opnsense-ports/www/gist/files/patch-build-gist
Franco Fichtner 399a5bf949 */*: sync with upstream
Taken from: HardenedBSD
2020-04-23 11:39:35 +02:00

12 lines
443 B
Text

--- build/gist.orig 2020-02-05 20:01:45 UTC
+++ build/gist
@@ -1713,7 +1713,8 @@ module Gist
end
if uri.scheme == "https"
connection.use_ssl = true
- connection.verify_mode = OpenSSL::SSL::VERIFY_NONE
+ connection.verify_mode = OpenSSL::SSL::VERIFY_PEER
+ connection.ca_file = "%%LOCALBASE%%/share/certs/ca-root-nss.crt"
end
connection.open_timeout = 10
connection.read_timeout = 10