(Optionally) allow unverified SSL certificates

[blaind]

Monitoring does not work on hosts that require HTTPS and do not have a valid certificate. Would be nice to have a feature for disabling the validation

   requests.get(url, verify=False)

[coopr]

Forgive me for an unintentionally snarky question, but if a host requires HTTPS, shouldn't that host have a valid SSL certificate?

[blaind]

Completely agreed, for proper security, they should have.

However, quick search on SO finds multiple questions where people are seeking ways to disable verification for various software/libraries (wget, curl, openssl, etc). Indeed, most of the software have such an option.

[JasonSwindle]

+1

[mayday6971]

Also +1. The config file should have a way to add SSL verification to no. When I do a request to localhost, and the cert is www.example.com, the request fails because the name did not match the request. I have the /server-info and /server-status only listening on localhost.

[JasonSwindle]

100x +1!!! I 100% agree verify SSL to no would help so much.