SSLの証明書は検証すべき

cho45 · Dec 18, 2009 · 19280b2 · 19280b2
1 parent fd1fa08
commit 19280b2
Showing 1 changed file with 4 additions and 1 deletion.
diff --git a/examples/tig.rb b/examples/tig.rb
@@ -339,6 +339,8 @@ def initialize(*args)
 		@utf7          =
 		@httpproxy     = nil
 		@ratelimit     = RateLimit.new(150)
+		@cert_store = OpenSSL::X509::Store.new
+		@cert_store.set_default_paths
 	end
 
 	def on_user(m)
@@ -2141,7 +2143,8 @@ def http(uri, open_timeout = nil, read_timeout = 60)
 		http.read_timeout = read_timeout if read_timeout # 60 by default
 		if uri.is_a? URI::HTTPS
 			http.use_ssl     = true
-			http.verify_mode = OpenSSL::SSL::VERIFY_NONE
+			http.cert_store = @cert_store
+			http.verify_mode = OpenSSL::SSL::VERIFY_PEER
 		end
 		http
 	rescue => e