fix(http): do not skip checking TLS certificate

Signed-off-by: Felipe Zipitria <[email protected]>
coreruleset · Apr 17, 2021 · 19520c7 · 19520c7
1 parent 2e99290
commit 19520c7
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/http/connection.go b/http/connection.go
@@ -28,7 +28,8 @@ func NewConnection(d Destination) (*Connection, error) {
 	// Fatal error: dial tcp 127.0.0.1:80: connect: connection refused
 	// strings.HasSuffix(err.String(), "connection refused") {
 	if strings.ToLower(d.Protocol) == "https" {
-		tlsConn, err = tls.Dial("tcp", hostPort, &tls.Config{InsecureSkipVerify: true})
+		// Commenting InsecureSkipVerify: true.
+		tlsConn, err = tls.Dial("tcp", hostPort, &tls.Config{})
 	} else {
 		netConn, err = net.DialTimeout("tcp", hostPort, timeout)
 	}