allow tls skip verify even if ca_cert is not set

iqlusioninc · Jan 16, 2024 · 7deb16d · 7deb16d
1 parent fef8bf6
commit 7deb16d
Showing 1 changed file with 8 additions and 5 deletions.
diff --git a/src/keyring/providers/hashicorp/client.rs b/src/keyring/providers/hashicorp/client.rs
@@ -143,12 +143,15 @@ impl TendermintValidatorApp {
                 env!("CARGO_PKG_VERSION")
             ));
 
-        if let Some(ca_cert) = ca_cert {
-            let cert_bytes = fs::read(ca_cert).expect("Failed to read cert file");
-            let root_cert = native_tls::Certificate::from_pem(&cert_bytes)
-                .expect("Failed to parse PEM certificate");
+        if ca_cert.is_some() || skip_verify.is_some() {
             let mut builder = native_tls::TlsConnector::builder();
-            builder.add_root_certificate(root_cert);
+
+            if let Some(ca_cert) = ca_cert {
+                let cert_bytes = fs::read(ca_cert).expect("Failed to read cert file");
+                let root_cert = native_tls::Certificate::from_pem(&cert_bytes)
+                    .expect("Failed to parse PEM certificate");
+                builder.add_root_certificate(root_cert);
+            }
 
             if skip_verify.is_some_and(|x| x) {
                 builder.danger_accept_invalid_certs(true);