The VERIFY_NONE situation is grossly overstated

celluloid · Sep 14, 2013 · 681eb45 · 681eb45
1 parent 6b9ecf0
commit 681eb45
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/lib/reel/ssl_server.rb b/lib/reel/ssl_server.rb
@@ -12,7 +12,8 @@ def initialize(host, port, options = {}, &callback)
       ssl_context.cert = OpenSSL::X509::Certificate.new options.fetch(:cert)
       ssl_context.key  = OpenSSL::PKey::RSA.new options.fetch(:key)
 
-      # FIXME: VERY VERY VERY VERY BAD RELEASE BLOCKER BAD
+      # We don't presently support verifying client certificates
+      # TODO: support client certificates!
       ssl_context.verify_mode = OpenSSL::SSL::VERIFY_NONE
 
       @tcpserver  = Celluloid::IO::TCPServer.new(host, port)