Merge pull request #758 from TrekkieCoder/main

gh-726 Use default system certs if availabe for https probe
loxilb-io · Aug 13, 2024 · dc7047d · dc7047d
2 parents 211fa04 + 61a88f3
commit dc7047d
Show file tree

Hide file tree

Showing 2 changed files with 7 additions and 2 deletions.
diff --git a/loxilb-ebpf b/loxilb-ebpf
diff --git a/pkg/loxinet/rules.go b/pkg/loxinet/rules.go
@@ -366,7 +366,12 @@ func RulesInit(zone *Zone) *RuleH {
 		nRh.epCs[i].hChk = time.NewTicker(EndPointCheckerDuration * time.Second)
 		go epTicker(nRh, i)
 	}
-	nRh.rootCAPool = x509.NewCertPool()
+	rootCAPool, err := x509.SystemCertPool()
+	if err == nil {
+		nRh.rootCAPool = rootCAPool
+	} else {
+		nRh.rootCAPool = x509.NewCertPool()
+	}
 	rootCACertile := cmn.CertPath + cmn.CACertFileName
 
 	// Check if there exist a common CA certificate