httparty icon indicating copy to clipboard operation
httparty copied to clipboard

Update connection adapter to only trust ssl_ca_*

Open snyff opened this issue 5 years ago • 0 comments

This change modifies httparty's behavior to only trust the system CAs if ssl_ca_file and ssl_ca_path is not provided.

As a user using my own CA, I only want to trust my CA. Not my CA and all the other CAs.

This change in behavior was introduced in recent version of curl.

Users wanting to trust both can add the system CA to ssl_ca_file or ssl_ca_path. Alternatively, they can (and should) use a different class for each backend they are connecting to.

I didn't provide test cases as the current tests are broken and I couldn't find a way to fix them.

snyff avatar Jun 02 '20 23:06 snyff