- Allow the use of teh system default certificates by not installing the

supplied cacert.pem file
  + This allows distributions to package websocket without having to
    ship/maintain the cacert.pem file that is part of this source tree
    and use the distribution configured certs
This commit is contained in:
Robert Schweikert
2014-06-05 11:44:28 -04:00
parent 22f92961d4
commit 97923c73a3

View File

@@ -419,8 +419,12 @@ class WebSocket(object):
if is_secure:
if HAVE_SSL:
sslopt = dict(cert_reqs=ssl.CERT_REQUIRED,
ca_certs=os.path.join(os.path.dirname(__file__), "cacert.pem"))
sslopt = dict(cert_reqs=ssl.CERT_REQUIRED)
certPath = os.path.join(
os.path.dirname(__file__), "cacert.pem")
)
if os.path.isfile(certPath):
sslopt['ca_certs'] = certPath
sslopt.update(self.sslopt)
self.sock = ssl.wrap_socket(self.sock, **sslopt)
match_hostname(self.sock.getpeercert(), hostname)