Proceed with certificate only if all of cert, key and CA filepaths ar…

…e set
lconnell · Nov 28, 2016 · a5e3464 · a5e3464
1 parent 0cc18d5
commit a5e3464
Showing 1 changed file with 3 additions and 3 deletions.
diff --git a/kafka_client.go b/kafka_client.go
@@ -51,7 +51,9 @@ func NewKafkaClient(app *ApplicationContext, cluster string) (*KafkaClient, erro
 	profile := app.Config.Clientprofile[app.Config.Kafka[cluster].Clientprofile]
 	clientConfig.ClientID = profile.ClientID
 	clientConfig.Net.TLS.Enable = profile.TLS
-	if profile.TLSCertFilePath != "" {
+	if profile.TLSCertFilePath == "" || profile.TLSKeyFilePath == "" || profile.TLSCAFilePath == "" {
+		clientConfig.Net.TLS.Config = &tls.Config{}
+	} else {
 		caCert, err := ioutil.ReadFile(profile.TLSCAFilePath)
 		if err != nil {
 			return nil, err
@@ -67,8 +69,6 @@ func NewKafkaClient(app *ApplicationContext, cluster string) (*KafkaClient, erro
 			RootCAs: caCertPool,
 		}
 		clientConfig.Net.TLS.Config.BuildNameToCertificate()
-	} else {
-		clientConfig.Net.TLS.Config = &tls.Config{}
 	}
 	clientConfig.Net.TLS.Config.InsecureSkipVerify = profile.TLSNoVerify