plugins/t/check_http.t

   1 #! /usr/bin/perl -w -I ..
   2 #
   3 # HyperText Transfer Protocol (HTTP) Test via check_http
   4 #
   5 #
   6
   7 use strict;
   8 use Test::More;
   9 use POSIX qw/mktime strftime/;
  10 use NPTest;
  11
  12 plan tests => 49;
  13
  14 my $successOutput = '/OK.*HTTP.*second/';
  15
  16 my $res;
  17 my $plugin = 'check_http';
  18 $plugin    = 'check_curl' if $0 =~ m/check_curl/mx;
  19
  20 my $host_tcp_http      = getTestParameter("NP_HOST_TCP_HTTP", "A host providing the HTTP Service (a web server)", "localhost");
  21 my $host_tls_http      = getTestParameter("NP_HOST_TLS_HTTP", "A host providing the HTTPS Service (a tls web server)", "localhost");
  22 my $host_tls_cert      = getTestParameter("NP_HOST_TLS_CERT", "the common name of the certificate.", "localhost");
  23 my $host_nonresponsive = getTestParameter("NP_HOST_NONRESPONSIVE", "The hostname of system not responsive to network requests", "10.0.0.1");
  24 my $hostname_invalid   = getTestParameter("NP_HOSTNAME_INVALID", "An invalid (not known to DNS) hostname", "nosuchhost");
  25 my $internet_access    = getTestParameter("NP_INTERNET_ACCESS", "Is this system directly connected to the internet?", "yes");
  26 my $host_tcp_http2     = getTestParameter("NP_HOST_TCP_HTTP2", "A host providing an index page containing the string 'monitoring'", "test.monitoring-plugins.org");
  27 my $host_tcp_proxy     = getTestParameter("NP_HOST_TCP_PROXY", "A host providing a HTTP proxy with CONNECT support", "localhost");
  28 my $port_tcp_proxy     = getTestParameter("NP_PORT_TCP_PROXY", "Port of the proxy with HTTP and CONNECT support", "3128");
  29
  30 my $faketime = -x '/usr/bin/faketime' ? 1 : 0;
  31
  32
  33 $res = NPTest->testCmd(
  34         "./$plugin $host_tcp_http -wt 300 -ct 600"
  35         );
  36 cmp_ok( $res->return_code, '==', 0, "Webserver $host_tcp_http responded" );
  37 like( $res->output, $successOutput, "Output OK" );
  38
  39 $res = NPTest->testCmd(
  40         "./$plugin $host_tcp_http -wt 300 -ct 600 -v -v -v -k 'bob:there' -k 'carl:frown'"
  41         );
  42 like( $res->output, '/bob:there\r\ncarl:frown\r\n/', "Got headers with multiple -k options" );
  43
  44 $res = NPTest->testCmd(
  45         "./$plugin $host_nonresponsive -wt 1 -ct 2 -t 3"
  46         );
  47 cmp_ok( $res->return_code, '==', 2, "Webserver $host_nonresponsive not responding" );
  48 cmp_ok( $res->output, 'eq', "CRITICAL - Socket timeout after 3 seconds", "Output OK");
  49
  50 $res = NPTest->testCmd(
  51         "./$plugin $hostname_invalid -wt 1 -ct 2"
  52         );
  53 cmp_ok( $res->return_code, '==', 2, "Webserver $hostname_invalid not valid" );
  54 # The first part of the message comes from the OS catalogue, so cannot check this.
