From 87f8fb22b6efd23a98c8bebf157e98a19bab33cc Mon Sep 17 00:00:00 2001
From: Yaroslav Rosomakho <yaroslavros@gmail.com>
Date: Thu, 23 Apr 2020 18:11:31 -0400
Subject: [PATCH] make websockets respect ssl-insecure-skip-verify setting

---
 oauthproxy.go | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/oauthproxy.go b/oauthproxy.go
index aa6487554..54407a439 100644
--- a/oauthproxy.go
+++ b/oauthproxy.go
@@ -1,6 +1,7 @@
 package main
 
 import (
+	"crypto/tls"
 	b64 "encoding/base64"
 	"errors"
 	"fmt"
@@ -139,6 +140,9 @@ func NewWebSocketOrRestReverseProxy(u *url.URL, opts *Options, auth hmacauth.Hma
 		wsScheme := "ws" + strings.TrimPrefix(u.Scheme, "http")
 		wsURL := &url.URL{Scheme: wsScheme, Host: u.Host}
 		wsProxy = wsutil.NewSingleHostReverseProxy(wsURL)
+		if opts.SSLInsecureSkipVerify {
+			wsProxy.TLSClientConfig = &tls.Config{InsecureSkipVerify: true}
+		}
 	}
 	return &UpstreamProxy{u.Host, proxy, wsProxy, auth}
 }