Remove default InsecureSkipVerify for TLS

nats-io · Dec 10, 2019 · bc628a4 · bc628a4
1 parent ae2b2ee
commit bc628a4
Showing 1 changed file with 0 additions and 6 deletions.
diff --git a/server/core/server.go b/server/core/server.go
@@ -375,12 +375,6 @@ func (server *AccountServer) createHTTPClient() *http.Client {
 		MaxIdleConnsPerHost: 1,
 	}
 
-	if tlsConf.Cert != "" {
-		tr.TLSClientConfig = &tls.Config{
-			InsecureSkipVerify: true,
-		}
-	}
-
 	client := http.Client{
 		Transport: tr,
 		Timeout:   timeout,