From 9fb46c3c552d82d926c581c6b6fc4b01617a7cb3 Mon Sep 17 00:00:00 2001 From: Matthias Loibl Date: Mon, 3 Dec 2018 19:47:37 +0100 Subject: [PATCH] Create a NewCertPool for custom CA certificate --- cmd/adapter/adapter.go | 6 ++---- 1 file changed, 2 insertions(+), 4 deletions(-) diff --git a/cmd/adapter/adapter.go b/cmd/adapter/adapter.go index 95985b97..7fa37858 100644 --- a/cmd/adapter/adapter.go +++ b/cmd/adapter/adapter.go @@ -272,14 +272,12 @@ func makeKubeconfigHTTPClient(inClusterAuth bool, kubeConfigPath string) (*http. } func makePrometheusCAClient(caFilename string) (*http.Client, error) { - pool, err := x509.SystemCertPool() - if err != nil { - return nil, fmt.Errorf("failed to read system certificates: %v", err) - } data, err := ioutil.ReadFile(caFilename) if err != nil { return nil, fmt.Errorf("failed to read prometheus-ca-file: %v", err) } + + pool := x509.NewCertPool() if !pool.AppendCertsFromPEM(data) { return nil, fmt.Errorf("no certs found in prometheus-ca-file") }