SSL client certificates

[JohnSmall]

The documentation on how to use HTTParty with SSL is completely absent.

Here's what I need to do;-
We have a server we can make rest requests to, the server requires client certificates. I'm just learning this, but it seems the client certs can come in many forms, with and without passwords and such like. I'm using Firefox on a Mac, and I can backup my cert to a pk12 file, with a password, or export to a pem file, without a password.

Reading the code in HTTParty it seems that if I take the pem file option then I need to supply a password, and there's no option for feeding in a PK12 file.

How do I get this stuff to work?

[claco]

Working through this today.

https://github.com/jnunemaker/httparty/blob/master/lib/httparty/connection_adapter.rb#L146

[jnunemaker]

I honestly have no idea. We have several ssl options:

https://github.com/jnunemaker/httparty/blob/master/lib/httparty.rb#L39-L67
https://github.com/jnunemaker/httparty/blob/master/lib/httparty.rb#L304-L356

Let me know what you find out. Happy to pull documentation updates or code fixes with tests.

[kurenn]

Hey @JohnSmall I think you can do it with

class Client
    include HTTParty

    debug_output $stdout
    pkcs12 File.read("certs/filename.p12"), "123456"
end

I have been working with SSL for a client and I had troubles setting this up, there is not to much documentation out there, it would be good to have some...what a about a wiki article?

[kurenn]

I can add some documentation on how to achieve this...would be better to add a wiki article or on the main README?

[jnunemaker]

I would lean toward a docs/ folder with a markdown file. Then in the code or readme we can just link to that. Coolio?

[kurenn]

Sure, I'll work on the PR later tonite!

[kurenn]

You can find the doc at #449

[pimlottc-gov]

For posterity, the docs are at ../tree/master/docs#working-with-ssl

[jji-fieldwire]

are people storing their certs in their repos and the passwords in env vars? or is there a better way of doing it

nvm, seems the way to do it is have the cert in the repo, & the password passed in via ENV Var