cannot validate certificate for 127.0.0.1 because it doesn‘t contain any IP SANs

kafka 报错
time=“2023-02-01T18:04:35+08:00” level=error msg=“Error creating consumer group client: kafka: client has run out of available brokers to talk to: x509: cannot validate certificate for 127.0.0.1 because it doesn’t contain any IP SANs” func=“iot_judge/handle.(*Kafka).InitKafkaConsumer”

参数源码
// InsecureSkipVerify controls whether a client verifies the server’s
// certificate chain and host name. If InsecureSkipVerify is true, crypto/tls
// accepts any certificate presented by the server and any host name in that
// certificate. In this mode, TLS is susceptible to machine-in-the-middle
// attacks unless custom verification is used. This should be used only for
// testing or in combination with VerifyConnection or VerifyPeerCertificate.

解决办法：
配置证书时加参数：tlsConfig.InsecureSkipVerify = true

示例代码

<