[Freeipa-devel] [freeipa PR#506][comment] added ssl verification

[tscherf]

  URL: https://github.com/freeipa/freeipa/pull/506
Title: #506: added ssl verification

tscherf commented:
"""
When the system wide trust store is supposed to be used here, then something else must be broken somewhere in the verification code. Without explicitly using the IPA trust anchor stored in IPA_CA_CRT, the installer failed with an "[SSL: CERTIFICATE_VERIFY_FAILED]" error. We have seen this in CA-less and chained CA setups.
"""

See the full comment at https://github.com/freeipa/freeipa/pull/506#issuecomment-282262743