Ignore certificate errors.

This is especially needed in cases where intercepting proxies may be a thing on corporate networks.
sensepost · Oct 24, 2018 · 7cf38a8 · 7cf38a8
1 parent 944ce30
commit 7cf38a8
Show file tree

Hide file tree

Showing 2 changed files with 8 additions and 0 deletions.
diff --git a/dnsclient/cloudflare.go b/dnsclient/cloudflare.go
@@ -1,6 +1,7 @@
 package dnsclient
 
 import (
+	"crypto/tls"
 	"encoding/json"
 	"io/ioutil"
 	"log"
@@ -18,9 +19,13 @@ type CloudflareDNS struct {
 
 // Lookup performs a DNS lookup using Cloudflare
 func (c *CloudflareDNS) Lookup(name string, rType uint16) Response {
+
+	http.DefaultTransport.(*http.Transport).TLSClientConfig = &tls.Config{InsecureSkipVerify: true}
+
 	client := http.Client{
 		Timeout: time.Second * 20,
 	}
+
 	req, err := http.NewRequest("GET", c.BaseURL, nil)
 	if err != nil {
 		log.Fatal(err)

diff --git a/dnsclient/google.go b/dnsclient/google.go
@@ -1,6 +1,7 @@
 package dnsclient
 
 import (
+	"crypto/tls"
 	"encoding/json"
 	"io/ioutil"
 	"log"
@@ -19,6 +20,8 @@ type GoogleDNS struct {
 // Lookup performs a DNS lookup using Google
 func (c *GoogleDNS) Lookup(name string, rType uint16) Response {
 
+	http.DefaultTransport.(*http.Transport).TLSClientConfig = &tls.Config{InsecureSkipVerify: true}
+
 	client := http.Client{
 		Timeout: time.Second * 20,
 	}