From d7240ff9430e31fa950e27fe5aa7a60edc3d99bf Mon Sep 17 00:00:00 2001
From: fibonacci1729 <brian@deis.com>
Date: Fri, 21 Apr 2017 09:34:26 -0600
Subject: [PATCH] fix(tiller): update tls client auth policy
RequireAndVerifyClientCert => VerifyClientCertIfGiven
Closes #2310
---
cmd/tiller/tiller.go | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/cmd/tiller/tiller.go b/cmd/tiller/tiller.go
index 93ac7d1ae..2f193936e 100644
--- a/cmd/tiller/tiller.go
+++ b/cmd/tiller/tiller.go
@@ -221,7 +221,7 @@ func tlsOptions() tlsutil.Options {
opts := tlsutil.Options{CertFile: certFile, KeyFile: keyFile}
if tlsVerify {
opts.CaCertFile = caCertFile
- opts.ClientAuth = tls.RequireAndVerifyClientCert
+ opts.ClientAuth = tls.VerifyClientCertIfGiven
}
return opts
}
--
GitLab