Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Provide support to reset HTTPClient's CA store path to the system defaults #94

Open
nefilim opened this issue Feb 5, 2014 · 2 comments

Comments

@nefilim
Copy link

nefilim commented Feb 5, 2014

I'm having trouble verifying my nexus server cert using the default HTTPClient CA certs (bundled with HTTPClient), however using the default system CA store it works just fine:

nahi/httpclient#89

I suspect the bundle does not include on of the more recent (2009) root certs, the root cert for my certificate is:

Subject: C=US, ST=Arizona, L=Scottsdale, O=GoDaddy.com, Inc., CN=Go Daddy Root Certificate Authority - G2

which is a newer SHA2 certificate. This would be preferable to setting ssl_verify = false which is what I currently have to do.

Thanks!

ps. filing an issue with HTTPClient too to update their bundled certs if needed

@KAllan357
Copy link
Contributor

I've been working with another engineer at Riot to help get him more familiar with software engineering - our goal has been to introduce the Faraday gem and remove HTTP. I suspect that might also have a side effect of fixing this issue.

@nefilim
Copy link
Author

nefilim commented Feb 6, 2014

Great, hope that helps, do you have a rough timeline?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants