stop using httpclient's root cert set.

ref.) nahi/httpclient#445
nov · Oct 1, 2021 · 53fae49 · 53fae49
1 parent fb7d341
commit 53fae49
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/lib/webfinger.rb b/lib/webfinger.rb
@@ -45,6 +45,11 @@ def http_client
     _http_client_ = HTTPClient.new(
       agent_name: "WebFinger (#{VERSION})"
     )
+
+    # NOTE: httpclient gem seems stopped maintaining root certtificate set, use OS default.
+    _http_client_.ssl_config.clear_cert_store
+    _http_client_.ssl_config.cert_store.set_default_paths
+
     _http_client_.request_filter << Debugger::RequestFilter.new if debugging?
     http_config.try(:call, _http_client_)
     _http_client_