Merge pull request #9 from rickymoorhouse/mtls

Adding mTLS support for tests

README.md

@@ -44,6 +44,7 @@ The config.yaml is made up of sections:
         path: Path to test
         secure: Is this using HTTPS?
         hosts: List of hosts to use 
+        certificate: Path to keypair to use for mTLS - must be un-encrypted
         discovery: discovery block for this test - merged with top level block 
 ```
 

hemApp/__init__.py

@@ -74,6 +74,7 @@ class Check(object):
     headers = {}
     timeout = 10
     metrics = None
+    certificate = None
 
     def __init__(self, name, test, metrics=None):
         #path, secure=False, verify=True, metrics=None):
@@ -88,7 +89,10 @@ def __init__(self, name, test, metrics=None):
         self.method = test.get('method', "get")
         if 'headers' in test:
             self.headers = test['headers']
-
+        if 'certificate' in test:
+            self.logger.info("Setting certificate to %s", test['certificate'])
+            self.certificate = test['certificate']
+
         self.metrics = metrics
 
     def test(self, param, results):
@@ -105,7 +109,9 @@ def test(self, param, results):
                 self.url.format(param), 
                 headers=self.headers,
                 timeout=self.timeout, 
-                verify=self.verify)
+                verify=self.verify,
+                cert=self.certificate
+                )
             self.logger.debug("Response text: %s", result.text)
             elapsed_time = result.elapsed
             result.raise_for_status()

test_requires.txt

@@ -10,6 +10,7 @@ pytest
 pytest-cov
 pytest-mock
 requests-mock
+coverage==4.0.3
 python-coveralls
 pykafka
 prometheus_client

tests/test_hem.py

@@ -24,6 +24,16 @@ def test_check_invoke():
         assert results is not None
         assert response == 200
         assert type(timing) is datetime.timedelta
+def test_check_mtls_invoke():
+    with requests_mock.mock() as m:
+        m.get('https://1.1.1.1/', text="")
+        test = {'path':'/', 'secure':True, 'verify':True, 'certificate': 'certificate.pem'}
+        check = hemApp.Check('test', test)
+        results = check.test_list(["1.1.1.1"])
+        (response, timing) = results[0]
+        assert results is not None
+        assert response == 200
+        assert type(timing) is datetime.timedelta
 def test_ssl_error():
     with requests_mock.mock() as m:
         m.get('https://1.1.1.1/', exc=requests.exceptions.SSLError)