mirror of
				https://github.com/coredns/coredns.git
				synced 2025-10-31 02:03:20 -04:00 
			
		
		
		
	pkg/tls: remove InsecureSkipVerify=true flag (#4265)
CWE-295 code scanning alert flag this. Seems OK to just remove it. Signed-off-by: Miek Gieben <miek@miek.nl>
This commit is contained in:
		| @@ -108,11 +108,6 @@ func loadRoots(caPath string) (*x509.CertPool, error) { | ||||
|  | ||||
| // NewHTTPSTransport returns an HTTP transport configured using tls.Config | ||||
| func NewHTTPSTransport(cc *tls.Config) *http.Transport { | ||||
| 	// this seems like a bad idea but was here in the previous version | ||||
| 	if cc != nil { | ||||
| 		cc.InsecureSkipVerify = true | ||||
| 	} | ||||
|  | ||||
| 	tr := &http.Transport{ | ||||
| 		Proxy: http.ProxyFromEnvironment, | ||||
| 		Dial: (&net.Dialer{ | ||||
|   | ||||
		Reference in New Issue
	
	Block a user