From 3c60d851fbb1c9d2a6edccd03dfd1fbb5eec84e9 Mon Sep 17 00:00:00 2001
From: "Alexander A. Klimov" <alexander.klimov@icinga.com>
Date: Wed, 13 May 2020 10:41:24 +0200
Subject: [PATCH] check_http: support --verify-host

refs #7969
---
 doc/10-icinga-template-library.md | 1 +
 itl/command-plugins.conf          | 4 ++++
 2 files changed, 5 insertions(+)

diff --git a/doc/10-icinga-template-library.md b/doc/10-icinga-template-library.md
index 83377f5c6..accad3885 100644
--- a/doc/10-icinga-template-library.md
+++ b/doc/10-icinga-template-library.md
@@ -664,6 +664,7 @@ http_ipv4                        | **Optional.** Use IPv4 connection. Defaults t
 http_ipv6                        | **Optional.** Use IPv6 connection. Defaults to false.
 http_link                        | **Optional.** Wrap output in HTML link. Defaults to false.
 http_verbose                     | **Optional.** Show details for command-line debugging. Defaults to false.
+http_verify_host                 | **Optional.** Verify SSL certificate is for the -H hostname (with --sni and -S). Defaults to false. **Only supported by the Nagios plugins version of check\_http, not by the monitoring plugins one.**
 
 
 ### icmp <a id="plugin-check-command-icmp"></a>
diff --git a/itl/command-plugins.conf b/itl/command-plugins.conf
index c0cc528b0..b128abba1 100644
--- a/itl/command-plugins.conf
+++ b/itl/command-plugins.conf
@@ -535,6 +535,10 @@ object CheckCommand "http" {
 			set_if = "$http_verbose$"
 			description = "Show details for command-line debugging"
 		}
+		"--verify-host" = {
+			set_if = "$http_verify_host$"
+			description = "Verify SSL certificate is for the -H hostname (with --sni and -S)"
+		}
 	}
 
 	vars.http_address = "$check_address$"