httparty
httparty copied to clipboard
Update connection adapter to only trust ssl_ca_*
This change modifies httparty's behavior to only trust the system CAs if ssl_ca_file and ssl_ca_path is not provided.
As a user using my own CA, I only want to trust my CA. Not my CA and all the other CAs.
This change in behavior was introduced in recent version of curl.
Users wanting to trust both can add the system CA to ssl_ca_file or ssl_ca_path. Alternatively, they can (and should) use a different class for each backend they are connecting to.
I didn't provide test cases as the current tests are broken and I couldn't find a way to fix them.