reverseproxy: Avoid returning a `nil` error during GetClientCertificate (#4550)

1 files changed, 3 insertions, 0 deletions

diff --git a/modules/caddyhttp/reverseproxy/httptransport.go b/modules/caddyhttp/reverseproxy/httptransport.go
index f23504c..4be51af 100644
--- a/modules/caddyhttp/reverseproxy/httptransport.go
+++ b/modules/caddyhttp/reverseproxy/httptransport.go
@@ -364,6 +364,9 @@ func (t TLSConfig) MakeTLSClientConfig(ctx caddy.Context) (*tls.Config, error) {
 					return &cert.Certificate, nil
 				}
 			}
+			if err == nil {
+				err = fmt.Errorf("no client certificate found for automate name: %s", t.ClientCertificateAutomate)
+			}
 			return nil, err
 		}
 	}