how to add PKI certificate to a request

[jschwinger233]

for client cert and trusted ca cert
thx

[imroc]

req uses http.Client, you can customize the client, for example:

package main

import (
	"crypto/tls"
	"crypto/x509"
	"github.com/imroc/req"
	"io/ioutil"
	"log"
	"net/http"
)

const (
	localCertFile = "/usr/local/internal-ca/ca.crt"
)

func main() {
	// Get the SystemCertPool, continue with an empty pool on error
	rootCAs, _ := x509.SystemCertPool()
	if rootCAs == nil {
		rootCAs = x509.NewCertPool()
	}

	// Read in the cert file
	certs, err := ioutil.ReadFile(localCertFile)
	if err != nil {
		log.Fatalf("Failed to append %q to RootCAs: %v", localCertFile, err)
	}

	// Append our cert to the system pool
	if ok := rootCAs.AppendCertsFromPEM(certs); !ok {
		log.Println("No certs appended, using system certs only")
	}

	// Trust the augmented cert pool in our client
	config := &tls.Config{
		InsecureSkipVerify: false,
		RootCAs:            rootCAs,
	}
	tr := &http.Transport{TLSClientConfig: config}
	client := &http.Client{Transport: tr}

	req.SetClient(client)

}

[jschwinger233]

thx && understood, but given kennethreitz/requests can handle certs conveniently, shall we make the analogical APIs available?

[imroc]

sounds great, I'll consider this

[imroc]

v2 support this, try and enjoy :)