mirror of
https://github.com/netbirdio/netbird.git
synced 2025-03-04 01:41:17 +01:00
27 lines
630 B
Go
27 lines
630 B
Go
//go:build devcert
|
|
|
|
package tls
|
|
|
|
import (
|
|
"crypto/tls"
|
|
"crypto/x509"
|
|
|
|
log "github.com/sirupsen/logrus"
|
|
|
|
"github.com/netbirdio/netbird/util/embeddedroots"
|
|
)
|
|
|
|
func ClientQUICTLSConfig() *tls.Config {
|
|
certPool, err := x509.SystemCertPool()
|
|
if err != nil || certPool == nil {
|
|
log.Debugf("System cert pool not available; falling back to embedded cert, error: %v", err)
|
|
certPool = embeddedroots.Get()
|
|
}
|
|
|
|
return &tls.Config{
|
|
InsecureSkipVerify: true, // Debug mode allows insecure connections
|
|
NextProtos: []string{nbalpn}, // Ensure this matches the server's ALPN
|
|
RootCAs: certPool,
|
|
}
|
|
}
|