ssl validation handling

Author: nmillalaf

README.md

@@ -16,6 +16,7 @@ Flags:  (See run command, in this document, for syntax of flags)
 --cloudfoundry-password=            Cloud Foundry Password
 --events="LogMessage"               Comma separated list of events you would like. Valid options are ContainerMetric, CounterEvent, Error, HttpStart, HttpStartStop,
                                     HttpStop, LogMessage, ValueMetric
+--skip-ssl-validation               Skip SSL validation (to allow things like self-signed certs). Do not set to true in production
 --nozzle-polling-period=15s         How frequently this Nozzle polls the CF Firehose for data
 --log-events-batch-size=500         When number of messages in the buffer is equal to this flag, send those to Sumo Logic
 --sumo-post-minimum-delay=2000ms    Minimum time between HTTP POST to Sumo Logic
@@ -76,7 +77,7 @@ If an event **share both filters** (contains a _Include-Only filter_ field and a
 The correct way of using those flags will be something like this:
 
 ```
-godep go run main.go --sumo-endpoint=https://sumo-endpoint --api-endpoint=https://api.endpoint --cloudfoundry-user=some_user --cloudfoundry-password=some_password --sumo-post-minimum-delay=200ms --log-events-batch-size=200 --events=LogMessage, ValueMetric   --include-only-matching-filter=job:diego_cell,source_type:app --exclude-always-matching-filter=source_type:other,unit:count
+godep go run main.go --sumo-endpoint=https://sumo-endpoint --api-endpoint=https://api.endpoint --skip-ssl-validation --cloudfoundry-user=some_user --cloudfoundry-password=some_password --sumo-post-minimum-delay=200ms --log-events-batch-size=200 --events=LogMessage, ValueMetric   --include-only-matching-filter=job:diego_cell,source_type:app --exclude-always-matching-filter=source_type:other,unit:count 
 ```
 
 

main.go

@@ -27,6 +27,7 @@ var (
 	keepAlive, errK             = time.ParseDuration("25s") //default Error,ContainerMetric,HttpStart,HttpStop,HttpStartStop,LogMessage,ValueMetric,CounterEvent
 	wantedEvents                = kingpin.Flag("events", fmt.Sprintf("Comma separated list of events you would like. Valid options are %s", eventRouting.GetListAuthorizedEventEvents())).Default("LogMessage").OverrideDefaultFromEnvar("EVENTS").String()
 	boltDatabasePath            = "event.db"
+	skipSSLValidation           = kingpin.Flag("skip-ssl-validation", "Skip SSL validation (to allow things like self-signed certs). Do not set to true in production").Default("false").OverrideDefaultFromEnvar("SKIP_SSL_VALIDATION").Bool()
 	tickerTime                  = kingpin.Flag("nozzle-polling-period", "How frequently this Nozzle polls the CF Firehose for data").Default("15s").OverrideDefaultFromEnvar("NOZZLE_POLLING_PERIOD").Duration()
 	eventsBatchSize             = kingpin.Flag("log-events-batch-size", "When number of messages in the buffer is equal to this flag, send those to Sumo Logic").Default("500").OverrideDefaultFromEnvar("LOG_EVENTS_BATCH_SIZE").Int()
 	sumoPostMinimumDelay        = kingpin.Flag("sumo-post-minimum-delay", "Minimum time between HTTP POST to Sumo Logic").Default("2000ms").OverrideDefaultFromEnvar("SUMO_POST_MINIMUM_DELAY").Duration()
@@ -51,15 +52,16 @@ func main() {
 	kingpin.Parse()
 
 	logging.Info.Println("Set Configurations:")
-	logging.Info.Println("CF API Endpoint: t" + *apiEndpoint)
+	logging.Info.Println("CF API Endpoint: " + *apiEndpoint)
 	logging.Info.Println("Sumo Logic Endpoint: " + *sumoEndpoint)
 	//logging.Info.Println("Cloud foundry Doppler Endpoint: " + *dopplerEndpoint) //TODO
 	logging.Info.Println("Cloud Foundry Nozzle Subscription ID: " + *subscriptionId)
 	logging.Info.Println("Cloud Foundry User: " + *user)
 	logging.Info.Println("Events Selected: " + *wantedEvents)
-	logging.Info.Printf("Nozzle Polling Period: %v\n", *tickerTime)
-	logging.Info.Printf("Log Events Batch Size: [%d]\n", *eventsBatchSize)
-	logging.Info.Printf("Sumo Logic HTTP Post Minimum Delay: %v\n", *sumoPostMinimumDelay)
+	logging.Info.Printf("Skip SSL Validation: %v", *skipSSLValidation)
+	logging.Info.Printf("Nozzle Polling Period: %v", *tickerTime)
+	logging.Info.Printf("Log Events Batch Size: [%d]", *eventsBatchSize)
+	logging.Info.Printf("Sumo Logic HTTP Post Minimum Delay: %v", *sumoPostMinimumDelay)
 	if *sumoName != "" {
 		logging.Info.Println("Sumo Logic Name: " + *sumoName)
 	}
@@ -118,7 +120,7 @@ func main() {
 
 	firehoseConfig := &firehoseclient.FirehoseConfig{
 		TrafficControllerURL:   cfClient.Endpoint.DopplerEndpoint,
-		InsecureSSLSkipVerify:  true,
+		InsecureSSLSkipVerify:  *skipSSLValidation,
 		IdleTimeoutSeconds:     keepAlive,
 		FirehoseSubscriptionID: *subscriptionId,
 	}

manifest.yml

@@ -7,6 +7,7 @@ env:
   CLOUDFOUNDRY_USER: firehose_user_authorized
   CLOUDFOUNDRY_PASSWORD: password_firehose_user_authorized
   EVENTS: LogMessage
+  SKIP_SSL_VALIDATION: false
   NOZZLE_POLLING_PERIOD: 15s
   LOG_EVENTS_BATCHSIZE: 200
   SUMO_POST_MINIMUM_DELAY: 200ms

tile.yml

@@ -110,6 +110,11 @@ forms:
     label: Comma separated list of events you would like (Default is "LogMessage")
     default: LogMessage
     description: Valid options are Error,ContainerMetric,HttpStart,HttpStop,HttpStartStop,LogMessage,ValueMetric,CounterEvent
+  - name: skip-ssl-validation
+    type: boolean
+    label: Skip SSL validation
+    default: false
+    description: Skip SSL validation (to allow things like self-signed certs). Do not set to true in production
   - name: verbose-log-messages
     type: boolean
     label: Verbose in 'LogMessage' event