valyala / fasthttp

Fast HTTP package for Go. Tuned for high performance. Zero memory allocations in hot paths. Up to 10x faster than net/http
MIT License
21.66k stars 1.75k forks source link

fasthttp.GenerateTestCertificate("*") and fasthttp client that says tls.CertificateVerificationError=tls: failed to verify certificate: x509: certificate is valid for *, not example.com #1551

Closed kolinfluence closed 1 year ago

kolinfluence commented 1 year ago

fasthttp.GenerateTestCertificate("") and fasthttp client that says tls.CertificateVerificationError=tls: failed to verify certificate: x509: certificate is valid for , not example.com

i would to have this testcertificate for private intranet so i'm using it as such. (or is there a better alternative that can last 10 years without modification to core code this way? (https://github.com/valyala/fasthttp/issues/1549)

how do i make fasthttp client to accept all certificate "*" or what's the better way to do this? i just want fasthttp client to accept the certificate without returning as error. is this possible?

it's basically being used like this

[fasthttpclient] -> [fasthttp server as reverse proxy with testcert] -> [backend server]

the reverse proxy will have any/all domain names "routed". need to have something like a wildcard for this "testcert" generated or for fasthttp client to have a "insecureverify" config thingy.

kolinfluence commented 1 year ago

found the insecureverify config way.