Allow certificate verification to be configured.

Related to #72

etc/zabbix-cli.conf

@@ -46,6 +46,10 @@
 ; NB: http does not work, and does so in unexpected ways (with json parse error)
 ;zabbix_api_url=https://zabbix.example.net/zabbix
 
+; Configure certificate verification for the API server.
+; ON/OFF is passed as verify=True/False to the requests library.
+; Everything else is passed as is and assumed to be a file path to a CA bundle.
+;cert_verify=ON
 
 ; ############################
 ; zabbix_config section

zabbix_cli/cli.py

@@ -88,7 +88,12 @@ def __init__(self, conf, username='', password='', auth_token=''):
 
         try:
             self.zapi = ZabbixAPI(self.conf.zabbix_api_url)
-            self.zapi.session.verify = True
+            if self.conf.cert_verify.upper() == "ON":
+                self.zapi.session.verify = True
+            elif self.conf.cert_verify.upper() == "OFF":
+                self.zapi.session.verify = False
+            else:
+                self.zapi.session.verify = self.conf.cert_verify
             zabbix_auth_token_file = os.getenv('HOME') + '/.zabbix-cli_auth_token'
             self.api_auth_token = self.zapi.login(self.api_username, self.api_password, self.api_auth_token)
             self.zapi.user.get(userids=-1)  # Dummy call to verify authentication

zabbix_cli/config.py

@@ -159,6 +159,10 @@ class Configuration(configparser.RawConfigParser, object):
         'zabbix_api', 'zabbix_api_url',
         required=True)
 
+    cert_verify = _registry.add(
+        'zabbix_api', 'cert_verify',
+        default='ON')
+
     system_id = _registry.add(
         'zabbix_config', 'system_id',
         default='zabbix-ID')