1 files changed, 83 insertions, 0 deletions

diff --git a/vendor/github.com/minio/minio-go/v7/transport.go b/vendor/github.com/minio/minio-go/v7/transport.go
new file mode 100644
index 0000000..1bff664
--- /dev/null
+++ b/vendor/github.com/minio/minio-go/v7/transport.go
@@ -0,0 +1,83 @@
+//go:build go1.7 || go1.8
+// +build go1.7 go1.8
+
+/*
+ * MinIO Go Library for Amazon S3 Compatible Cloud Storage
+ * Copyright 2017-2018 MinIO, Inc.
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+package minio
+
+import (
+        "crypto/tls"
+        "crypto/x509"
+        "net"
+        "net/http"
+        "os"
+        "time"
+)
+
+// mustGetSystemCertPool - return system CAs or empty pool in case of error (or windows)
+func mustGetSystemCertPool() *x509.CertPool {
+        pool, err := x509.SystemCertPool()
+        if err != nil {
+                return x509.NewCertPool()
+        }
+        return pool
+}
+
+// DefaultTransport - this default transport is similar to
+// http.DefaultTransport but with additional param  DisableCompression
+// is set to true to avoid decompressing content with 'gzip' encoding.
+var DefaultTransport = func(secure bool) (*http.Transport, error) {
+        tr := &http.Transport{
+                Proxy: http.ProxyFromEnvironment,
+                DialContext: (&net.Dialer{
+                        Timeout:   30 * time.Second,
+                        KeepAlive: 30 * time.Second,
+                }).DialContext,
+                MaxIdleConns:          256,
+                MaxIdleConnsPerHost:   16,
+                ResponseHeaderTimeout: time.Minute,
+                IdleConnTimeout:       time.Minute,
+                TLSHandshakeTimeout:   10 * time.Second,
+                ExpectContinueTimeout: 10 * time.Second,
+                // Set this value so that the underlying transport round-tripper
+                // doesn't try to auto decode the body of objects with
+                // content-encoding set to `gzip`.
+                //
+                // Refer:
+                //    https://golang.org/src/net/http/transport.go?h=roundTrip#L1843
+                DisableCompression: true,
+        }
+
+        if secure {
+                tr.TLSClientConfig = &tls.Config{
+                        // Can't use SSLv3 because of POODLE and BEAST
+                        // Can't use TLSv1.0 because of POODLE and BEAST using CBC cipher
+                        // Can't use TLSv1.1 because of RC4 cipher usage
+                        MinVersion: tls.VersionTLS12,
+                }
+                if f := os.Getenv("SSL_CERT_FILE"); f != "" {
+                        rootCAs := mustGetSystemCertPool()
+                        data, err := os.ReadFile(f)
+                        if err == nil {
+                                rootCAs.AppendCertsFromPEM(data)
+                        }
+                        tr.TLSClientConfig.RootCAs = rootCAs
+                }
+        }
+        return tr, nil
+}