mirror of
https://github.com/coredns/coredns.git
synced 2025-10-28 00:34:24 -04:00
pkg/tls: remove InsecureSkipVerify=true flag (#4265)
CWE-295 code scanning alert flag this. Seems OK to just remove it. Signed-off-by: Miek Gieben <miek@miek.nl>
This commit is contained in:
@@ -108,11 +108,6 @@ func loadRoots(caPath string) (*x509.CertPool, error) {
|
|||||||
|
|
||||||
// NewHTTPSTransport returns an HTTP transport configured using tls.Config
|
// NewHTTPSTransport returns an HTTP transport configured using tls.Config
|
||||||
func NewHTTPSTransport(cc *tls.Config) *http.Transport {
|
func NewHTTPSTransport(cc *tls.Config) *http.Transport {
|
||||||
// this seems like a bad idea but was here in the previous version
|
|
||||||
if cc != nil {
|
|
||||||
cc.InsecureSkipVerify = true
|
|
||||||
}
|
|
||||||
|
|
||||||
tr := &http.Transport{
|
tr := &http.Transport{
|
||||||
Proxy: http.ProxyFromEnvironment,
|
Proxy: http.ProxyFromEnvironment,
|
||||||
Dial: (&net.Dialer{
|
Dial: (&net.Dialer{
|
||||||
|
|||||||
Reference in New Issue
Block a user