From f78bf9f21d436b881a507c43d62f8c6ac49dc068 Mon Sep 17 00:00:00 2001 From: Brian Downs Date: Tue, 28 Sep 2021 10:13:50 -0700 Subject: [PATCH] set transport to skip verify if se skip flag passed (#4102) Signed-off-by: Brian Downs --- pkg/etcd/s3.go | 8 +++++++- 1 file changed, 7 insertions(+), 1 deletion(-) diff --git a/pkg/etcd/s3.go b/pkg/etcd/s3.go index 7662e1766a77..ff89d3246411 100644 --- a/pkg/etcd/s3.go +++ b/pkg/etcd/s3.go @@ -36,12 +36,18 @@ type S3 struct { // a new Minio client. func NewS3(ctx context.Context, config *config.Control) (*S3, error) { tr := http.DefaultTransport - if config.EtcdS3EndpointCA != "" { + + switch { + case config.EtcdS3EndpointCA != "": trCA, err := setTransportCA(tr, config.EtcdS3EndpointCA, config.EtcdS3SkipSSLVerify) if err != nil { return nil, err } tr = trCA + case config.EtcdS3 && config.EtcdS3SkipSSLVerify: + tr.(*http.Transport).TLSClientConfig = &tls.Config{ + InsecureSkipVerify: config.EtcdS3SkipSSLVerify, + } } var creds *credentials.Credentials