mirror of
https://github.com/etcd-io/etcd.git
synced 2024-09-27 06:25:44 +00:00
Merge pull request #87 from philips/remove-insecureskipverify
fix(etcd): remove insecureskipverify
This commit is contained in:
commit
fb93103d33
4
etcd.go
4
etcd.go
@ -481,8 +481,10 @@ func tlsConfigFromInfo(info TLSInfo) (t TLSConfig, ok bool) {
|
|||||||
t.Scheme = "https"
|
t.Scheme = "https"
|
||||||
t.Server.ClientAuth, t.Server.ClientCAs = newCertPool(CAFile)
|
t.Server.ClientAuth, t.Server.ClientCAs = newCertPool(CAFile)
|
||||||
|
|
||||||
|
// The client should trust the RootCA that the Server uses since
|
||||||
|
// everyone is a peer in the network.
|
||||||
t.Client.Certificates = []tls.Certificate{tlsCert}
|
t.Client.Certificates = []tls.Certificate{tlsCert}
|
||||||
t.Client.InsecureSkipVerify = true
|
t.Client.RootCAs = t.Server.ClientCAs
|
||||||
|
|
||||||
return t, true
|
return t, true
|
||||||
}
|
}
|
||||||
|
Loading…
x
Reference in New Issue
Block a user