If TLS is enabled, context now loads the system default C.A files

* This allows system wide deployed C.A to be used without any further
  configuration.
This commit is contained in:
Rémi Ferrand 2021-01-21 12:02:41 +01:00
parent cdb2474ee0
commit 63542f3226

View File

@ -550,6 +550,7 @@ def main(cliargs):
context.verify_mode = ssl.CERT_NONE context.verify_mode = ssl.CERT_NONE
else: else:
context.verify_mode = ssl.CERT_OPTIONAL context.verify_mode = ssl.CERT_OPTIONAL
context.load_default_certs()
if args.cacert: if args.cacert:
try: try:
context.load_verify_locations(args.cacert) context.load_verify_locations(args.cacert)