Add 'InsecureSkipVerify' option to server config and pki

A new field 'InsecureSkipVerify' is added to the server configuration, which allows turning off TLS certificate verification. This is meant for test or development environments and should not be used in production, as it could expose the server to security risks.

core/server_config.go

@@ -85,6 +85,7 @@ type TLSConfig struct {
 	CertKeyFile          string `koanf:"certkeyfile"`
 	TrustStoreFile       string `koanf:"truststorefile"`
 	legacyTLS            *NetworkTLSConfig
+	InsecureSkipVerify   bool `koanf:"insecureskipverify"`
 }
 
 // Enabled returns whether TLS should be enabled, according to the global config.

pki/pki.go

@@ -94,6 +94,7 @@ func (p *PKI) CreateTLSConfig(cfg core.TLSConfig) (*tls.Config, error) {
 		return nil, err
 	}
 	_ = p.SetVerifyPeerCertificateFunc(tlsConfig) // no error can occur
+	tlsConfig.InsecureSkipVerify = cfg.InsecureSkipVerify
 	return tlsConfig, nil
 }