Merge pull request #48 from raphink/dev/ssl_strict

Add --(no-)?-ssl_strict option to bypass hostname verification
nagios-plugins-rabbitmq · Feb 24, 2015 · 0c35749 · 0c35749
2 parents 90c8aac + bbd25bd
commit 0c35749
Show file tree

Hide file tree

Showing 7 changed files with 56 additions and 0 deletions.
diff --git a/scripts/check_rabbitmq_aliveness b/scripts/check_rabbitmq_aliveness
@@ -67,6 +67,11 @@ $p->add_arg(spec => 'ssl|ssl!',
     default => 0
 );
 
+$p->add_arg(spec => 'ssl_strict|ssl_strict!',
+    help => "Verify SSL certificate (default: true)",
+    default => 1
+);
+
 $p->add_arg(spec => 'proxy|proxy!',
     help => "Use environment proxy (default: true)",
     default => 1
@@ -102,6 +107,9 @@ elsif($p->opts->proxy == 1 )
 }
 $ua->agent($PROGNAME.' ');
 $ua->timeout($p->opts->timeout);
+if ($p->opts->ssl) {
+    $ua->ssl_opts(verify_hostname => $p->opts->ssl_strict);
+}
 my $req = HTTP::Request->new(GET => $url);
 $req->authorization_basic($p->opts->username, $p->opts->password);
 my $res = $ua->request($req);

diff --git a/scripts/check_rabbitmq_connections b/scripts/check_rabbitmq_connections
@@ -72,6 +72,11 @@ $p->add_arg(spec => 'ssl|ssl!',
     default => 0
 );
 
+$p->add_arg(spec => 'ssl_strict|ssl_strict!',
+    help => "Verify SSL certificate (default: true)",
+    default => 1
+);
+
 $p->add_arg(spec => 'proxy|proxy!',
     help => "Use environment proxy (default: true)",
     default => 1
@@ -125,6 +130,9 @@ elsif($p->opts->proxy == 1 )
 }
 $ua->agent($PROGNAME.' ');
 $ua->timeout($p->opts->timeout);
+if ($p->opts->ssl) {
+    $ua->ssl_opts(verify_hostname => $p->opts->ssl_strict);
+}
 
 my $url = sprintf("http%s://%s:%d/api/connections", ($p->opts->ssl ? "s" : ""), $hostname, $port);
 my ($retcode, $result) = request($url);

diff --git a/scripts/check_rabbitmq_objects b/scripts/check_rabbitmq_objects
@@ -50,6 +50,11 @@ $p->add_arg(spec => 'ssl|ssl!',
     default => 0
 );
 
+$p->add_arg(spec => 'ssl_strict|ssl_strict!',
+    help => "Verify SSL certificate (default: true)",
+    default => 1
+);
+
 $p->add_arg(spec => 'proxy|proxy!',
     help => "Use environment proxy (default: true)",
     default => 1
@@ -82,6 +87,9 @@ elsif($p->opts->proxy == 1 )
 }
 $ua->agent($PROGNAME.' ');
 $ua->timeout($p->opts->timeout);
+if ($p->opts->ssl) {
+    $ua->ssl_opts(verify_hostname => $p->opts->ssl_strict);
+}
 
 my @calls = ("vhost", "exchange", "binding", "queue", "channel");
 for my $call (@calls) {

diff --git a/scripts/check_rabbitmq_overview b/scripts/check_rabbitmq_overview
@@ -67,6 +67,11 @@ $p->add_arg(spec => 'ssl|ssl!',
     default => 0
 );
 
+$p->add_arg(spec => 'ssl_strict|ssl_strict!',
+    help => "Verify SSL certificate (default: true)",
+    default => 1
+);
+
 $p->add_arg(spec => 'proxy|proxy!',
     help => "Use environment proxy (default: true)",
     default => 1
@@ -118,6 +123,9 @@ elsif($p->opts->proxy == 1 )
 }
 $ua->agent($PROGNAME.' ');
 $ua->timeout($p->opts->timeout);
+if ($p->opts->ssl) {
+    $ua->ssl_opts(verify_hostname => $p->opts->ssl_strict);
+}
 
 my $url = sprintf("http%s://%s:%d/api/overview", ($p->opts->ssl ? "s" : ""), $hostname, $port);
 my ($retcode, $result) = request($url);

diff --git a/scripts/check_rabbitmq_partition b/scripts/check_rabbitmq_partition
@@ -65,6 +65,11 @@ $p->add_arg(spec => 'ssl|ssl!',
     default => 0
 );
 
+$p->add_arg(spec => 'ssl_strict|ssl_strict!',
+    help => "Verify SSL certificate (default: true)",
+    default => 1
+);
+
 $p->add_arg(spec => 'proxy|proxy!',
     help => "Use environment proxy (default: true)",
     default => 1
@@ -113,6 +118,9 @@ elsif($p->opts->proxy == 1 )
 }
 $ua->agent($PROGNAME.' ');
 $ua->timeout($p->opts->timeout);
+if ($p->opts->ssl) {
+    $ua->ssl_opts(verify_hostname => $p->opts->ssl_strict);
+}
 
 my $req = HTTP::Request->new(GET => $url);
 $req->authorization_basic($p->opts->username, $p->opts->password);

diff --git a/scripts/check_rabbitmq_queue b/scripts/check_rabbitmq_queue
@@ -77,6 +77,11 @@ $p->add_arg(spec => 'ssl|ssl!',
     default => 0
 );
 
+$p->add_arg(spec => 'ssl_strict|ssl_strict!',
+    help => "Verify SSL certificate (default: true)",
+    default => 1
+);
+
 $p->add_arg(spec => 'proxy|proxy!',
     help => "Use environment proxy (default: true)",
     default => 1
@@ -132,6 +137,9 @@ elsif($p->opts->proxy == 1 )
 }
 $ua->agent($PROGNAME.' ');
 $ua->timeout($p->opts->timeout);
+if ($p->opts->ssl) {
+    $ua->ssl_opts(verify_hostname => $p->opts->ssl_strict);
+}
 
 my $url = sprintf("http%s://%s:%d/api/queues/%s/%s", ($p->opts->ssl ? "s" : ""), $hostname, $port, $vhost, $queue);
 my ($retcode, $result) = request($url);

diff --git a/scripts/check_rabbitmq_server b/scripts/check_rabbitmq_server
@@ -85,6 +85,11 @@ $p->add_arg(spec => 'ssl|ssl!',
     default => 0
 );
 
+$p->add_arg(spec => 'ssl_strict|ssl_strict!',
+    help => "Verify SSL certificate (default: true)",
+    default => 1
+);
+
 $p->add_arg(spec => 'proxy|proxy!',
     help => "Use environment proxy (default: true)",
     default => 1
@@ -140,6 +145,9 @@ elsif($p->opts->proxy == 1 )
 }
 $ua->agent($PROGNAME.' ');
 $ua->timeout($p->opts->timeout);
+if ($p->opts->ssl) {
+    $ua->ssl_opts(verify_hostname => $p->opts->ssl_strict);
+}
 my $req = HTTP::Request->new(GET => $url);
 $req->authorization_basic($p->opts->username, $p->opts->password);
 my $res = $ua->request($req);