summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorThorsten Scherf <tscherf@redhat.com>2017-02-24 11:53:46 +0100
committerJan Cholasta <jcholast@redhat.com>2017-02-27 07:53:05 +0000
commit16dac0252e52c8de07fd8a6a86ec0896074cbe9d (patch)
tree3734e7810e10f8829e126588fa69363464d4b0dd
parente2d1b21c5049f68d0336dcaf3f8657b214a34e2b (diff)
downloadfreeipa-16dac0252e52c8de07fd8a6a86ec0896074cbe9d.tar.gz
freeipa-16dac0252e52c8de07fd8a6a86ec0896074cbe9d.tar.xz
freeipa-16dac0252e52c8de07fd8a6a86ec0896074cbe9d.zip
added ssl verification using IPA trust anchor
https://fedorahosted.org/freeipa/ticket/6686 Reviewed-By: Christian Heimes <cheimes@redhat.com>
-rw-r--r--ipaserver/secrets/client.py1
1 files changed, 1 insertions, 0 deletions
diff --git a/ipaserver/secrets/client.py b/ipaserver/secrets/client.py
index a945e01c9..3c7a05547 100644
--- a/ipaserver/secrets/client.py
+++ b/ipaserver/secrets/client.py
@@ -96,6 +96,7 @@ class CustodiaClient(object):
# Perform request
r = requests.get(url, headers=headers,
+ verify=paths.IPA_CA_CRT,
params={'type': 'kem', 'value': request})
r.raise_for_status()
reply = r.json()