Launch

internal/dnsttclient/certpool.go

@@ -0,0 +1,22 @@
+package dnsttclient
+
+import (
+	"crypto/tls"
+	"crypto/x509"
+)
+
+func loadTLSConfig() (*tls.Config, error) {
+	pool, err := x509.SystemCertPool()
+	if err != nil {
+		pool = nil
+	}
+
+	config := &tls.Config{
+		MinVersion: tls.VersionTLS12,
+	}
+	if pool != nil {
+		config.RootCAs = pool
+	}
+
+	return config, nil
+}