diff options
| author | Ken Giusti <kgiusti@apache.org> | 2013-03-22 21:45:42 +0000 |
|---|---|---|
| committer | Ken Giusti <kgiusti@apache.org> | 2013-03-22 21:45:42 +0000 |
| commit | 964edfa59bd065b1db97ea16932ef2553ee8ac04 (patch) | |
| tree | 492ce8b01f51179f72ca28586f475a9310043761 /cpp/src/tests/ping_broker | |
| parent | 5046d4fb0f784ccf3a141d99935fadfa2c4300f6 (diff) | |
| download | qpid-python-964edfa59bd065b1db97ea16932ef2553ee8ac04.tar.gz | |
NO-JIRA: add SSL test that verifies hostname in certificate
git-svn-id: https://svn.apache.org/repos/asf/qpid/trunk/qpid@1460013 13f79535-47bb-0310-9956-ffa450edef68
Diffstat (limited to 'cpp/src/tests/ping_broker')
| -rwxr-xr-x | cpp/src/tests/ping_broker | 7 |
1 files changed, 7 insertions, 0 deletions
diff --git a/cpp/src/tests/ping_broker b/cpp/src/tests/ping_broker index 6c391027a3..be99a6ef46 100755 --- a/cpp/src/tests/ping_broker +++ b/cpp/src/tests/ping_broker @@ -60,6 +60,9 @@ def OptionsAndArguments(argv): help="SASL mechanism for authentication (e.g. EXTERNAL, ANONYMOUS, PLAIN, CRAM-MD, DIGEST-MD5, GSSAPI). SASL automatically picks the most secure available mechanism - use this option to override.") parser.add_option("--ssl-certificate", action="store", type="string", metavar="<cert>", help="Client SSL certificate (PEM Format)") parser.add_option("--ssl-key", action="store", type="string", metavar="<key>", help="Client SSL private key (PEM Format)") + parser.add_option("--ssl-trustfile", action="store", type="string", metavar="<CA>", help="List of trusted CAs (PEM Format)") + parser.add_option("--ssl-skip-hostname-check", action="store_true", + help="Do not validate hostname in peer certificate") parser.add_option("--ha-admin", action="store_true", help="Allow connection to a HA backup broker.") opts, args = parser.parse_args(args=argv) @@ -73,6 +76,10 @@ def OptionsAndArguments(argv): conn_options['ssl_certfile'] = opts.ssl_certificate if opts.ssl_key: conn_options['ssl_key'] = opts.ssl_key + if opts.ssl_trustfile: + conn_options['ssl_trustfile'] = opts.ssl_trustfile + if opts.ssl_skip_hostname_check: + conn_options['ssl_skip_hostname_check'] = True if opts.ha_admin: conn_options['client_properties'] = {'qpid.ha-admin' : 1} return args |