arv-ws should prefer system's CA certificates (if available).

closes #4340

diff --git a/sdk/python/arvados/events.py b/sdk/python/arvados/events.py
index f65486a7f1775e7cedb2bc3e40b2b5d7e9095c9e..f2e5afdff57c578afe38b93c29202b8536d42755 100644 (file)
--- a/sdk/python/arvados/events.py
+++ b/sdk/python/arvados/events.py
@@ -18,7 +18,8 @@ class EventClient(WebSocketClient):
                     config.get('ARVADOS_API_HOST_INSECURE', 'no')):
             ssl_options={'cert_reqs': ssl.CERT_NONE}
         else:
-            ssl_options={'cert_reqs': ssl.CERT_REQUIRED}
+            # Prefer system's CA certificates (if available)
+            ssl_options={'cert_reqs': ssl.CERT_REQUIRED, 'ca_certs': '/etc/ssl/certs/ca-certificates.crt' }
         super(EventClient, self).__init__(url, ssl_options=ssl_options)
         self.filters = filters
         self.on_event = on_event