Making httpclient use the operating system's SSL cert store

Posted About 6 years ago. Visible to the public.

The httpclient Show archive.org snapshot gem comes with a custom SSL cert store.

While an customizable, application-level cert store is great when you need to deal with broken or self-signed certificates, you usually want to use the cert store from the underlying Linux. The Linux cert store is updated periodically while httpclient's cert store goes out of date and will eventually not be able to verify certs.

To use the cert store from the underlying operating system:

client = HTTPClient.new
client.ssl_config.cert_store.set_default_paths
client.get('https://....')
Henning Koch
Last edit
About 6 years ago
Henning Koch
Keywords
operating, system, linux, ruby
License
Source code in this card is licensed under the MIT License.
Posted by Henning Koch to makandra dev (2018-03-01 13:17)