elbping 0.0.16 → 0.1

data/elbping.gemspec

@@ -1,6 +1,6 @@
 Gem::Specification.new do |s|
   s.name          = 'elbping'
-  s.version       = '0.0.16'
+  s.version       = '0.1'
   s.date          = '2013-08-13'
   s.summary       = "Small tool to 'ping' the nodes that make up an Amazon Elastic Load Balancer"
   s.description   = "elbping is a tool to ping all of the nodes behind an Amazon Elastic Load Balancer. It only works for ELBs in HTTP mode and works by triggering an HTTP 405 (METHOD NOT ALLOWED) error caused when the ELB receives a HTTP verb that is too long."

data/lib/elbping/display.rb

@@ -47,9 +47,13 @@ module ElbPing
       code = status[:code]
       duration = status[:duration]
       exc = status[:exception]
+      sslSubject = status[:sslSubject].join(',') if status[:sslSubject]
+      sslExpires = status[:sslExpires]
+
       exc_display = exc ? "exception=#{exc}" : ''
+      ssl_display = (sslSubject and sslExpires) ? "ssl_cn=#{sslSubject} ssl_expires=#{sslExpires}" : ''
 
-      self.out "Response from #{node}: code=#{code.to_s} time=#{duration} ms #{exc_display}"
+      self.out "Response from: #{node.rjust(15)}: code=#{code.to_s} time=#{duration} ms #{ssl_display} #{exc_display}"
     end
 
     # Display summary of requests, responses, and latencies (for aggregate and per-node)

data/lib/elbping/pinger.rb

@@ -1,11 +1,27 @@
 
 require "net/http"
 require "net/https"
+require "openssl"
 
 module ElbPing
   # Responsible for all HTTP ping-like functionality
   module HttpPinger
 
+    # Extract CNs from a X509 subject string
+    #
+    # Arguments:
+    # * x509_subject: (string) of cert subject
+
+    def self.cert_name(x509_subject)
+      cn_bucket = Array.new
+      x509_subject.to_a.each do |entry|
+        if entry.first == 'CN' and entry[1]
+          cn_bucket << entry[1]
+        end
+      end
+      cn_bucket
+    end
+
     # Make HTTP request to given node using custom request method and measure response time
     #
     # Arguments:
@@ -42,10 +58,18 @@ module ElbPing
 
       ##
       # Make the HTTP request and handle any errors along the way
-      error = nil
-      exc = nil
+      error, exc = nil, nil
+      req, response, cert = nil, nil, nil
+
       begin
-        response = http.request(ping_request.new(path))
+        http.start do
+          req = ping_request.new(path)
+          cert = http.peer_cert
+          response = http.request(req)
+        end
+      rescue OpenSSL::SSL::SSLError => e
+        # This probably? won't happen with VERIFY_NONE
+        error = :sslerror
       rescue Errno::ECONNREFUSED
         error = :econnrefused
       rescue Timeout::Error
@@ -59,10 +83,18 @@ module ElbPing
         error = :exception
       end
 
+      ssl_status = {}
+      if use_ssl
+        raise "No cert when SSL enabled?!" unless cert
+        ssl_status = {:sslSubject => cert_name(cert.subject),
+          :sslExpires => cert.not_after}
+      end
+
       {:code => error || response.code,
         :exception => exc,
         :node => node,
-        :duration => ((Time.now.getutc - start) * 1000).to_i} # returns in ms
+        :duration => ((Time.now.getutc - start) * 1000).to_i, # returns in ms
+      }.merge(ssl_status)
     end
   end
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: elbping
 version: !ruby/object:Gem::Version
-  version: 0.0.16
+  version: '0.1'
   prerelease: 
 platform: ruby
 authors: