Configure CA path for OpenID

diff --git a/config/initializers/omniauth.rb b/config/initializers/omniauth.rb
index a6fe67e1792022a7583ce6aa80ae6d09c3bb0ab3..8190a65b96fb63b4c30773a0f5b5b8aa85e86ce1 100644 (file)
--- a/config/initializers/omniauth.rb
+++ b/config/initializers/omniauth.rb
@@ -1,3 +1,9 @@
+require "openid/fetchers"
+
+CA_BUNDLES = ["/etc/ssl/certs/ca-certificates.crt", "/etc/pki/tls/cert.pem"]
+
+OpenID.fetcher.ca_file = CA_BUNDLES.find { |f| File.exist?(f) }
+
 OmniAuth.config.logger = Rails.logger
 OmniAuth.config.failure_raise_out_environments = []