Tyler Pickett tpickett66

## gist:86eb4793e8ecf3f55037

      
        
          
            
              
              1 file
            
          
          
            
              
              2 forks
            
          
          
            
              
              2 comments
            
          
          
            
              
              21 stars
            
          
        
        
          
              
          
          
            
                tam7t
                / gist:86eb4793e8ecf3f55037
            
            
              Last active
              April 14, 2022 10:57
            
              
                Securing Ruby's OpenSSL
              
          
        
      
        
  
      
    Are your Ruby HTTPS API calls secure?

Let's check:

2.0.0-p481 :001 > OpenSSL::SSL::SSLContext::DEFAULT_PARAMS
 => {:ssl_version=>"SSLv23", :verify_mode=>1, :ciphers=>"ALL:!ADH:!EXPORT:!SSLv2:RC4+RSA:+HIGH:+MEDIUM:+LOW", :options=>-2147482625}
2.0.0-p481 :002 > rating = JSON.parse(RestClient::Resource.new("https://www.howsmyssl.com/a/check" ).get)['rating']
 => "Bad"