Explicitly use certificate chain.

2016-08-05 15:42:57 +02:00
parent 751a321aa6
commit 0d3ed3af2c
2 changed files with 6 additions and 0 deletions
--- a/pillar/api/blender_id.py
+++ b/pillar/api/blender_id.py
@@ -167,6 +167,7 @@ def validate_token(user_id, token, oauth_subclient_id):
    # Retry a few times when POSTing to BlenderID fails.
    # Source: http://stackoverflow.com/a/15431343/875379
    s = requests.Session()
+    s.verify = current_app.config['TLS_CERT_FILE']
    s.mount(blender_id_endpoint(), HTTPAdapter(max_retries=5))

    # POST to Blender ID, handling errors as negative verification results.