diff --git a/goKMS/config/config.go b/goKMS/config/config.go index aba94318951b43489b40cef1e2eeab89d4fbf39e..c3de91aeb43e28a56fed7074de774b01e842c49b 100644 --- a/goKMS/config/config.go +++ b/goKMS/config/config.go @@ -31,10 +31,11 @@ type Peer struct { } type TLSConfig struct { - Active bool `yaml:"Active"` - CAFile string `yaml:"CAFile"` - CertFile string `yaml:"CertFile"` - KeyFile string `yaml:"KeyFile"` + Active bool `yaml:"Active"` + InsecureSkipVerify bool `yaml:"InsecureSkipVerify"` + CAFile string `yaml:"CAFile"` + CertFile string `yaml:"CertFile"` + KeyFile string `yaml:"KeyFile"` } type QuantumModule struct { diff --git a/goKMS/kms/tls/tls.go b/goKMS/kms/tls/tls.go index 9f3dc73f6cc0c1a94a749df409e878400a0a9404..040b819936df6033ad77f2f9323941eee4faa2aa 100644 --- a/goKMS/kms/tls/tls.go +++ b/goKMS/kms/tls/tls.go @@ -84,8 +84,9 @@ func GenerateTLSLibraryConfig(tlsConfig config.TLSConfig) (*tls.Config, error) { } return &tls.Config{ - MinVersion: tls.VersionTLS13, - RootCAs: cp, - Certificates: []tls.Certificate{cert}, + MinVersion: tls.VersionTLS13, + RootCAs: cp, + Certificates: []tls.Certificate{cert}, + InsecureSkipVerify: tlsConfig.InsecureSkipVerify, }, nil }