Function httpsClient

credhub/client.go:41–67

(insecureSkipVerify bool, rootCAs *x509.CertPool, cert *tls.Certificate, timeout *time.Duration)

}

func httpsClient(insecureSkipVerify bool, rootCAs *x509.CertPool, cert *tls.Certificate, timeout *time.Duration) *http.Client {
	client := httpClient(timeout)
	var certs []tls.Certificate
	if cert != nil {
		certs = []tls.Certificate{*cert}
	}

	var dialer = SOCKS5DialFuncFromEnvironment((&net.Dialer{
		Timeout:   30 * time.Second,
		KeepAlive: 30 * time.Second,
	}).Dial, proxy.NewSocks5Proxy(proxy.NewHostKey(), nil, 30*time.Second))

	client.Transport = &http.Transport{
		TLSClientConfig: &tls.Config{
			InsecureSkipVerify:       insecureSkipVerify,
			PreferServerCipherSuites: true,
			Certificates:             certs,
			RootCAs:                  rootCAs,
			MinVersion:               tls.VersionTLS12,
		},
		Proxy:               http.ProxyFromEnvironment,
		Dial:                dialer,
		MaxIdleConnsPerHost: 100,
	}

	return client
}