Should be easier to set the SSL_VERIFY_SERVER_CERT flag

[sodabrew]

https://stackoverflow.com/questions/24172119/rails-mysql2-how-to-verify-mysql-servers-ssl-certificate

[justincase]

Perhaps we could pass SSL_VERIFY_SERVER_CERT by default when specifying a CA bundle as well.

[sodabrew]

I generally agree but it would be a breaking change for sites that are using unverified SSL as a minimum effort mitigation for eavesdropping on the connection.

[justincase]

Yeah, I suppose so. It's not behaviour I like to encourage but that's for an other discussion.

[sodabrew]

I can add an easier-to-find flag for 0.3.17, but I'm marking this for 0.4.0 as a reminder to myself to change the defaults in the future.

[sodabrew]

In PR #648 I added an :sslverify option, but it's off by default at the moment.