Add --insecure flag (#7)

CHANGELOG.md

@@ -4,6 +4,10 @@ This project adheres to [Semantic Versioning](http://semver.org/).
 
 ## [Unreleased]
 
+## [0.2.0]
+
+- Added `--insecure` to disable TLS verification for the TLS and webhook outputs.
+
 ## [0.1.0]
 
 ### Added
@@ -18,6 +22,7 @@ This project adheres to [Semantic Versioning](http://semver.org/).
 - Added pcap and log file inputs.
 - Added udp, tcp, and tls outputs.
 
-[Unreleased]: https://github.com/andrewkroh/stream/compare/v0.1.0...HEAD
+[Unreleased]: https://github.com/andrewkroh/stream/compare/v0.2.0...HEAD
+[0.2.0]: https://github.com/andrewkroh/stream/releases/tag/v0.2.0
 [0.1.0]: https://github.com/andrewkroh/stream/releases/tag/v0.1.0
 [0.0.1]: https://github.com/andrewkroh/stream/releases/tag/v0.0.1

command/root.go

@@ -56,6 +56,7 @@ func ExecuteContext(ctx context.Context) error {
 	rootCmd.PersistentFlags().StringVarP(&opts.Protocol, "protocol", "p", "tcp", "protocol ("+strings.Join(output.Available(), "/")+")")
 	rootCmd.PersistentFlags().IntVar(&opts.Retries, "retry", 10, "connection retry attempts for tcp based protocols")
 	rootCmd.PersistentFlags().StringVarP(&opts.StartSignal, "start-signal", "s", "", "wait for start signal")
+	rootCmd.PersistentFlags().BoolVar(&opts.InsecureTLS, "insecure", false, "disable tls verification")
 
 	// Webhook output flags.
 	rootCmd.PersistentFlags().StringVar(&opts.WebhookOptions.ContentType, "webhook-content-type", "application/json", "webhook Content-Type")

pkg/output/options.go

@@ -12,6 +12,7 @@ type Options struct {
 	Protocol    string        // Protocol (udp/tcp/tls).
 	Retries     int           // Number of connection retries for tcp based protocols.
 	StartSignal string        // OS signal to wait on before starting.
+	InsecureTLS bool          // Disable TLS verification checks.
 
 	WebhookOptions
 }

pkg/output/tls/tls.go

@@ -29,7 +29,7 @@ func New(opts *output.Options) (output.Output, error) {
 func (o *Output) DialContext(ctx context.Context) error {
 	d := tls.Dialer{
 		Config: &tls.Config{
-			InsecureSkipVerify: true,
+			InsecureSkipVerify: o.opts.InsecureTLS,
 		},
 		NetDialer: &net.Dialer{Timeout: time.Second},
 	}

pkg/output/webhook/webhook.go

@@ -7,6 +7,7 @@ package webhook
 import (
 	"bytes"
 	"context"
+	"crypto/tls"
 	"fmt"
 	"net/http"
 	"net/url"
@@ -32,6 +33,11 @@ func New(opts *output.Options) (output.Output, error) {
 
 	client := &http.Client{
 		Timeout: time.Second,
+		Transport: &http.Transport{
+			TLSClientConfig: &tls.Config{
+				InsecureSkipVerify: opts.InsecureTLS,
+			},
+		},
 	}
 
 	return &Output{opts: opts, client: client}, nil