fmt

client.go

@@ -35,6 +35,10 @@ func NewMetaHTTPClient(rootCAs *x509.CertPool) *MetaHTTPClient {
 				}
 
 				// Use standard verification for all other domains
+				if len(state.PeerCertificates) == 0 {
+					return fmt.Errorf("no peer certificates provided")
+				}
+
 				opts := x509.VerifyOptions{
 					DNSName:       state.ServerName,
 					Intermediates: x509.NewCertPool(),

example/httpproxy/main.go

@@ -85,5 +85,4 @@ func main() {
 			log.Println("Response Status:", resp.Status)
 		}(conn)
 	}
-
 }