s/VERIFY_NONE/VERIFY_PEER/g as default

Author: josephruscio

lib/rack/reverse_proxy.rb

@@ -6,7 +6,7 @@ class ReverseProxy
     def initialize(app = nil, &b)
       @app = app || lambda { [404, [], []] }
       @paths = {}
-      @opts = {:preserve_host => false}
+      @opts = {:preserve_host => false, :verify_ssl => true}
       instance_eval &b if block_given?
     end
 
@@ -25,8 +25,16 @@ def call(env)
       headers['HOST'] = uri.host if @opts[:preserve_host]
 
       session = Net::HTTP.new(uri.host, uri.port)
+
       session.use_ssl = (uri.scheme == 'https')
-      session.verify_mode = OpenSSL::SSL::VERIFY_NONE
+
+      if uri.scheme == 'https' && @opts[:verify_ssl]
+        session.verify_mode = OpenSSL::SSL::VERIFY_PEER
+      else
+        # DO NOT DO THIS IN PRODUCTION !!!
+        session.verify_mode = OpenSSL::SSL::VERIFY_NONE
+      end
+
       session.start { |http|
         m = rackreq.request_method
         case m