TLSConfig is unusable for non client side verification
Created by: chackett
Hello,
I want to use QuickFixGo to connect to an acceptor via TLS but not provide socket private key file (for client to server auth).
This doesn't provide the result I would like, if a private key is not supplied the loadTLSConfig()
returns a default config, with insecureSkipVerify
set to true. It also doesn't set the minimum TLS version to what was specified in the config. And I also don't know why the default minimum TLS version is not the lowest version.
I am going to add a fix for this that will still build the TLS config and honour the provided config, event if client side connect is not required. With this in mind, how do you suggest I allow the user to specify that TLS is required? I propose adding TLSConnect=Y/N
to the config file.
Thanks