Trust your CA in Go - rcrowley/certified GitHub Wiki

certPool := x509.NewCertPool()
buf, err := ioutil.ReadFile("etc/ssl/certs/root-ca.crt")
if err != nil {
    return err
}
certPool.AppendCertsFromPEM(buf)
tlsConfig := &tls.Config{RootCAs: certPool}