search

QubitProducts / exporter_exporter

A reverse proxy designed for Prometheus exporters
Apache License 2.0
336 stars 55 forks source link

Make -web.tls.ca optional when using TLS without client verification #14

Closed tom-mi closed 5 years ago

tom-mi commented 6 years ago

When using TLS without client verification, the parameter -web.tls.ca is not required (as far as I understand). However, it is required to pass a (valid?) CA path, otherwise startup fails with

main.go:168] Could not open ca file,, open : no such file or directory

Current workaround is to pass some dummy CA. It should be possible to load the CA only when -web.tls.verify is set.