From f784e33b1e2630aaa2e433da904cbb241d76e502 Mon Sep 17 00:00:00 2001
From: Thorsten Scherf <tscherf@redhat.com>
Date: Feb 27 2017 07:54:18 +0000
Subject: added ssl verification using IPA trust anchor


https://fedorahosted.org/freeipa/ticket/6686

Reviewed-By: Christian Heimes <cheimes@redhat.com>

---

diff --git a/ipapython/secrets/client.py b/ipapython/secrets/client.py
index d9cc7d0..f2f14af 100644
--- a/ipapython/secrets/client.py
+++ b/ipapython/secrets/client.py
@@ -94,6 +94,7 @@ class CustodiaClient(object):
 
         # Perform request
         r = requests.get(url, headers=headers,
+                         verify=paths.IPA_CA_CRT,
                          params={'type': 'kem', 'value': request})
         r.raise_for_status()
         reply = r.json()