Merge pull request #47 from ploxiln/insecure_wss

make websockets respect ssl-insecure-skip-verify setting
ploxiln · May 6, 2020 · 9438468 · 9438468
2 parents d92bf82 + 87f8fb2
commit 9438468
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/oauthproxy.go b/oauthproxy.go
@@ -1,6 +1,7 @@
 package main
 
 import (
+	"crypto/tls"
 	b64 "encoding/base64"
 	"errors"
 	"fmt"
@@ -139,6 +140,9 @@ func NewWebSocketOrRestReverseProxy(u *url.URL, opts *Options, auth hmacauth.Hma
 		wsScheme := "ws" + strings.TrimPrefix(u.Scheme, "http")
 		wsURL := &url.URL{Scheme: wsScheme, Host: u.Host}
 		wsProxy = wsutil.NewSingleHostReverseProxy(wsURL)
+		if opts.SSLInsecureSkipVerify {
+			wsProxy.TLSClientConfig = &tls.Config{InsecureSkipVerify: true}
+		}
 	}
 	return &UpstreamProxy{u.Host, proxy, wsProxy, auth}
 }