Update SSL certificates, again.

Why did openssl give me a certificate that doesn’t work to connect? :(
Also remove the intermediate certificates that aren’t actually needed to
validate a connection to the server. Finally, include tests to make sure
that Bundler can connect to each of the important Rubygems hosts using
only the vendored certificates (h/t @luislavena for an example test).

1 files changed, 14 insertions, 1 deletions

diff --git a/spec/other/ssl_cert_spec.rb b/spec/other/ssl_cert_spec.rb
index ac9283a218..04f7a1f25f 100644
--- a/spec/other/ssl_cert_spec.rb
+++ b/spec/other/ssl_cert_spec.rb
@@ -1,10 +1,23 @@
 require 'spec_helper'
 require 'bundler/ssl_certs/certificate_manager'
 
-describe "SSL Certificates", :if => (ENV['RGV'] == "master") do
+describe "SSL Certificates", :rubygems_master do
   it "are up to date with Rubygems" do
     rubygems = File.expand_path("../../../tmp/rubygems", __FILE__)
     manager = Bundler::SSLCerts::CertificateManager.new(rubygems)
     expect(manager).to be_up_to_date
   end
+
+  hosts = %w(
+    d2chzxaqi4y7f8.cloudfront.net
+    rubygems.org
+    s3.amazonaws.com
+    staging.rubygems.org
+  )
+
+  hosts.each do |host|
+    it "can securely connect to #{host}", :realworld do
+      Bundler::SSLCerts::CertificateManager.new.connect_to(host)
+    end
+  end
 end