isWorker bool,
enableHostVerification bool,
// Optional ServerCA for client if not already trusted by host
serverCa, err := clientProvider.FetchServerRootCAsForClient(isWorker)
if err != nil {
return nil, fmt.Errorf("failed to load client ca: %v", err)
}
// mTLS enabled, present certificate
if isAuthRequired {
getCert = func() (*tls.Certificate, error) {
cert, err := clientProvider.FetchClientCertificate(isWorker)