add disable ssl flag for bucket replication

cmd/replicate-add.go

@@ -98,6 +98,10 @@ var replicateAddFlags = []cli.Flag{
 		Name:  "disable-proxy",
 		Usage: "disable proxying in active-active replication. If unset, default behavior is to proxy",
 	},
+	cli.BoolFlag{
+		Name:  "insecure-tls,it",
+		Usage: "disable TLS certificate verification during replicate",
+	},
 }
 
 var replicateAddCmd = cli.Command{
@@ -125,18 +129,22 @@ EXAMPLES:
      {{.Prompt}} {{.HelpName}} myminio/mybucket --remote-bucket https://foobar:[email protected]/targetbucket \
          --priority 1 
 
-  3. Add replication configuration rule on bucket "mybucket" for alias "myminio" to replicate all objects with tags
+  3. Add replication configuration rule on bucket "mybucket" for alias "myminio" to replicate all operations in an active-active replication setup, with TLS disabled.
+     {{.Prompt}} {{.HelpName}} myminio/mybucket --remote-bucket https://foobar:[email protected]/targetbucket \
+         --priority 1 --insecure-tls
+
+  4. Add replication configuration rule on bucket "mybucket" for alias "myminio" to replicate all objects with tags
      "key1=value1, key2=value2" to targetbucket synchronously with bandwidth set to 2 gigabits per second. 
      {{.Prompt}} {{.HelpName}} myminio/mybucket --remote-bucket https://foobar:[email protected]/targetbucket  \
          --tags "key1=value1&key2=value2" --bandwidth "2G" --sync \
          --priority 1
 
-  4. Disable a replication configuration rule on bucket "mybucket" for alias "myminio".
+  5. Disable a replication configuration rule on bucket "mybucket" for alias "myminio".
      {{.Prompt}} {{.HelpName}} myminio/mybucket --remote-bucket https://foobar:[email protected]/targetbucket  \
          --tags "key1=value1&key2=value2" \
          --priority 1 --disable
 
-  5. Add replication configuration rule with existing object replication, delete marker replication and versioned deletes
+  6. Add replication configuration rule with existing object replication, delete marker replication and versioned deletes
      enabled on bucket "mybucket" for alias "myminio".
      {{.Prompt}} {{.HelpName}} myminio/mybucket --remote-bucket https://foobar:[email protected]/targetbucket  \
          --replicate "existing-objects,delete,delete-marker" \
@@ -257,6 +265,7 @@ func fetchRemoteTarget(cli *cli.Context) (bktTarget *madmin.BucketTarget) {
 		ReplicationSync:     cli.Bool("sync"),
 		DisableProxy:        disableproxy,
 		HealthCheckDuration: time.Duration(cli.Uint("healthcheck-seconds")) * time.Second,
+		InsecureTLS:         cli.Bool("insecure-tls"),
 	}
 	return bktTarget
 }

cmd/replicate-update.go

@@ -74,6 +74,11 @@ var replicateUpdateFlags = []cli.Flag{
 		Usage: "enable proxying in active-active replication, valid values are ['enable', 'disable']",
 		Value: "enable",
 	},
+	cli.StringFlag{
+		Name:  "tls",
+		Usage: "enable tls in active-active replication, valid values are ['enable', 'disable']",
+		Value: "enable",
+	},
 	cli.StringFlag{
 		Name:  "bandwidth",
 		Usage: "Set bandwidth limit in bytes per second (K,B,G,T for metric and Ki,Bi,Gi,Ti for IEC units)",
@@ -139,6 +144,10 @@ EXAMPLES:
   10. Disable proxying and enable synchronous replication for remote target of bucket mybucket with rule ID kxYD.492
      {{.Prompt}} {{.HelpName}} myminio/mybucket --id "kxYD.492" --remote-bucket https://foobar:[email protected]/targetbucket \
          --sync "enable" --proxy "disable"
+
+  10. Disable tls replication for remote target of bucket mybucket with rule ID kxYD.492
+     {{.Prompt}} {{.HelpName}} myminio/mybucket --id "kxYD.492" --remote-bucket https://foobar:[email protected]/targetbucket \
+         --tls "disable"
 `,
 }
 
@@ -149,7 +158,7 @@ func checkReplicateUpdateSyntax(ctx *cli.Context) {
 	}
 }
 
-// modifyRemoteTarget - modifies the dest credentials or updates sync , disable-proxy settings
+// modifyRemoteTarget - modifies the dest credentials or updates sync , disable-proxy settings, enable TLS settings
 func modifyRemoteTarget(cli *cli.Context, targets []madmin.BucketTarget, arnStr string) (*madmin.BucketTarget, []madmin.TargetUpdateType) {
 	args := cli.Args()
 	foundIdx := -1
@@ -192,6 +201,17 @@ func modifyRemoteTarget(cli *cli.Context, targets []madmin.BucketTarget, arnStr
 			fatalIf(errInvalidArgument().Trace(args...), "--proxy can be either [enable|disable]")
 		}
 	}
+	if cli.IsSet("tls") {
+		tlsState := strings.ToLower(cli.String("tls"))
+		switch tlsState {
+		case "enable", "disable":
+			bktTarget.InsecureTLS = tlsState == "disable"
+			ops = append(ops, madmin.InsecureTLSUpdateType)
+
+		default:
+			fatalIf(errInvalidArgument().Trace(args...), "--tls can be either [enable|disable]")
+		}
+	}
 
 	if len(args) == 1 {
 		_, sourceBucket := url2Alias(args[0])