Jira (PUP-5069) Puppet's HTTP API does not allow callers to trust system cacerts

[Josh Cooper (JIRA)]

Title: Message Title

Josh Cooper updated an issue   Puppet / PUP-5069 Puppet's HTTP API does not allow callers to trust system cacerts Change By: Josh Cooper underlined textPuppet Puppet 's HTTP connection code does not allow callers to specify that they want to trust the default set of cacerts. To do so, you need to get access to the {{Net::HTTP#store}} and call {{OpenSSL::X509::Store#set_default_paths}}, but this is not currently possible. The PMT works around this by rolling its own {{Net::HTTP}} object, leading to duplicate proxy handling logic. It would be nice to DRY this up, but to do so, our HTTP code needs to provide a way for callers to trust the system's cacerts. This would also be useful for providers that need to make network connections, and not rely on open-uri to do so. Add Comment   This message was sent by Atlassian JIRA (v7.7.1#77002-sha1:e75ca93) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/puppet-bugs/JIRA.94774.1440440148000.49155.1565301482463%40Atlassian.JIRA.