Add --(no-)?-ssl_strict option to bypass hostname verification

nagios-plugins-rabbitmq · Feb 23, 2015 · bbd25bd · bbd25bd
1 parent 90c8aac
commit bbd25bd
Show file tree

Hide file tree

Showing 7 changed files with 56 additions and 0 deletions.
diff --git a/scripts/check_rabbitmq_aliveness b/scripts/check_rabbitmq_aliveness
@@ -67,6 +67,11 @@ $p->add_arg(spec => 'ssl|ssl!',
     default => 0
 );
 
+$p->add_arg(spec => 'ssl_strict|ssl_strict!',
+    help => "Verify SSL certificate (default: true)",
+    default => 1
+);
+
 $p->add_arg(spec => 'proxy|proxy!',
     help => "Use environment proxy (default: true)",
     default => 1
@@ -102,6 +107,9 @@ elsif($p->opts->proxy == 1 )
 }
 $ua->agent($PROGNAME.' ');
 $ua->timeout($p->opts->timeout);
+if ($p->opts->ssl) {
+    $ua->ssl_opts(verify_hostname => $p->opts->ssl_strict);
+}
 my $req = HTTP::Request->new(GET => $url);
 $req->authorization_basic($p->opts->username, $p->opts->password);
 my $res = $ua->request($req);

diff --git a/scripts/check_rabbitmq_connections b/scripts/check_rabbitmq_connections
@@ -72,6 +72,11 @@ $p->add_arg(spec => 'ssl|ssl!',
     default => 0
 );
 
+$p->add_arg(spec => 'ssl_strict|ssl_strict!',
+    help => "Verify SSL certificate (default: true)",
+    default => 1
+);
+
 $p->add_arg(spec => 'proxy|proxy!',
     help => "Use environment proxy (default: true)",
     default => 1
@@ -125,6 +130,9 @@ elsif($p->opts->proxy == 1 )
 }
 $ua->agent($PROGNAME.' ');
 $ua->timeout($p->opts->timeout);
+if ($p->opts->ssl) {
+    $ua->ssl_opts(verify_hostname => $p->opts->ssl_strict);
+}
 
 my $url = sprintf("http%s://%s:%d/api/connections", ($p->opts->ssl ? "s" : ""), $hostname, $port);
 my ($retcode, $result) = request($url);

diff --git a/scripts/check_rabbitmq_objects b/scripts/check_rabbitmq_objects
@@ -50,6 +50,11 @@ $p->add_arg(spec => 'ssl|ssl!',
     default => 0
 );
 
+$p->add_arg(spec => 'ssl_strict|ssl_strict!',
+    help => "Verify SSL certificate (default: true)",
+    default => 1
+);
+
 $p->add_arg(spec => 'proxy|proxy!',
     help => "Use environment proxy (default: true)",
     default => 1
@@ -82,6 +87,9 @@ elsif($p->opts->proxy == 1 )
 }
 $ua->agent($PROGNAME.' ');
 $ua->timeout($p->opts->timeout);
+if ($p->opts->ssl) {
+    $ua->ssl_opts(verify_hostname => $p->opts->ssl_strict);
+}
 
 my @calls = ("vhost", "exchange", "binding", "queue", "channel");
 for my $call (@calls) {

diff --git a/scripts/check_rabbitmq_overview b/scripts/check_rabbitmq_overview
@@ -67,6 +67,11 @@ $p->add_arg(spec => 'ssl|ssl!',
     default => 0
 );
 
+$p->add_arg(spec => 'ssl_strict|ssl_strict!',
+    help => "Verify SSL certificate (default: true)",
+    default => 1
+);
+
 $p->add_arg(spec => 'proxy|proxy!',
     help => "Use environment proxy (default: true)",
     default => 1
@@ -118,6 +123,9 @@ elsif($p->opts->proxy == 1 )
 }
 $ua->agent($PROGNAME.' ');
 $ua->timeout($p->opts->timeout);
+if ($p->opts->ssl) {
+    $ua->ssl_opts(verify_hostname => $p->opts->ssl_strict);
+}
 
 my $url = sprintf("http%s://%s:%d/api/overview", ($p->opts->ssl ? "s" : ""), $hostname, $port);
 my ($retcode, $result) = request($url);

diff --git a/scripts/check_rabbitmq_partition b/scripts/check_rabbitmq_partition
@@ -65,6 +65,11 @@ $p->add_arg(spec => 'ssl|ssl!',
     default => 0
 );
 
+$p->add_arg(spec => 'ssl_strict|ssl_strict!',
+    help => "Verify SSL certificate (default: true)",
+    default => 1
+);
+
 $p->add_arg(spec => 'proxy|proxy!',
     help => "Use environment proxy (default: true)",
     default => 1
@@ -113,6 +118,9 @@ elsif($p->opts->proxy == 1 )
 }
 $ua->agent($PROGNAME.' ');
 $ua->timeout($p->opts->timeout);
+if ($p->opts->ssl) {
+    $ua->ssl_opts(verify_hostname => $p->opts->ssl_strict);
+}
 
 my $req = HTTP::Request->new(GET => $url);
 $req->authorization_basic($p->opts->username, $p->opts->password);

diff --git a/scripts/check_rabbitmq_queue b/scripts/check_rabbitmq_queue
@@ -77,6 +77,11 @@ $p->add_arg(spec => 'ssl|ssl!',
     default => 0
 );
 
+$p->add_arg(spec => 'ssl_strict|ssl_strict!',
+    help => "Verify SSL certificate (default: true)",
+    default => 1
+);
+
 $p->add_arg(spec => 'proxy|proxy!',
     help => "Use environment proxy (default: true)",
     default => 1
@@ -132,6 +137,9 @@ elsif($p->opts->proxy == 1 )
 }
 $ua->agent($PROGNAME.' ');
 $ua->timeout($p->opts->timeout);
+if ($p->opts->ssl) {
+    $ua->ssl_opts(verify_hostname => $p->opts->ssl_strict);
+}
 
 my $url = sprintf("http%s://%s:%d/api/queues/%s/%s", ($p->opts->ssl ? "s" : ""), $hostname, $port, $vhost, $queue);
 my ($retcode, $result) = request($url);

diff --git a/scripts/check_rabbitmq_server b/scripts/check_rabbitmq_server
@@ -85,6 +85,11 @@ $p->add_arg(spec => 'ssl|ssl!',
     default => 0
 );
 
+$p->add_arg(spec => 'ssl_strict|ssl_strict!',
+    help => "Verify SSL certificate (default: true)",
+    default => 1
+);
+
 $p->add_arg(spec => 'proxy|proxy!',
     help => "Use environment proxy (default: true)",
     default => 1
@@ -140,6 +145,9 @@ elsif($p->opts->proxy == 1 )
 }
 $ua->agent($PROGNAME.' ');
 $ua->timeout($p->opts->timeout);
+if ($p->opts->ssl) {
+    $ua->ssl_opts(verify_hostname => $p->opts->ssl_strict);
+}
 my $req = HTTP::Request->new(GET => $url);
 $req->authorization_basic($p->opts->username, $p->opts->password);
 my $res = $ua->request($req);