From: Tom Hughes <tom@compton.nu>
Date: Tue, 31 Mar 2015 13:03:10 +0000 (+0100)
Subject: Configure CA path for OpenID
X-Git-Tag: live~5058
X-Git-Url: https://git.openstreetmap.org./rails.git/commitdiff_plain/fc57778d61f0d8f8ebff31c118cec448412f9ac7?ds=sidebyside

Configure CA path for OpenID
---

diff --git a/config/initializers/omniauth.rb b/config/initializers/omniauth.rb
index a6fe67e17..8190a65b9 100644
--- a/config/initializers/omniauth.rb
+++ b/config/initializers/omniauth.rb
@@ -1,3 +1,9 @@
+require "openid/fetchers"
+
+CA_BUNDLES = ["/etc/ssl/certs/ca-certificates.crt", "/etc/pki/tls/cert.pem"]
+
+OpenID.fetcher.ca_file = CA_BUNDLES.find { |f| File.exist?(f) }
+
 OmniAuth.config.logger = Rails.logger
 OmniAuth.config.failure_raise_out_environments = []