Merge pull request #68 from ccin2p3/feature/load_default_ca_certs

[TLS] Always load system default C.A files
This commit is contained in:
Markus Opolka
2021-01-22 10:39:33 +01:00
committed by GitHub

View File

@@ -550,6 +550,7 @@ def main(cliargs):
context.verify_mode = ssl.CERT_NONE context.verify_mode = ssl.CERT_NONE
else: else:
context.verify_mode = ssl.CERT_OPTIONAL context.verify_mode = ssl.CERT_OPTIONAL
context.load_default_certs()
if args.cacert: if args.cacert:
try: try:
context.load_verify_locations(args.cacert) context.load_verify_locations(args.cacert)