freezing DEFAULT_CERT_STORE (shareable by default)

ruby · Oct 5, 2024 · 70a025e · 70a025e
1 parent 6788b2f
commit 70a025e
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/lib/openssl/ssl.rb b/lib/openssl/ssl.rb
@@ -93,6 +93,7 @@ class SSLContext
       DEFAULT_CERT_STORE = OpenSSL::X509::Store.new # :nodoc:
       DEFAULT_CERT_STORE.set_default_paths
       DEFAULT_CERT_STORE.flags = OpenSSL::X509::V_FLAG_CRL_CHECK_ALL
+      DEFAULT_CERT_STORE.freeze
 
       # A callback invoked when DH parameters are required for ephemeral DH key
       # exchange.