Frank Maximilian

Fix fully read zipped files not being properly serialized in sincedb

3

## Description In read mode zipped files are currently always read completely when they already have been read fully. This is due to a call to ` sincedb_collection.clear_watched_file(key)` after the...

Mark in-active files as fully read before skipping them

2

This PR fixes #288 Note that this is missing a unit test to check if consecutive runs with the settings described in the issue properly halt. Sadly I am not...

Mark fully read zip file completed in sincedb

3

This PR fixes #286 Note that this PR is currently missing a unit test for this as I am not really sure how to write one as I am not...

## Description In read mode if `exit_after_read` is set to `true` and `file_completed_action` to `log` (i.e., the files are not removed from their path after being fully read) logstash will...

[api/worker/client] OpenCTI does not support self-signed CAs for RabbitMQ worker/connector connections.

1

## Description As of writing the OpenCTI platform does not support self-signed CAs for use with RabbitMQ for both workers and connectors due to limitations in the way RabbitMQ configuration...

[api] Incorrect amqplib options prevent tls with self-signed certificates

1

## Description OpenCTI API is currently using the [wrong options to configure TLS for RabbitMQ](https://github.com/OpenCTI-Platform/opencti/blob/4cc485c38b2e91a62592c1e778a75a114b4d211c/opencti-platform/opencti-graphql/src/database/rabbitmq.js#L57-L61). Right now TLS options are put under the key `tls`, but the amqplib documentation clearly...

## Description As of 5.3.7 OpenCTI is storing API tokens in plain text in the database. Meaning anyone with access to the internal_objects index can inspect and retrieve API tokens...

OpensearchUser,Role,RoleBinding resources are not re-applied after SecurityConfig reconciliation

14

As SecurityConfig reconciliation overwrites the internal users in `.opendistro_security` (if the field is set in the secret). This is intended behaviour and to be expected, but as of now also...

Support directly mounted TLS certs

3

**Is your feature request related to a problem? Please describe.** In some cases e.g, when using [cert-managers CSI driver](https://cert-manager.io/docs/usage/csi/) TLS keys+CA cert can be directly mounted to the pods. Also...

Add support for time.Time flags

8

This PR implements support for `time.Time` flags which can be used to accept timestamps as input directly (see https://github.com/spf13/cobra/issues/742). The implementation allows defining a list of acceptable timestamp formats which...