  55 # On Debian, it is Name or service not known, on Darwin, it is No address associated with nodename
  56 # Is also possible to get a socket timeout if DNS is not responding fast enough
  57 like( $res->output, "/Unable to open TCP socket|Socket timeout after/", "Output OK");
  58
  59 # host header checks
  60 $res = NPTest->testCmd("./$plugin -v -H $host_tcp_http");
  61 like( $res->output, '/^Host: '.$host_tcp_http.'\s*$/ms', "Host Header OK" );
  62
  63 $res = NPTest->testCmd("./$plugin -v -H $host_tcp_http -p 80");
  64 like( $res->output, '/^Host: '.$host_tcp_http.'\s*$/ms', "Host Header OK" );
  65
  66 $res = NPTest->testCmd("./$plugin -v -H $host_tcp_http:8080 -p 80");
  67 like( $res->output, '/^Host: '.$host_tcp_http.':8080\s*$/ms', "Host Header OK" );
  68
  69 $res = NPTest->testCmd("./$plugin -v -H $host_tcp_http:8080 -p 80");
  70 like( $res->output, '/^Host: '.$host_tcp_http.':8080\s*$/ms', "Host Header OK" );
  71
  72 SKIP: {
  73         skip "No internet access", 3 if $internet_access eq "no";
  74
  75         $res = NPTest->testCmd("./$plugin -v -H $host_tls_http -S");
  76         like( $res->output, '/^Host: '.$host_tls_http.'\s*$/ms', "Host Header OK" );
  77
  78         $res = NPTest->testCmd("./$plugin -v -H $host_tls_http:8080 -S -p 443");
  79         like( $res->output, '/^Host: '.$host_tls_http.':8080\s*$/ms', "Host Header OK" );
  80
  81         $res = NPTest->testCmd("./$plugin -v -H $host_tls_http:443 -S -p 443");
  82         like( $res->output, '/^Host: '.$host_tls_http.'\s*$/ms', "Host Header OK" );
  83 };
  84
  85 SKIP: {
  86         skip "No host serving monitoring in index file", 7 unless $host_tcp_http2;
  87
  88         $res = NPTest->testCmd( "./$plugin -H $host_tcp_http2 -r 'monitoring'" );
  89         cmp_ok( $res->return_code, "==", 0, "Got a reference to 'monitoring'");
  90
  91         $res = NPTest->testCmd( "./$plugin -H $host_tcp_http2 -r 'mONiTORing'" );
  92         cmp_ok( $res->return_code, "==", 2, "Not got 'mONiTORing'");
  93         like ( $res->output, "/pattern not found/", "Error message says 'pattern not found'");
  94
  95         $res = NPTest->testCmd( "./$plugin -H $host_tcp_http2 -R 'mONiTORing'" );
  96         cmp_ok( $res->return_code, "==", 0, "But case insensitive doesn't mind 'mONiTORing'");
  97
  98         $res = NPTest->testCmd( "./$plugin -H $host_tcp_http2 -r 'monitoring' --invert-regex" );
  99         cmp_ok( $res->return_code, "==", 2, "Invert results work when found");
 100         like ( $res->output, "/pattern found/", "Error message says 'pattern found'");
 101
 102         $res = NPTest->testCmd( "./$plugin -H $host_tcp_http2 -r 'mONiTORing' --invert-regex" );
 103         cmp_ok( $res->return_code, "==", 0, "And also when not found");
 104 }
 105 SKIP: {
 106         skip "No internet access", 22 if $internet_access eq "no";
 107
 108         $res = NPTest->testCmd(
 109                 "./$plugin --ssl $host_tls_http"
 110                 );
 111         cmp_ok( $res->return_code, '==', 0, "Can read https for $host_tls_http" );
 112
 113         $res = NPTest->testCmd( "./$plugin -C 1 --ssl $host_tls_http" );
 114         cmp_ok( $res->return_code, '==', 0, "Checking certificate for $host_tls_http");
 115         like  ( $res->output, "/Certificate '$host_tls_cert' will expire on/", "Output OK" );
 116         my $saved_cert_output = $res->output;
 117
 118         $res = NPTest->testCmd( "./$plugin -C 8000,1 --ssl $host_tls_http" );
 119         cmp_ok( $res->return_code, '==', 1, "Checking certificate for $host_tls_http");
 120         like  ( $res->output, qr/WARNING - Certificate '$host_tls_cert' expires in \d+ day/, "Output Warning" );
 121
 122         $res = NPTest->testCmd( "./$plugin $host_tls_http -C 1" );
 123         is( $res->return_code, 0, "Old syntax for cert checking okay" );
 124         is( $res->output, $saved_cert_output, "Same output as new syntax" );
 125
 126         $res = NPTest->testCmd( "./$plugin -H $host_tls_http -C 1" );
 127         is( $res->return_code, 0, "Updated syntax for cert checking okay" );
 128         is( $res->output, $saved_cert_output, "Same output as new syntax" );
 129
 130         $res = NPTest->testCmd( "./$plugin -C 1 $host_tls_http" );
 131         cmp_ok( $res->output, 'eq', $saved_cert_output, "--ssl option automatically added");
 132
 133         $res = NPTest->testCmd( "./$plugin $host_tls_http -C 1" );
