fix: prevent TLSSkipVerify to be overwritten

joereuss12 · Oct 13, 2023 · c816ca2 · c816ca2
1 parent 8a87a1f
commit c816ca2
Showing 1 changed file with 6 additions and 1 deletion.
diff --git a/config/config.go b/config/config.go
@@ -276,7 +276,12 @@ func setupTransport() {
 		systemPool, err := x509.SystemCertPool()
 		if err == nil {
 			systemPool.AddCert(caCert)
-			transport.TLSClientConfig = &tls.Config{RootCAs: systemPool}
+			// Ensure that we don't override the InsecureSkipVerify if it's present
+			if transport.TLSClientConfig == nil {
+				transport.TLSClientConfig = &tls.Config{RootCAs: systemPool}
+			} else {
+				transport.TLSClientConfig.RootCAs = systemPool
+			}
 		}
 	}
 }