Back to Source Monitor

ssl-cert-store-configuration

.vbw-planning/milestones/generator-enhancements/phases/06-netflix-feed-fix/PLAN-01-SUMMARY.md

0.13.01.4 KB
Original Source

What Was Built

  • HTTPSettings SSL options -- Added ssl_ca_file, ssl_ca_path, ssl_verify attr_accessors with safe defaults (verify=true, ca_file/ca_path=nil). Follows existing settings pattern.
  • Faraday SSL cert store -- Every Faraday connection now gets an OpenSSL::X509::Store initialized with set_default_paths, loading all system-trusted CAs including intermediates. ssl_ca_file and ssl_ca_path override the store when set. General fix applying to ALL connections, not Netflix-specific.
  • SSL unit tests -- 5 new tests covering default cert store, ca_file override, ca_path override, verify-true default, verify-false escape hatch. 13 total HTTP tests.
  • Netflix VCR cassette -- Recorded from real Netflix Tech Blog feed (netflixtechblog.com/feed). Trimmed to 3 entries for manageable fixture size. Regression test parses as RSS and validates Netflix title and entries.

Files Modified

  • lib/source_monitor/configuration/http_settings.rb -- added ssl_ca_file, ssl_ca_path, ssl_verify settings
  • lib/source_monitor/http.rb -- added require "openssl", configure_ssl method, default_cert_store method
  • test/lib/source_monitor/http_test.rb -- 5 new SSL configuration tests
  • test/lib/source_monitor/fetching/feed_fetcher_test.rb -- Netflix Tech Blog regression test
  • test/vcr_cassettes/source_monitor/fetching/netflix_medium_rss.yml -- new VCR cassette