Browse Source

cmd: reverse-proxy: add --insecure flag (with warning) (#3389)

master
linquize 5 years ago
committed by GitHub
parent
commit
44536a7594
No known key found for this signature in database GPG Key ID: 4AEE18F83AFDEB23
  1. 5
      modules/caddyhttp/reverseproxy/command.go

5
modules/caddyhttp/reverseproxy/command.go

@ -59,6 +59,7 @@ default, all incoming headers are passed through unmodified.)
fs.String("from", "localhost", "Address on which to receive traffic") fs.String("from", "localhost", "Address on which to receive traffic")
fs.String("to", "", "Upstream address to which to to proxy traffic") fs.String("to", "", "Upstream address to which to to proxy traffic")
fs.Bool("change-host-header", false, "Set upstream Host header to address of upstream") fs.Bool("change-host-header", false, "Set upstream Host header to address of upstream")
fs.Bool("insecure", false, "Disable TLS verification (WARNING: DISABLES SECURITY, WHY ARE YOU EVEN USING TLS?)")
return fs return fs
}(), }(),
}) })
@ -68,6 +69,7 @@ func cmdReverseProxy(fs caddycmd.Flags) (int, error) {
from := fs.String("from") from := fs.String("from")
to := fs.String("to") to := fs.String("to")
changeHost := fs.Bool("change-host-header") changeHost := fs.Bool("change-host-header")
insecure := fs.Bool("insecure")
httpPort := strconv.Itoa(caddyhttp.DefaultHTTPPort) httpPort := strconv.Itoa(caddyhttp.DefaultHTTPPort)
httpsPort := strconv.Itoa(caddyhttp.DefaultHTTPSPort) httpsPort := strconv.Itoa(caddyhttp.DefaultHTTPSPort)
@ -127,6 +129,9 @@ func cmdReverseProxy(fs caddycmd.Flags) (int, error) {
ht := HTTPTransport{} ht := HTTPTransport{}
if toAddr.Scheme == "https" { if toAddr.Scheme == "https" {
ht.TLS = new(TLSConfig) ht.TLS = new(TLSConfig)
if insecure {
ht.TLS.InsecureSkipVerify = true
}
} }
handler := Handler{ handler := Handler{

Loading…
Cancel
Save