tyler.durden
/
icinga2
mirror of https://github.com/Icinga/icinga2.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

ITL: add check_http args for SSL version forcing 

The -S argument of check_http can take a number, which forces the connection to
use a specific SSL version.  This is implemented as multiple options because
check_http does not accept the number following -S if they are separated.

fixes #10358

Signed-off-by: Michael Friedrich <michael.friedrich@netways.de>
This commit is contained in:
Brian De Wolf 2015-11-16 11:34:18 -08:00 committed by Michael Friedrich
parent 8e0cc701eb
commit 2e1a2146f1
2 changed files with 12 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
doc/7-icinga-template-library.md
View File

@ -446,6 +446,9 @@ http_vhost | **Optional.** The virtual host that should be sent in
http_uri | **Optional.** The request URI for GET or POST. Defaults to `/`.
http_port | **Optional.** The TCP port. Defaults to 80 when not using SSL, 443 otherwise.
http_ssl | **Optional.** Whether to use SSL. Defaults to false.
http_ssl_force_tlsv1 | **Optional.** Whether to force TLSv1.
http_ssl_force_sslv2 | **Optional.** Whether to force SSLv2.
http_ssl_force_sslv3 | **Optional.** Whether to force SSLv3.
http_sni | **Optional.** Whether to use SNI. Defaults to false.
http_auth_pair | **Optional.** Add 'username:password' authorization pair.
http_proxy_auth_pair | **Optional.** Add 'username:password' authorization pair for proxy.

9
itl/command-plugins.conf
View File

@ -331,6 +331,15 @@ object CheckCommand "http" {
"-S" = {
set_if = "$http_ssl$"
}
"-S1" = {
set_if = "$http_ssl_force_tlsv1$"
}
"-S2" = {
set_if = "$http_ssl_force_sslv2$"
}
"-S3" = {
set_if = "$http_ssl_force_sslv3$"
}
"--sni" = {
set_if = "$http_sni$"
}