fix server tls config (#404)

openyurtio · Aug 9, 2021 · 16eb5e9 · 16eb5e9
1 parent f19e663
commit 16eb5e9
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/pkg/yurttunnel/pki/pki.go b/pkg/yurttunnel/pki/pki.go
@@ -39,8 +39,8 @@ func GenTLSConfigUseCertMgrAndCertPool(
 		// Can't use TLSv1.0 because of POODLE and BEAST using CBC cipher
 		// Can't use TLSv1.1 because of RC4 cipher usage
 		MinVersion: tls.VersionTLS12,
-		RootCAs:    root,
-		ClientAuth: tls.RequireAnyClientCert,
+		ClientCAs:  root,
+		ClientAuth: tls.VerifyClientCertIfGiven,
 	}
 
 	tlsConfig.GetClientCertificate =