Merge pull request #68 from ccin2p3/feature/load_default_ca_certs

[TLS] Always load system default C.A files
This commit is contained in:
Markus Opolka 2021-01-22 10:39:33 +01:00 committed by GitHub
commit e3ac06864d
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23

View File

@ -550,6 +550,7 @@ def main(cliargs):
context.verify_mode = ssl.CERT_NONE context.verify_mode = ssl.CERT_NONE
else: else:
context.verify_mode = ssl.CERT_OPTIONAL context.verify_mode = ssl.CERT_OPTIONAL
context.load_default_certs()
if args.cacert: if args.cacert:
try: try:
context.load_verify_locations(args.cacert) context.load_verify_locations(args.cacert)