Use default CAs if neither cert or cert path is provided

trinodb · Jun 2, 2023 · 7593b22 · 7593b22
1 parent 0969a6c
commit 7593b22
Showing 1 changed file with 10 additions and 8 deletions.
diff --git a/trino/trino.go b/trino/trino.go
@@ -324,15 +324,17 @@ func newConn(dsn string) (*Conn, error) {
 			}
 		}
 
-		certPool := x509.NewCertPool()
-		certPool.AppendCertsFromPEM(cert)
-
-		httpClient = &http.Client{
-			Transport: &http.Transport{
-				TLSClientConfig: &tls.Config{
-					RootCAs: certPool,
+		if len(cert) != 0 {
+			certPool := x509.NewCertPool()
+			certPool.AppendCertsFromPEM(cert)
+
+			httpClient = &http.Client{
+				Transport: &http.Transport{
+					TLSClientConfig: &tls.Config{
+						RootCAs: certPool,
+					},
 				},
-			},
+			}
 		}
 	}