ssl

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
use "net"

primitive SSLContextFactory
  """
  Creates an SSL context for HTTPS client connections. Attempts to load the
  system CA store for certificate verification. If no CA store is available,
  falls back to an unverified context.

  This is the default SSL context used by request actors when
  `Credentials.ssl_ctx` is None.
  """
  fun apply(): SSLContext val =>
    try
      recover val
        SSLContext
          .>set_client_verify(true)
          .>set_authority(None)?
      end
    else
      recover val
        SSLContext.>set_client_verify(false)
      end
    end