@@ -146,9 +146,6 @@ def initialize(client)
146146 return unless SSLEnabled
147147 @client = client
148148 @cert_store = X509 ::Store . new
149- @cert_store . set_default_paths
150- @cacerts_loaded = working_openssl_platform?
151-
152149 @cert_store_crl_items = [ ]
153150 @client_cert = @client_key = @client_key_pass = @client_ca = nil
154151 @verify_mode = SSL ::VERIFY_PEER | SSL ::VERIFY_FAIL_IF_NO_PEER_CERT
@@ -165,6 +162,7 @@ def initialize(client)
165162 @options |= OpenSSL ::SSL ::OP_NO_SSLv3 if defined? ( OpenSSL ::SSL ::OP_NO_SSLv3 )
166163 # OpenSSL 0.9.8 default: "ALL:!ADH:!LOW:!EXP:!MD5:+SSLv2:@STRENGTH"
167164 @ciphers = CIPHERS_DEFAULT
165+ @cacerts_loaded = false
168166 end
169167
170168 # Sets certificate and private key for SSL client authentication.
@@ -415,21 +413,10 @@ def change_notify
415413 nil
416414 end
417415
418- def working_openssl_platform?
419- File . exist? ( OpenSSL ::X509 ::DEFAULT_CERT_FILE ) && Dir . exist? ( OpenSSL ::X509 ::DEFAULT_CERT_DIR )
420- end
421-
422416 # Use 2048 bit certs trust anchor
423417 def load_cacerts ( cert_store )
424- certs = if ENV . key? ( 'SSL_CERT_DIR' . freeze ) || ENV . key? ( 'SSL_CERT_FILE' )
425- [ ENV [ 'SSL_CERT_DIR' ] , ENV [ 'SSL_CERT_FILE' ] ] . compact
426- else
427- [ File . join ( File . dirname ( __FILE__ ) , 'cacert.pem' ) ]
428- end
429-
430- certs . each do |cert |
431- add_trust_ca_to_store ( cert_store , cert )
432- end
418+ file = File . join ( File . dirname ( __FILE__ ) , 'cacert.pem' )
419+ add_trust_ca_to_store ( cert_store , file )
433420 end
434421 end
435422
0 commit comments