omniti-labs/reconnoiter — pull request #88 by pamaddox (2012-07-10 17:09:49+00:00)
Title: SSL Updates For TCP and IMAP Checks

A couple of changes...

1) I added improved SSL support to the TCP and IMAP checks. If the user fails to specify a ca-chain file, it will now use the default one, as in the HTTP check. I have also added a "header_Host" field to each of these checks that a user can enter to verify the CN/SANs coming from the certificate. If the user fails to specify a header_Host, it will not give a certificate mismatch error. I also moved the Lua code to verify the headers from HTTP.lua to extras.lua where it can be used by multiple checks.

2) I changed the default behavior of the HTTP check to not throw an error when no header_Host is provided. This will match the behavior in the TCP and IMAP checks and be consistent.