[PATCH 2/2] Use ipa CA certificate for https checks

[Mikhail Efremov <sem altlinux org>]

We don't have ipa CA certificate in the system CA bundle
at the time.
---
 freeipa/ipapython/secrets/client.py | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/freeipa/ipapython/secrets/client.py b/freeipa/ipapython/secrets/client.py
index 83411d7..4fc320c 100644
--- a/freeipa/ipapython/secrets/client.py
+++ b/freeipa/ipapython/secrets/client.py
@@ -88,7 +88,7 @@ class CustodiaClient(object):
 
         # Perform request
         r = requests.get(url, headers=headers,
-                         params={'type': 'kem', 'value': request})
+                         params={'type': 'kem', 'value': request}, verify=paths.IPA_CA_CRT)
         r.raise_for_status()
         reply = r.json()
 
-- 
2.10.4