 134         cmp_ok( $res->output, 'eq', $saved_cert_output, "Old syntax for cert checking still works");
 135
 136         # run some certificate checks with faketime
 137         SKIP: {
 138                 skip "No faketime binary found", 7 if !$faketime;
 139                 $res = NPTest->testCmd("LC_TIME=C TZ=UTC ./$plugin -C 1 $host_tls_http");
 140                 like($res->output, qr/OK - Certificate '$host_tls_cert' will expire on/, "Catch cert output");
 141                 is( $res->return_code, 0, "Catch cert output exit code" );
 142                 my($mon,$day,$hour,$min,$sec,$year) = ($res->output =~ /(\w+)\s+(\d+)\s+(\d+):(\d+):(\d+)\s+(\d+)/);
 143                 if(!defined $year) {
 144                     die("parsing date failed from: ".$res->output);
 145                 }
 146                 my $months = {'Jan' => 0, 'Feb' => 1, 'Mar' => 2, 'Apr' => 3, 'May' => 4, 'Jun' => 5, 'Jul' => 6, 'Aug' => 7, 'Sep' => 8, 'Oct' => 9, 'Nov' => 10, 'Dec' => 11};
 147                 my $ts   = mktime($sec, $min, $hour, $day, $months->{$mon}, $year-1900);
 148                 my $time = strftime("%Y-%m-%d %H:%M:%S", localtime($ts));
 149                 $res = NPTest->testCmd("LC_TIME=C TZ=UTC faketime -f '".strftime("%Y-%m-%d %H:%M:%S", localtime($ts))."' ./$plugin -C 1 $host_tls_http");
 150                 like($res->output, qr/CRITICAL - Certificate '$host_tls_cert' just expired/, "Output on expire date");
 151
 152                 $res = NPTest->testCmd("LC_TIME=C TZ=UTC faketime -f '".strftime("%Y-%m-%d %H:%M:%S", localtime($ts-1))."' ./$plugin -C 1 $host_tls_http");
 153                 like($res->output, qr/CRITICAL - Certificate '$host_tls_cert' expires in 0 minutes/, "cert expires in 1 second output");
 154
 155                 $res = NPTest->testCmd("LC_TIME=C TZ=UTC faketime -f '".strftime("%Y-%m-%d %H:%M:%S", localtime($ts-120))."' ./$plugin -C 1 $host_tls_http");
 156                 like($res->output, qr/CRITICAL - Certificate '$host_tls_cert' expires in 2 minutes/, "cert expires in 2 minutes output");
 157
 158                 $res = NPTest->testCmd("LC_TIME=C TZ=UTC faketime -f '".strftime("%Y-%m-%d %H:%M:%S", localtime($ts-7200))."' ./$plugin -C 1 $host_tls_http");
 159                 like($res->output, qr/CRITICAL - Certificate '$host_tls_cert' expires in 2 hours/, "cert expires in 2 hours output");
 160
 161                 $res = NPTest->testCmd("LC_TIME=C TZ=UTC faketime -f '".strftime("%Y-%m-%d %H:%M:%S", localtime($ts+1))."' ./$plugin -C 1 $host_tls_http");
 162                 like($res->output, qr/CRITICAL - Certificate '$host_tls_cert' expired on/, "Certificate expired output");
 163         };
 164
 165         $res = NPTest->testCmd( "./$plugin --ssl $host_tls_http -E" );
 166         like  ( $res->output, '/time_connect=[\d\.]+/', 'Extended Performance Data Output OK' );
 167         like  ( $res->output, '/time_ssl=[\d\.]+/', 'Extended Performance Data SSL Output OK' );
 168
 169         $res = NPTest->testCmd( "./$plugin -H monitoring-plugins.org -u /download.html -f follow" );
 170         is( $res->return_code, 0, "Redirection based on location is okay");
 171
 172         $res = NPTest->testCmd( "./$plugin -H monitoring-plugins.org --extended-perfdata" );
 173         like  ( $res->output, '/time_connect=[\d\.]+/', 'Extended Performance Data Output OK' );
 174 }
 175
 176 SKIP: {
 177         skip "No internet access or proxy configured", 6 if $internet_access eq "no" or ! $host_tcp_proxy;
 178
 179         $res = NPTest->testCmd( "./$plugin -I $host_tcp_proxy -p $port_tcp_proxy -u http://$host_tcp_http -e 200,301,302");
 180         is( $res->return_code, 0, "Proxy HTTP works");
 181         like($res->output, qr/OK: Status line output matched/, "Proxy HTTP Output is sufficient");
 182
 183         $res = NPTest->testCmd( "./$plugin -I $host_tcp_proxy -p $port_tcp_proxy -H $host_tls_http -S -j CONNECT");
 184         is( $res->return_code, 0, "Proxy HTTP CONNECT works");
 185         like($res->output, qr/HTTP OK:/, "Proxy HTTP CONNECT output sufficient");
 186
 187         $res = NPTest->testCmd( "./$plugin -I $host_tcp_proxy -p $port_tcp_proxy -H $host_tls_http -S -j CONNECT:HEAD");
 188         is( $res->return_code, 0, "Proxy HTTP CONNECT works with override method");
 189         like($res->output, qr/HTTP OK:/, "Proxy HTTP CONNECT output sufficient");
 190 }