Cgboal/SonarSearch

Allow insecure communication on crobat client

dinosn opened this issue · 1 comments

Hello,

It will be nice to be able to specify an additional certificate to be used over environments that are passing through interception. This will either require an insecure method to be specified or an explicit load of the root.pem file of the CA in the middle.

The current error is:

2021/07/17 22:51:52 No certs appended, using system certs only
INFO: 2021/07/17 22:51:52 [core] parsed scheme: ""
INFO: 2021/07/17 22:51:52 [core] scheme "" not registered, fallback to default scheme
INFO: 2021/07/17 22:51:52 [core] ccResolverWrapper: sending update to cc: {[{crobat-rpc.omnisint.io:443  <nil> 0 <nil>}] <nil> <nil>}
INFO: 2021/07/17 22:51:52 [core] ClientConn switching balancer to "pick_first"
INFO: 2021/07/17 22:51:52 [core] Channel switches to new LB policy "pick_first"
INFO: 2021/07/17 22:51:52 [core] Subchannel Connectivity change to CONNECTING
INFO: 2021/07/17 22:51:52 [core] blockingPicker: the picked transport is not ready, loop back to repick
INFO: 2021/07/17 22:51:52 [core] pickfirstBalancer: UpdateSubConnState: 0xc000317600, {CONNECTING <nil>}
INFO: 2021/07/17 22:51:52 [core] Channel Connectivity change to CONNECTING
INFO: 2021/07/17 22:51:52 [core] Subchannel picks a new address "crobat-rpc.omnisint.io:443" to connect
INFO: 2021/07/17 22:51:52 [transport] transport: loopyWriter.run returning. connection error: desc = "transport is closing"
INFO: 2021/07/17 22:51:52 [core] Subchannel Connectivity change to TRANSIENT_FAILURE
INFO: 2021/07/17 22:51:52 [core] pickfirstBalancer: UpdateSubConnState: 0xc000317600, {TRANSIENT_FAILURE connection closed}
INFO: 2021/07/17 22:51:52 [core] Channel Connectivity change to TRANSIENT_FAILURE
2021/07/17 22:51:52 rpc error: code = Unavailable desc = connection closed

Thank you,
Nicolas

That's annoying, I will look into this for version 2.