Matt Bostock 16c5d0e4b7 Always verify TLS unless explicitly told otherwise ... TLS was not being verified in a number of places: - connections to grafana.com - connections to OAuth providers when TLS client authentication was enabled - connections to self-hosted Grafana installations when using the CLI tool TLS should always be verified unless the user explicitly enables an option to skip verification. Removes some instances where `InsecureSkipVerify` is explicitly set to `false`, the default, to help avoid confusion and make it more difficult to regress on this fix by accident. Adds a `--insecure` flag to `grafana-cli` to skip TLS verification. Adds a `tls_skip_verify_insecure` setting for OAuth. Adds a `app_tls_skip_verify_insecure` setting under a new `[plugins]` section. I'm not super happy with the way the global setting is used by `pkg/api/app_routes.go` but that seems to be the existing pattern used.		2017-10-06 17:09:27 +01:00
..
setting_oauth.go	Always verify TLS unless explicitly told otherwise	2017-10-06 17:09:27 +01:00
setting_quota.go	move toMap function to be a method on the quota structs	2015-09-15 17:18:26 +08:00
setting_smtp.go	introduce smtp config option for EHLO identity	2017-09-24 20:48:20 +02:00
setting_test.go	setting: add tests for windows	2017-06-28 09:35:33 +02:00
setting.go	Always verify TLS unless explicitly told otherwise	2017-10-06 17:09:27 +01:00