mirror of https://github.com/minio/minio.git
7ce28c3b1d
This commit fixes an issue in the KES client configuration that can cause the following error when connecting to KES: ``` ERROR Failed to connect to KMS: failed to generate data key with KMS key: tls: client certificate is required ``` The Go TLS stack seems to not send a client certificate if it thinks the client certificate cannot be validated by the peer. In case of an API key, we don't care about this since we use public key pinning and the X.509 certificate is just a transport encoding. The `GetClientCertificate` seems to be honored always such that this error does not occur. Signed-off-by: Andreas Auernhammer <github@aead.dev> |
||
|---|---|---|
| .. | ||
| config.go | ||
| config_test.go | ||
| conn.go | ||
| context.go | ||
| dek_test.go | ||
| errors.go | ||
| kes.go | ||
| kms.go | ||
| secret-key.go | ||
| secret-key_test.go | ||