class Berkshelf::SSLPolicy
Attributes
@return [Store]
Holds trusted CA certificates used to verify peer certificates
Public Class Methods
Source
# File lib/berkshelf/ssl_policies.rb, line 10 def initialize @store = OpenSSL::X509::Store.new.tap(&:set_default_paths) set_custom_certs if ::File.exist?(trusted_certs_dir) end
Public Instance Methods
Source
# File lib/berkshelf/ssl_policies.rb, line 16 def add_trusted_cert(cert) @store.add_cert(cert) rescue OpenSSL::X509::StoreError => e raise e unless e.message.match(/cert already in hash table/) end
Source
# File lib/berkshelf/ssl_policies.rb, line 31 def set_custom_certs ::Dir.glob("#{trusted_certs_dir}/{*.crt,*.pem}").each do |cert| cert = OpenSSL::X509::Certificate.new(File.read(cert)) add_trusted_cert(cert) end end
Source
# File lib/berkshelf/ssl_policies.rb, line 22 def trusted_certs_dir config_dir = Berkshelf.config.chef.trusted_certs_dir.to_s.tr("\\", "/") if config_dir.empty? || !::File.exist?(config_dir) File.join(ENV["HOME"], ".chef", "trusted_certs") else config_dir end end