Don't set VerifyPeerCertificate function on TLS config if authenticat…

…ion is disabled.
openshift-bot · Apr 18, 2019 · cdd6b79 · cdd6b79
1 parent 95a1265
commit cdd6b79
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/main.go b/main.go
@@ -442,9 +442,10 @@ func serverListen(context *Context) error {
 	}
 
 	config.GetCertificate = context.cert.GetCertificate
-	config.VerifyPeerCertificate = serverACL.VerifyPeerCertificateServer
 	if *serverDisableAuth {
 		config.ClientAuth = tls.NoClientCert
+	} else {
+		config.VerifyPeerCertificate = serverACL.VerifyPeerCertificateServer
 	}
 
 	listener, err := reuseport.NewReusablePortListener("tcp", (*serverListenAddress).String())