grafana/pkg/cmd/grafana-cli
Matt Bostock 16c5d0e4b7 Always verify TLS unless explicitly told otherwise
TLS was not being verified in a number of places:

- connections to grafana.com

- connections to OAuth providers when TLS client authentication was
  enabled

- connections to self-hosted Grafana installations when using the CLI
  tool

TLS should always be verified unless the user explicitly enables an
option to skip verification.

Removes some instances where `InsecureSkipVerify` is explicitly set to
`false`, the default, to help avoid confusion and make it more difficult
to regress on this fix by accident.

Adds a `--insecure` flag to `grafana-cli` to skip TLS verification.

Adds a `tls_skip_verify_insecure` setting for OAuth.

Adds a `app_tls_skip_verify_insecure` setting under a new `[plugins]`
section.

I'm not super happy with the way the global setting is used by
`pkg/api/app_routes.go` but that seems to be the existing pattern used.
2017-10-06 17:09:27 +01:00
..
commands Added --pluginUrl option to grafana-cli for local network plugin installation 2017-09-15 20:34:08 +02:00
logger tech(cli): rename log to logger to separate from server logger 2016-06-03 12:22:30 +02:00
models feat(cli): download all plugin dependencies 2016-09-15 14:38:11 +02:00
services Always verify TLS unless explicitly told otherwise 2017-10-06 17:09:27 +01:00
utils Add an idiomatic plugin path for FreeBSD (#7410) 2017-01-31 14:54:53 +01:00
main.go Always verify TLS unless explicitly told otherwise 2017-10-06 17:09:27 +01:00