020 1 commit
  7. 08 Mar, 2020 2 commits
  8. 03 Mar, 2020 1 commit
  9. 23 Feb, 2020 8 commits
  10. 20 Feb, 2020 1 commit
    • xpac1985's avatar
      haproxy deploy script now compatible with OpenSSL v1.1+ · e184a1b9
      xpac1985 authored
      haproxy deploy script now compatible with OpenSSL v1.1+
      
      The OpenSSL OCSP request for haproxy deployment breaks from OpenSSL v1.1.0 on.
      The format of the `-header` option has been changed and does now contain a `=` instead of a whitespace.
      Other projects have hit the same issue:
      https://github.com/nghttp2/nghttp2/issues/742
      
      This commit determines the OpenSSL/LibreSSL version and then adjusts the request accordingly.
      Also removed the duplicate command line and added some more debug output.
      e184a1b9
  11. 14 Feb, 2020 1 commit
  12. 12 Feb, 2020 8 commits
  13. 11 Feb, 2020 1 commit
  14. 09 Feb, 2020 9 commits