diff --git a/client/consul_template.go b/client/consul_template.go
index 9b1bf7a9d..0c4338048 100644
--- a/client/consul_template.go
+++ b/client/consul_template.go
@@ -465,6 +465,15 @@ func runnerConfig(config *config.Config, vaultToken string) (*ctconf.Config, err
 				CaCert:  &config.VaultConfig.TLSCaFile,
 				CaPath:  &config.VaultConfig.TLSCaPath,
 			}
+		} else {
+			conf.Vault.SSL = &ctconf.SSLConfig{
+				Enabled: &f,
+				Verify:  &f,
+				Cert:    &emptyStr,
+				Key:     &emptyStr,
+				CaCert:  &emptyStr,
+				CaPath:  &emptyStr,
+			}
 		}
 	}