fixed: handle tls.CertificateVerificationError

PaloAltoNetworks · Feb 17, 2023 · 5f8c83a · 5f8c83a
1 parent 61fc46f
commit 5f8c83a
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 2 deletions.
diff --git a/maniphttp/manipulator.go b/maniphttp/manipulator.go
@@ -732,7 +732,7 @@ func (s *httpManipulator) send(
 
 				goto RETRY
 
-			case x509.UnknownAuthorityError, x509.CertificateInvalidError, x509.HostnameError:
+			case x509.UnknownAuthorityError, x509.CertificateInvalidError, x509.HostnameError, x509.InsecureAlgorithmError, *tls.CertificateVerificationError:
 				return nil, manipulate.ErrTLS{Err: err}
 
 			default:

diff --git a/maniphttp/manipulator_test.go b/maniphttp/manipulator_test.go
@@ -1152,7 +1152,7 @@ func TestHTTP_send(t *testing.T) {
 
 		So(err, ShouldNotBeNil)
 		So(err, ShouldHaveSameTypeAs, manipulate.ErrTLS{})
-		So(err.Error(), ShouldEqual, fmt.Sprintf(`TLS error: Post "%s": x509: certificate signed by unknown authority`, ts.URL))
+		So(err.Error(), ShouldEqual, fmt.Sprintf(`TLS error: Post "%s": tls: failed to verify certificate: x509: certificate signed by unknown authority`, ts.URL))
 
 		So(resp, ShouldBeNil)
 	})