How should we skip ssl verification for self-certification?

[yabuchan]

---

Kind: question
Server: minio
Certificate: self-certificate

Description:
I am trying to access minio server with minio-go, but it fails due to unknown authority.

Get https://object-store:9000/test-bucket/?location=: x509: certificate signed by unknown authority

Is there any way to set something like --skip-ssl-verification like minio client, which has --insecure option for skip ssl verification.

[harshavardhana]

yes - like this

                        // Keep TLS config.
                        tlsConfig := &tls.Config{}
                        if config.Insecure {
                                tlsConfig.InsecureSkipVerify = true
                        }

                        var transport http.RoundTripper = &http.Transport{
                                Proxy: http.ProxyFromEnvironment,
                                DialContext: (&net.Dialer{
                                        Timeout:   30 * time.Second,
                                        KeepAlive: 30 * time.Second,
                                }).DialContext,
                                MaxIdleConns:          100,
                                IdleConnTimeout:       90 * time.Second,
                                TLSHandshakeTimeout:   10 * time.Second,
                                ExpectContinueTimeout: 1 * time.Second,
                                TLSClientConfig:       tlsConfig,
                                // Set this value so that the underlying transport round-tripper
                                // doesn't try to auto decode the body of objects with
                                // content-encoding set to `gzip`.
                                //
                                // Refer:
                                //    https://golang.org/src/net/http/transport.go?h=roundTrip#L1843
                                DisableCompression: true,
                        }

                        // Set custom transport.
                        api.SetCustomTransport(transport)

[yabuchan]

@harshavardhana Thank you for quick response. It worked!

[suhlig]

I came here for the solution (thanks, @harshavardhana), and also found an even shorter way to just skip certificate validation:

api.SetCustomTransport(&http.Transport{TLSClientConfig: &tls.Config{InsecureSkipVerify: true}})