use proper ssl connection with ca_file - green!

1 files changed, 6 insertions, 0 deletions

diff --git a/lib/nickserver/adapters/celluloid_http.rb b/lib/nickserver/adapters/celluloid_http.rb
index 5ded702..9e5fa3b 100644
--- a/lib/nickserver/adapters/celluloid_http.rb
+++ b/lib/nickserver/adapters/celluloid_http.rb
@@ -9,9 +9,15 @@ module Nickserver::Adapters
     def get(url, options = {})
       response = HTTP.get url,
         params: options[:query],
+        ssl_context: ctx,
         ssl_socket_class: Celluloid::IO::SSLSocket
       yield response.code, response.to_s
     end
 
+    def ctx
+      OpenSSL::SSL::SSLContext.new.tap do |ctx|
+        ctx.ca_file = Nickserver::Config.hkp_ca_file
+      end
+    end
   end
 end