Merge pull request #10109 from dmcgowan/fix-fallback-explicit-tls

Update HTTP fallback to better account for TLS timeout and previous attempts

cmd/ctr/commands/resolver.go

@@ -149,6 +149,11 @@ func resolverDefaultTLS(clicontext *cli.Context) (*tls.Config, error) {
 		config.Certificates = []tls.Certificate{keyPair}
 	}
 
+	// If nothing was set, return nil rather than empty config
+	if !config.InsecureSkipVerify && config.RootCAs == nil && config.Certificates == nil {
+		return nil, nil
+	}
+
 	return config, nil
 }