diff --git a/http/preflight_test.go b/http/preflight_test.go
index b620fdd0..8ff684dd 100644
--- a/http/preflight_test.go
+++ b/http/preflight_test.go
@@ -101,7 +101,7 @@ func Test_IsServingHTTP_OpenPortTLS(t *testing.T) {
 	}
 	certFile := mustWriteTempFile(t, cert)
 	keyFile := mustWriteTempFile(t, key)
-	tlsConfig, err := rtls.CreateServerConfig(certFile, keyFile, "", "", false)
+	tlsConfig, err := rtls.CreateServerConfig(certFile, keyFile, rtls.NoCACert, false)
 	if err != nil {
 		t.Fatalf("failed to create TLS config: %s", err)
 	}
diff --git a/http/service.go b/http/service.go
index c12f0166..c52b7a4c 100644
--- a/http/service.go
+++ b/http/service.go
@@ -370,7 +370,7 @@ func (s *Service) Start() error {
 			return err
 		}
 	} else {
-		s.tlsConfig, err = rtls.CreateServerConfig(s.CertFile, s.KeyFile, s.CACertFile, "", !s.ClientVerify)
+		s.tlsConfig, err = rtls.CreateServerConfig(s.CertFile, s.KeyFile, s.CACertFile, !s.ClientVerify)
 		if err != nil {
 			return err
 		}