Merge branch 'kube-rs:main' into fix/resource-not-found

kube-rs · Sep 30, 2022 · b66e0d2 · b66e0d2
2 parents 03e0dbe + dd2364e
commit b66e0d2
Showing 1 changed file with 21 additions and 1 deletion.
diff --git a/kube-client/src/client/tls.rs b/kube-client/src/client/tls.rs
@@ -83,7 +83,8 @@ pub mod rustls_tls {
     use hyper_rustls::ConfigBuilderExt;
     use rustls::{
         self,
-        client::{ServerCertVerified, ServerCertVerifier},
+        client::{HandshakeSignatureValid, ServerCertVerified, ServerCertVerifier},
+        internal::msgs::handshake::DigitallySignedStruct,
         Certificate, ClientConfig, PrivateKey,
     };
     use thiserror::Error;
@@ -194,8 +195,27 @@ pub mod rustls_tls {
             _ocsp_response: &[u8],
             _now: std::time::SystemTime,
         ) -> Result<ServerCertVerified, rustls::Error> {
+            tracing::warn!("Server cert bypassed");
             Ok(ServerCertVerified::assertion())
         }
+
+        fn verify_tls13_signature(
+            &self,
+            _message: &[u8],
+            _cert: &Certificate,
+            _dss: &DigitallySignedStruct,
+        ) -> Result<HandshakeSignatureValid, rustls::Error> {
+            Ok(HandshakeSignatureValid::assertion())
+        }
+
+        fn verify_tls12_signature(
+            &self,
+            _message: &[u8],
+            _cert: &Certificate,
+            _dss: &DigitallySignedStruct,
+        ) -> Result<HandshakeSignatureValid, rustls::Error> {
+            Ok(HandshakeSignatureValid::assertion())
+        }
     }
 }