}

// configRootCAs configures and returns a reference to tls.Config instance if CAFile is provided
func (evc ExternalEtcdVersionCheck) configRootCAs(config *tls.Config) (*tls.Config, error) {
	var CACertPool *x509.CertPool
	if evc.Etcd.External.CAFile != "" {
		CACert, err := os.ReadFile(evc.Etcd.External.CAFile)
		if err != nil {
			return nil, errors.Wrapf(err, "couldn't load external etcd's server certificate %s", evc.Etcd.External.CAFile)

		{"X25519", Const, 8},
		{"X509KeyPair", Func, 0},
	},
	"crypto/x509": {
		{"(*CertPool).AddCert", Method, 0},
		{"(*CertPool).AddCertWithConstraint", Method, 22},
		{"(*CertPool).AppendCertsFromPEM", Method, 0},
		{"(*CertPool).Clone", Method, 19},
		{"(*CertPool).Equal", Method, 19},
		{"(*CertPool).Subjects", Method, 0},
		{"(*Certificate).CheckCRLSignature", Method, 0},

			logf("%s", p)
			return len(p), nil
		}), "", 0)
	}).ts

	certpool := x509.NewCertPool()
	certpool.AddCert(ts.Certificate())

	c := &Client{Transport: &Transport{
		TLSClientConfig: &tls.Config{
			ServerName: "dns-is-faked.golang",
			RootCAs:    certpool,
		},
	}}

	trace := &httptrace.ClientTrace{