diff options
| -rw-r--r-- | internal/client/gateway/gateway.go | 5 | ||||
| -rw-r--r-- | internal/server/server.go | 2 |
2 files changed, 5 insertions, 2 deletions
diff --git a/internal/client/gateway/gateway.go b/internal/client/gateway/gateway.go index 04513de..99fccf5 100644 --- a/internal/client/gateway/gateway.go +++ b/internal/client/gateway/gateway.go @@ -48,7 +48,10 @@ func init() { RootCAs: certPool, ServerName: config.Read().ServerName, MinVersion: tls.VersionTLS12, - InsecureSkipVerify: config.Read().InsecureSkipServerVerification, + // This is fine, it's always false by default + // The user may change the config, the name should be clear enough + // that this is insecure (valid use cases are for testing purposes) + InsecureSkipVerify: config.Read().InsecureSkipServerVerification, //#nosec 402 } } diff --git a/internal/server/server.go b/internal/server/server.go index e2b2a40..9d52660 100644 --- a/internal/server/server.go +++ b/internal/server/server.go @@ -34,7 +34,7 @@ func init() { if !ok { path = "certs/server.key" } - keyPEM, err := os.ReadFile(path) + keyPEM, err := os.ReadFile(path) //#nosec 304 if err != nil { log.Fatalln("failed to read certificate key from", path) } |