From 12dbb9e22c683eeee579d970d952b9d562a88ca4 Mon Sep 17 00:00:00 2001
From: Aliaksandr Valialkin <valyala@gmail.com>
Date: Wed, 6 May 2020 16:50:22 +0300
Subject: [PATCH] app/vmagent: properly set client-side TLS certificates for
 `-remoteWrite.url`. Previously they were mistakenly set as server-side

---
 app/vmagent/remotewrite/client.go | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/app/vmagent/remotewrite/client.go b/app/vmagent/remotewrite/client.go
index 597067007a..3f42ac943b 100644
--- a/app/vmagent/remotewrite/client.go
+++ b/app/vmagent/remotewrite/client.go
@@ -169,7 +169,9 @@ func getTLSConfig() (*tls.Config, error) {
 		ClientSessionCache: tls.NewLRUClientSessionCache(0),
 	}
 	if tlsCertificate != nil {
-		tlsCfg.Certificates = []tls.Certificate{*tlsCertificate}
+		tlsCfg.GetClientCertificate = func(*tls.CertificateRequestInfo) (*tls.Certificate, error) {
+			return tlsCertificate, nil
+		}
 	}
 	tlsCfg.InsecureSkipVerify = *tlsInsecureSkipVerify
 	return tlsCfg, nil