Make --insecure-registry work with TLS registries whose certs we can'…

…t verify.

pkg/publish/options.go

@@ -15,6 +15,8 @@
 package publish
 
 import (
+	"crypto/tls"
+	"fmt"
 	"log"
 	"net/http"
 	"path"
@@ -105,6 +107,17 @@ func WithTagOnly(tagOnly bool) Option {
 func Insecure(b bool) Option {
 	return func(i *defaultOpener) error {
 		i.insecure = b
+		t, ok := i.t.(*http.Transport)
+		if !ok {
+			return fmt.Errorf("unable to configure insecure roundtripper (not HTTP)")
+		}
+		t = t.Clone()
+		if t.TLSClientConfig == nil {
+			t.TLSClientConfig = &tls.Config{}
+		}
+		t.TLSClientConfig.InsecureSkipVerify = b // #nosec
+		i.t = t
+
 		return nil
 	}
 }