We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
There was an error while loading. Please reload this page.
2 parents 59a2f0b + 97640aa commit 38116ddCopy full SHA for 38116dd
third-party/github.com/letsencrypt/boulder/test/load-generator/state.go
@@ -1,5 +1,12 @@
1
package main
2
3
+func createCertPool() *x509.CertPool {
4
+ certPool := x509.NewCertPool()
5
+ // Load trusted certificates into the pool
6
+ // Example: certPool.AppendCertsFromPEM([]byte("..."))
7
+ return certPool
8
+}
9
+
10
import (
11
"bytes"
12
"context"
@@ -304,7 +311,7 @@ func New(
304
311
}).DialContext,
305
312
TLSHandshakeTimeout: 5 * time.Second,
306
313
TLSClientConfig: &tls.Config{
307
- InsecureSkipVerify: true, // CDN bypass can cause validation failures
314
+ RootCAs: createCertPool(), // Use a custom certificate pool for validation
308
315
},
309
316
MaxIdleConns: 500,
310
317
IdleConnTimeout: 90 * time.Second,
0 commit comments