We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
1 parent 8d7ce94 commit d0b77a6Copy full SHA for d0b77a6
lib/rustler_precompiled.ex
@@ -924,12 +924,13 @@ defmodule RustlerPrecompiled do
924
end
925
926
# https://erlef.github.io/security-wg/secure_coding_and_deployment_hardening/inets
927
- cacertfile = CAStore.file_path() |> String.to_charlist()
+ # respects the user provided ca certs via Hex env var
928
+ cacertfile = System.get_env("HEX_CACERTS_PATH", CAStore.file_path())
929
930
http_options = [
931
ssl: [
932
verify: :verify_peer,
- cacertfile: cacertfile,
933
+ cacertfile: cacertfile |> String.to_charlist(),
934
# We need to increase depth because the default value is 1.
935
# See: https://erlef.github.io/security-wg/secure_coding_and_deployment_hardening/ssl
936
depth: 3,
0 commit comments