search

pusher / pusher-http-ruby

Ruby library for Pusher Channels HTTP API
https://pusher.com/channels
MIT License
664 stars 124 forks source link

Replace httpclient with a more recent updated http client #186

Closed h0jeZvgoxFepBQ2C closed 1 year ago

h0jeZvgoxFepBQ2C commented 1 year ago

See https://github.com/nahi/httpclient/issues/445

We cannot use the pusher library right now because of this..

stale[bot] commented 1 year ago

This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. If you'd like this issue to stay open please leave a comment indicating how this issue is affecting you. Thank you.

benjamin-tang-pusher commented 1 year ago

Hi, unfortunately this isn't a Pusher specific issue. You will need to follow the the other commenter's steps to set the path to the local machine's default cert store.

I understand this isn't ideal however, and in the long run if this dependency is no longer maintained, we will move off it.

h0jeZvgoxFepBQ2C commented 1 year ago

So you want to continue an absolutely unsecure library? You should at least apply the mentioned fixes to don't have such insecure defaults? Or at least mention in the documenation that this HAS TO BE applied, to stay secure?