@@ -146,9 +146,6 @@ def initialize(client)
146
146
return unless SSLEnabled
147
147
@client = client
148
148
@cert_store = X509 ::Store . new
149
- @cert_store . set_default_paths
150
- @cacerts_loaded = working_openssl_platform?
151
-
152
149
@cert_store_crl_items = [ ]
153
150
@client_cert = @client_key = @client_key_pass = @client_ca = nil
154
151
@verify_mode = SSL ::VERIFY_PEER | SSL ::VERIFY_FAIL_IF_NO_PEER_CERT
@@ -165,6 +162,7 @@ def initialize(client)
165
162
@options |= OpenSSL ::SSL ::OP_NO_SSLv3 if defined? ( OpenSSL ::SSL ::OP_NO_SSLv3 )
166
163
# OpenSSL 0.9.8 default: "ALL:!ADH:!LOW:!EXP:!MD5:+SSLv2:@STRENGTH"
167
164
@ciphers = CIPHERS_DEFAULT
165
+ @cacerts_loaded = false
168
166
end
169
167
170
168
# Sets certificate and private key for SSL client authentication.
@@ -415,21 +413,10 @@ def change_notify
415
413
nil
416
414
end
417
415
418
- def working_openssl_platform?
419
- File . exist? ( OpenSSL ::X509 ::DEFAULT_CERT_FILE ) && Dir . exist? ( OpenSSL ::X509 ::DEFAULT_CERT_DIR )
420
- end
421
-
422
416
# Use 2048 bit certs trust anchor
423
417
def load_cacerts ( cert_store )
424
- certs = if ENV . key? ( 'SSL_CERT_DIR' . freeze ) || ENV . key? ( 'SSL_CERT_FILE' )
425
- [ ENV [ 'SSL_CERT_DIR' ] , ENV [ 'SSL_CERT_FILE' ] ] . compact
426
- else
427
- [ File . join ( File . dirname ( __FILE__ ) , 'cacert.pem' ) ]
428
- end
429
-
430
- certs . each do |cert |
431
- add_trust_ca_to_store ( cert_store , cert )
432
- end
418
+ file = File . join ( File . dirname ( __FILE__ ) , 'cacert.pem' )
419
+ add_trust_ca_to_store ( cert_store , file )
433
420
end
434
421
end
435
422
0 commit comments