From 929a72e76fe1dd72e8fa28a8e3e1b574a6c19973 Mon Sep 17 00:00:00 2001 From: Rob Crittenden Date: Tue, 26 Aug 2014 18:12:19 -0400 Subject: [PATCH] Default to system CA bundle if no CA certificate is provided If no CA certificate is provided to be used for validation then fall back to the system-wide CA bundle as presented by python-requests. Change-Id: I05206a868150d4b62b6f1b833310eb9b86b7c4f8 Closes-bug: #1362179 --- glanceclient/common/http.py | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/glanceclient/common/http.py b/glanceclient/common/http.py index 8c7937a2..092bf5c2 100644 --- a/glanceclient/common/http.py +++ b/glanceclient/common/http.py @@ -71,8 +71,9 @@ class HTTPClient(object): if not compression: self.session.mount("https://", https.HTTPSAdapter()) - self.session.verify = (kwargs.get('cacert', None), - kwargs.get('insecure', False)) + self.session.verify = ( + kwargs.get('cacert', requests.certs.where()), + kwargs.get('insecure', False)) else: if kwargs.get('insecure', False) is True: