Support for SSL for check_mqtt

Add support for the specifying CA certificate

diff --git a/plugins/check_mqtt b/plugins/check_mqtt
index 395f703eaebc73b01718b4196b5e354ffb0ca2fb..8063318c861048fd0ed2ff67455e6162845b5944 100755 (executable)
--- a/plugins/check_mqtt
+++ b/plugins/check_mqtt
@@ -97,6 +97,7 @@ parser.add_argument('-u', '--username', metavar="<username>", help="username", d
 parser.add_argument('-p', '--password', metavar="<password>", help="password", dest='mqtt_password', default=None)
 parser.add_argument('-t', '--topic', metavar="<topic>", help="topic to use for the check (defaults to nagios/test)", dest='check_topic', default='nagios/test')
 parser.add_argument('-m', '--max-wait', metavar="<seconds>", help="maximum time to wait for the check (defaults to 4 seconds)", dest='max_wait', default=4, type=int)
+parser.add_argument('-C', '--ca-certificate', metavar="<ca_certificate>", help="path to CA certificate", dest='ca_path', default=None)
 args = parser.parse_args()
 
 userdata = {
@@ -110,6 +111,9 @@ mqttc.on_disconnect = on_disconnect
 mqttc.on_publish = on_publish
 mqttc.on_subscribe = on_subscribe
 
+if args.ca_path is not None:
+    mqttc.tls_set( args.ca_path )
+
 #mqttc.tls_set('root.ca',
 #    cert_reqs=ssl.CERT_REQUIRED,
 #    tls_version=1)