From cffbcb504d884022f41fc48a6099d15018e01863 Mon Sep 17 00:00:00 2001
From: Brandon Arp <brandon.arp@smartsheet.com>
Date: Wed, 13 Sep 2017 16:20:24 -0700
Subject: [PATCH] allow ssl renegotiation for datasources

---
 pkg/api/app_routes.go          | 5 ++++-
 pkg/models/datasource_cache.go | 1 +
 2 files changed, 5 insertions(+), 1 deletion(-)

diff --git a/pkg/api/app_routes.go b/pkg/api/app_routes.go
index 812ea667eee..138c87271c6 100644
--- a/pkg/api/app_routes.go
+++ b/pkg/api/app_routes.go
@@ -17,7 +17,10 @@ import (
 )
 
 var pluginProxyTransport = &http.Transport{
-	TLSClientConfig: &tls.Config{InsecureSkipVerify: true},
+	TLSClientConfig: &tls.Config{
+		InsecureSkipVerify: true,
+		Renegotiation: tls.RenegotiateFreelyAsClient,
+	},
 	Proxy:           http.ProxyFromEnvironment,
 	Dial: (&net.Dialer{
 		Timeout:   30 * time.Second,
diff --git a/pkg/models/datasource_cache.go b/pkg/models/datasource_cache.go
index e32c0ac9e7c..32854644590 100644
--- a/pkg/models/datasource_cache.go
+++ b/pkg/models/datasource_cache.go
@@ -48,6 +48,7 @@ func (ds *DataSource) GetHttpTransport() (*http.Transport, error) {
 	transport := &http.Transport{
 		TLSClientConfig: &tls.Config{
 			InsecureSkipVerify: true,
+			Renegotiation: tls.RenegotiateFreelyAsClient,
 		},
 		Proxy: http.ProxyFromEnvironment,
 		Dial: (&net.Dialer{