elbping 0.1 → 0.2

data/elbping.gemspec

@@ -1,6 +1,6 @@
 Gem::Specification.new do |s|
   s.name          = 'elbping'
-  s.version       = '0.1'
+  s.version       = '0.2'
   s.date          = '2013-08-13'
   s.summary       = "Small tool to 'ping' the nodes that make up an Amazon Elastic Load Balancer"
   s.description   = "elbping is a tool to ping all of the nodes behind an Amazon Elastic Load Balancer. It only works for ELBs in HTTP mode and works by triggering an HTTP 405 (METHOD NOT ALLOWED) error caused when the ELB receives a HTTP verb that is too long."

data/lib/elbping/cli.rb

@@ -114,6 +114,7 @@ module ElbPing
           break if not run
 
           status = ElbPing::HttpPinger.ping_node(node,
+            elb_uri.host,
             elb_uri.port,
             (elb_uri.path == "") ? "/" : elb_uri.path,
             (elb_uri.scheme == 'https'),

data/lib/elbping/display.rb

@@ -49,11 +49,12 @@ module ElbPing
       exc = status[:exception]
       sslSubject = status[:sslSubject].join(',') if status[:sslSubject]
       sslExpires = status[:sslExpires]
+      sslHostMatch = status[:sslHostMatch]
 
       exc_display = exc ? "exception=#{exc}" : ''
-      ssl_display = (sslSubject and sslExpires) ? "ssl_cn=#{sslSubject} ssl_expires=#{sslExpires}" : ''
+      ssl_display = (sslSubject and sslExpires) ? "ssl cn=#{sslSubject} match=#{sslHostMatch} expires=#{sslExpires}" : ''
 
-      self.out "Response from: #{node.rjust(15)}: code=#{code.to_s} time=#{duration} ms #{ssl_display} #{exc_display}"
+      self.out "Response from: #{node.rjust(15)}: code=#{code.to_s} time=#{duration}ms #{ssl_display} #{exc_display}"
     end
 
     # Display summary of requests, responses, and latencies (for aggregate and per-node)

data/lib/elbping/pinger.rb

@@ -22,17 +22,28 @@ module ElbPing
       cn_bucket
     end
 
+    # Check if a given host matches a cert's pattern
+    #
+    # Arguments:
+    # * cert: (object) of X.509 certificate
+    # * host: (string) of a hostname to compare
+
+    def self.cert_matches?(cert, host)
+      File.fnmatch(cert_name(cert.subject).first, host)
+    end
+
     # Make HTTP request to given node using custom request method and measure response time
     #
     # Arguments:
     # * node: (string) of node IP
+    # * host: (string) of hostname, used for checking SSL cert match
     # * port: (string || Fixnum) of positive integer [1, 65535]
     # * path: (string) of path to request, e.g. "/"
     # * use_ssl: (boolean) Whether or not this is HTTPS
     # * verb_len: (Fixnum) of positive integer, how long the custom HTTP verb should be
     # * timeout: (Fixnum) of positive integer, how many _seconds_ for connect and read timeouts
 
-    def self.ping_node(node, port, path, use_ssl, verb_len, timeout)
+    def self.ping_node(node, host, port, path, use_ssl, verb_len, timeout)
       ##
       # Build request class
       ping_request = Class.new(Net::HTTPRequest) do
@@ -86,8 +97,11 @@ module ElbPing
       ssl_status = {}
       if use_ssl
         raise "No cert when SSL enabled?!" unless cert
-        ssl_status = {:sslSubject => cert_name(cert.subject),
-          :sslExpires => cert.not_after}
+        ssl_status = {
+          :sslSubject => cert_name(cert.subject),
+          :sslExpires => cert.not_after,
+          :sslHostMatch => cert_matches?(cert, host)
+        }
       end
 
       {:code => error || response.code,

data/test/test_pinger.rb

@@ -2,6 +2,7 @@ require 'test/unit'
 require 'elbping/pinger.rb'
 
 DEFAULT_NODE    = ENV['TEST_NODE']     || '127.0.0.1'
+DEFAULT_HOST    = ENV['TEST_HOST']     || 'localhost'
 DEFAULT_PORT    = ENV['TEST_PORT']     || '80'
 DEFAULT_PATH    = ENV['TEST_PATH']     || '/'
 DEFAULT_SSL     = ENV['TEST_SSL']      || false
@@ -16,6 +17,7 @@ class TestHttpPinger < Test::Unit::TestCase
     assert_nothing_raised do
       resp = ElbPing::HttpPinger.ping_node(
         DEFAULT_NODE,
+        DEFAULT_HOST,
         DEFAULT_PORT,
         DEFAULT_PATH,
         DEFAULT_SSL,
@@ -33,3 +35,22 @@ class TestHttpPinger < Test::Unit::TestCase
   end
 end
 
+require 'openssl'
+class TestCertMatches
+  def test_wildcard
+    cert = OpenSSL::X509::Certificate.new
+    cert.subject = OpenSSL::X509::Name.parse "/CN=*.example.com"
+
+    assert ElbPing::HttpPinger.cert_matches?(cert, "www.example.com")
+    assert_false ElbPing::HttpPinger.cert_matches?(cert, "www.example.org")
+  end
+
+  def test_static
+    cert = OpenSSL::X509::Certificate.new
+    cert.subject = OpenSSL::X509::Name.parse "/CN=www.example.com"
+
+    assert ElbPing::HttpPinger.cert_matches?(cert, "www.example.com")
+    assert_false ElbPing::HttpPinger.cert_matches?(cert, "www.example.org")
+  end
+end
+

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: elbping
 version: !ruby/object:Gem::Version
-  version: '0.1'
+  version: '0.2'
   prerelease: 
 platform: ruby
 authors:
@@ -78,13 +78,8 @@ required_rubygems_version: !ruby/object:Gem::Requirement
       version: '0'
 requirements: []
 rubyforge_project: 
-rubygems_version: 1.8.25
+rubygems_version: 1.8.23
 signing_key: 
 specification_version: 3
 summary: Small tool to 'ping' the nodes that make up an Amazon Elastic Load Balancer
-test_files:
-- test/test_latencybucket.rb
-- test/test_pinger.rb
-- test/test_resolver.rb
-- test/test_stats.rb
-- test/test_tests.rb
+test_files: []