Show
Ignore:
Timestamp:
07/10/12 16:55:48 (2 years ago)
Author:
Philip Maddox <pmaddox@circonus.com>
git-committer:
Philip Maddox <pmaddox@circonus.com> 1341939348 -0400
git-parent:

[aa2a26950f252650791db1d942c440543fdd3992]

git-author:
Philip Maddox <pmaddox@circonus.com> 1341939348 -0400
Message:

Added improved SSL certificate validation to IMAP and TCP checks (use the default-ca-chain.crt file if none is provided by the user, allow users to pass a header_Host to the check to verify the CN of the certificate). Tweaked the HTTP check to not throw a certificate name mismatch error if no header_Host field is provided

Files:

Legend:

Unmodified
Added
Removed
Modified
Copied
Moved
  • docs/config/modules/noit.module.imap.xml

    r23dea7e r353258a  
    282282          </variablelist> 
    283283          <para>A list of ciphers to be used in the SSL protocol (for SSL checks).</para> 
     284        </listitem> 
     285      </varlistentry> 
     286    </variablelist> 
     287    <variablelist> 
     288      <varlistentry> 
     289        <term>header_Host</term> 
     290        <listitem> 
     291          <variablelist> 
     292            <varlistentry> 
     293              <term>required</term> 
     294              <listitem> 
     295                <para>optional</para> 
     296              </listitem> 
     297            </varlistentry> 
     298            <varlistentry> 
     299              <term>allowed</term> 
     300              <listitem> 
     301                <para>.+</para> 
     302              </listitem> 
     303            </varlistentry> 
     304          </variablelist> 
     305          <para>The host header to validate against the SSL certificate (for SSL checks).</para> 
    284306        </listitem> 
    285307      </varlistentry> 
  • docs/config/modules/noit.module.tcp.xml

    r51773e8 r353258a  
    226226          </variablelist> 
    227227          <para>A list of ciphers to be used in the SSL protocol (for SSL checks).</para> 
     228        </listitem> 
     229      </varlistentry> 
     230    </variablelist> 
     231    <variablelist> 
     232      <varlistentry> 
     233        <term>header_Host</term> 
     234        <listitem> 
     235          <variablelist> 
     236            <varlistentry> 
     237              <term>required</term> 
     238              <listitem> 
     239                <para>optional</para> 
     240              </listitem> 
     241            </varlistentry> 
     242            <varlistentry> 
     243              <term>allowed</term> 
     244              <listitem> 
     245                <para>.+</para> 
     246              </listitem> 
     247            </varlistentry> 
     248          </variablelist> 
     249          <para>The host header to validate against the SSL certificate (for SSL checks).</para> 
    228250        </listitem> 
    229251      </varlistentry>