From e922fc5f1f55bdf8a7d2befcbd5326463f74ef39 Mon Sep 17 00:00:00 2001
From: Michael Howe <michael@michaelhowe.org>
Date: Mon, 21 Dec 2015 21:11:01 +0000
Subject: [PATCH] Support for SSL for check_mqtt

Add support for the specifying CA certificate
---
 plugins/check_mqtt | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/plugins/check_mqtt b/plugins/check_mqtt
index 395f703..8063318 100755
--- a/plugins/check_mqtt
+++ b/plugins/check_mqtt
@@ -97,6 +97,7 @@ parser.add_argument('-u', '--username', metavar="<username>", help="username", d
 parser.add_argument('-p', '--password', metavar="<password>", help="password", dest='mqtt_password', default=None)
 parser.add_argument('-t', '--topic', metavar="<topic>", help="topic to use for the check (defaults to nagios/test)", dest='check_topic', default='nagios/test')
 parser.add_argument('-m', '--max-wait', metavar="<seconds>", help="maximum time to wait for the check (defaults to 4 seconds)", dest='max_wait', default=4, type=int)
+parser.add_argument('-C', '--ca-certificate', metavar="<ca_certificate>", help="path to CA certificate", dest='ca_path', default=None)
 args = parser.parse_args()
 
 userdata = {
@@ -110,6 +111,9 @@ mqttc.on_disconnect = on_disconnect
 mqttc.on_publish = on_publish
 mqttc.on_subscribe = on_subscribe
 
+if args.ca_path is not None:
+    mqttc.tls_set( args.ca_path )
+
 #mqttc.tls_set('root.ca',
 #    cert_reqs=ssl.CERT_REQUIRED,
 #    tls_version=1)
-- 
2.39.5