Add skip TLS verification option (#6)

Author: liamg

Gopkg.lock

@@ -20,9 +20,10 @@ You can specify credentials and your AlienVault fully-qualified domain name in t
 
 ```hcl
 provider "alienvault" {
-    fqdn     = "mycompany.alienvault.cloud"
-    username = "user@email.com"
-    password = "..."
+    fqdn            = "mycompany.alienvault.cloud"
+    username        = "user@email.com"
+    password        = "..."
+    skip_tls_verify = false
 }
 ```
 

README.md

@@ -1,22 +1,24 @@
 package alienvault
 
 import (
-	"github.com/form3tech-oss/alienvault"
-	"github.com/hashicorp/terraform/helper/schema"
+    "github.com/form3tech-oss/alienvault"
+    "github.com/hashicorp/terraform/helper/schema"
 )
 
 func providerConfigure(d *schema.ResourceData) (interface{}, error) {
 
-	client := alienvault.New(
-		d.Get("fqdn").(string),
-		alienvault.Credentials{
-			Username: d.Get("username").(string),
-			Password: d.Get("password").(string),
-		})
+    client := alienvault.New(
+        d.Get("fqdn").(string),
+        alienvault.Credentials{
+            Username: d.Get("username").(string),
+            Password: d.Get("password").(string),
+        },
+        d.Get("skip_tls_verify").(bool),
+    )
 
-	if err := client.Authenticate(); err != nil {
-		return nil, err
-	}
+    if err := client.Authenticate(); err != nil {
+        return nil, err
+    }
 
-	return client, nil
+    return client, nil
 }

alienvault/configure.go

@@ -31,11 +31,15 @@ func TestProviderConfigure(t *testing.T) {
 		"password": &schema.Schema{
 			Type: schema.TypeString,
 		},
+		"skip_tls_verify": &schema.Schema{
+			Type: schema.TypeBool,
+		},
 	}
 	resourceDataMap := map[string]interface{}{
 		"fqdn":     strings.Replace(ts.URL, "https://", "", -1),
 		"username": "something",
 		"password": "something",
+		"skip_tls_verify": "false",
 	}
 	resourceLocalData := schema.TestResourceDataRaw(t, resourceSchema, resourceDataMap)
 

alienvault/configure_test.go

@@ -1,40 +1,52 @@
 package alienvault
 
 import (
-	"github.com/hashicorp/terraform/helper/schema"
+    "github.com/hashicorp/terraform/helper/schema"
+    "os"
 )
 
 // Provider makes the AlienVault provider available
 func Provider() *schema.Provider {
-	return &schema.Provider{
-		Schema: map[string]*schema.Schema{
-			"fqdn": &schema.Schema{
-				Type:        schema.TypeString,
-				Required:    true,
-				Description: "The fully qualified domain name for your AlienVault instance e.g. example.alienvault.cloud",
-				DefaultFunc: schema.EnvDefaultFunc("ALIENVAULT_FQDN", nil),
-				Sensitive:   true,
-			},
-			"username": &schema.Schema{
-				Type:        schema.TypeString,
-				Required:    true,
-				Description: "AV username",
-				DefaultFunc: schema.EnvDefaultFunc("ALIENVAULT_USERNAME", nil),
-				Sensitive:   true,
-			},
-			"password": &schema.Schema{
-				Type:        schema.TypeString,
-				Required:    true,
-				Description: "AV password",
-				DefaultFunc: schema.EnvDefaultFunc("ALIENVAULT_PASSWORD", nil),
-				Sensitive:   true,
-			},
-		},
-		ResourcesMap: map[string]*schema.Resource{
-			"alienvault_job_aws_bucket":     resourceJobAWSBucket(),
-			"alienvault_job_aws_cloudwatch": resourceJobAWSCloudWatch(),
-			"alienvault_sensor":             resourceSensor(),
-		},
-		ConfigureFunc: providerConfigure,
-	}
+    return &schema.Provider{
+        Schema: map[string]*schema.Schema{
+            "fqdn": &schema.Schema{
+                Type:        schema.TypeString,
+                Required:    true,
+                Description: "The fully qualified domain name for your AlienVault instance e.g. example.alienvault.cloud",
+                DefaultFunc: schema.EnvDefaultFunc("ALIENVAULT_FQDN", nil),
+                Sensitive:   true,
+            },
+            "username": &schema.Schema{
+                Type:        schema.TypeString,
+                Required:    true,
+                Description: "AV username",
+                DefaultFunc: schema.EnvDefaultFunc("ALIENVAULT_USERNAME", nil),
+                Sensitive:   true,
+            },
+            "password": &schema.Schema{
+                Type:        schema.TypeString,
+                Required:    true,
+                Description: "AV password",
+                DefaultFunc: schema.EnvDefaultFunc("ALIENVAULT_PASSWORD", nil),
+                Sensitive:   true,
+            },
+            "skip_tls_verify": &schema.Schema{
+                Type:        schema.TypeBool,
+                Optional:    true,
+                Description: "Skip TLS certificate verification",
+                DefaultFunc: func() (interface{}, error) {
+                    if v := os.Getenv("ALIENVAULT_SKIP_TLS_VERIFY"); v != "" {
+                        return v == "true" || v == "1", nil
+                    }
+                    return false, nil
+                },
+            },
+        },
+        ResourcesMap: map[string]*schema.Resource{
+            "alienvault_job_aws_bucket":     resourceJobAWSBucket(),
+            "alienvault_job_aws_cloudwatch": resourceJobAWSCloudWatch(),
+            "alienvault_sensor":             resourceSensor(),
+        },
+        ConfigureFunc: providerConfigure,
+    }
 }

alienvault/provider.go

@@ -33,6 +33,7 @@ func testAccPreCheck(t *testing.T) {
 }
 
 func init() {
+	_ = os.Setenv("ALIENVAULT_SKIP_TLS_VERIFY", "1")
 	testAccProvider = Provider()
 	testAccProviders = map[string]terraform.ResourceProvider{
 		"alienvault": testAccProvider,