etcdserver: Added configuration flag --peer-skip-client-verify=true

This commit is contained in:
Martin Weindel
2019-03-05 14:23:41 +01:00
committed by Sam Batschelet
parent a2a8887c33
commit 1b048c91ec
2 changed files with 5 additions and 0 deletions

View File

@@ -56,6 +56,9 @@ func wrapTLS(scheme string, tlsinfo *TLSInfo, l net.Listener) (net.Listener, err
if scheme != "https" && scheme != "unixs" {
return l, nil
}
if tlsinfo != nil && tlsinfo.SkipClientVerify {
return NewTLSListener(l, tlsinfo)
}
return newTLSListener(l, tlsinfo, checkSAN)
}
@@ -66,6 +69,7 @@ type TLSInfo struct {
ClientCertAuth bool
CRLFile string
InsecureSkipVerify bool
SkipClientVerify bool
// ServerName ensures the cert matches the given host in case of discovery / virtual hosting
ServerName string