Expose SSLContext#extra_chain_cert in Net::HTTP

Currently, Net::HTTP can only send a single SSL certificate when it
establishes a connection. Some use-cases involve sending an entire
certificate chain to the destination; for this, SSLContext supports
assigning to #extra_chain_cert=.

This adds support in Net::HTTP for exposing this underlying SSLContext
property to end-users. [Feature #9758]
This commit is contained in:
Stephen Touset 2014-04-18 13:42:02 -07:00 committed by NARUSE, Yui
parent 946dadd3f4
commit 31af0dafba

View File

@ -850,6 +850,7 @@ module Net #:nodoc:
:@cert, :@cert,
:@cert_store, :@cert_store,
:@ciphers, :@ciphers,
:@extra_chain_cert,
:@key, :@key,
:@ssl_timeout, :@ssl_timeout,
:@ssl_version, :@ssl_version,
@ -866,6 +867,7 @@ module Net #:nodoc:
:cert, :cert,
:cert_store, :cert_store,
:ciphers, :ciphers,
:extra_chain_cert
:key, :key,
:ssl_timeout, :ssl_timeout,
:ssl_version, :ssl_version,
@ -896,6 +898,10 @@ module Net #:nodoc:
# Sets the available ciphers. See OpenSSL::SSL::SSLContext#ciphers= # Sets the available ciphers. See OpenSSL::SSL::SSLContext#ciphers=
attr_accessor :ciphers attr_accessor :ciphers
# Sets the extra X509 certificates to be added to the certificate chain.
# See OpenSSL::SSL::SSLContext#extra_chain_cert=
attr_accessor :extra_chain_cert
# Sets an OpenSSL::PKey::RSA or OpenSSL::PKey::DSA object. # Sets an OpenSSL::PKey::RSA or OpenSSL::PKey::DSA object.
# (This method is appeared in Michal Rokos's OpenSSL extension.) # (This method is appeared in Michal Rokos's OpenSSL extension.)
attr_accessor :key attr_accessor :key