From 63542f3226fd2abac77d31497f5489e15cd15521 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?R=C3=A9mi=20Ferrand?= <remi.ferrand@cc.in2p3.fr>
Date: Thu, 21 Jan 2021 12:02:41 +0100
Subject: [PATCH] If TLS is enabled, context now loads the system default C.A
 files

* This allows system wide deployed C.A to be used without any further
  configuration.
---
 check_http_json.py | 1 +
 1 file changed, 1 insertion(+)

diff --git a/check_http_json.py b/check_http_json.py
index 5256639..06654f5 100755
--- a/check_http_json.py
+++ b/check_http_json.py
@@ -550,6 +550,7 @@ def main(cliargs):
             context.verify_mode = ssl.CERT_NONE
         else:
             context.verify_mode = ssl.CERT_OPTIONAL
+            context.load_default_certs()
             if args.cacert:
                 try:
                     context.load_verify_locations(args.cacert)