mirror of
https://github.com/coredns/coredns.git
synced 2025-10-27 08:14:18 -04:00
pkg/tls: remove InsecureSkipVerify=true flag (#4265)
CWE-295 code scanning alert flag this. Seems OK to just remove it. Signed-off-by: Miek Gieben <miek@miek.nl>
This commit is contained in:
@@ -108,11 +108,6 @@ func loadRoots(caPath string) (*x509.CertPool, error) {
|
||||
|
||||
// NewHTTPSTransport returns an HTTP transport configured using tls.Config
|
||||
func NewHTTPSTransport(cc *tls.Config) *http.Transport {
|
||||
// this seems like a bad idea but was here in the previous version
|
||||
if cc != nil {
|
||||
cc.InsecureSkipVerify = true
|
||||
}
|
||||
|
||||
tr := &http.Transport{
|
||||
Proxy: http.ProxyFromEnvironment,
|
||||
Dial: (&net.Dialer{
|
||||
|
||||
Reference in New Issue
Block a user