fix agent connection to proxy behind l7 lb (#48290)

gravitational · Nov 1, 2024 · 0236830 · 0236830
1 parent b8f1dc7
commit 0236830
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/lib/service/connect.go b/lib/service/connect.go
@@ -1215,7 +1215,9 @@ func (process *TeleportProcess) newClientThroughTunnel(tlsConfig *tls.Config, ss
 		ClientConfig:          sshConfig,
 		Log:                   process.logger,
 		InsecureSkipTLSVerify: lib.IsInsecureDevMode(),
-		GetClusterCAs:         apiclient.ClusterCAsFromCertPool(tlsConfig.RootCAs),
+		GetClusterCAs: func(context.Context) (*x509.CertPool, error) {
+			return getClusterCAs()
+		},
 	})
 	if err != nil {
 		return nil, nil, trace.Wrap(err)