Merge pull request #112 from edx/clintonb/ssl-es

Verifying SSL certificates for Elasticsearch

course_discovery/settings/production.py

@@ -3,6 +3,7 @@ import sys
 from logging.handlers import SysLogHandler
 from os import environ
 
+import certifi
 import yaml
 
 from course_discovery.settings.base import *
@@ -63,6 +64,10 @@ DB_OVERRIDES = dict(
 HAYSTACK_CONNECTIONS['default'].update({
     'URL': ELASTICSEARCH_URL,
     'INDEX_NAME': ELASTICSEARCH_INDEX_NAME,
+    'KWARGS': {
+        'verify_certs': True,
+        'ca_certs': certifi.where(),
+    },
 })
 
 for override, value in DB_OVERRIDES.items():

requirements/production.txt

 # Packages required in a production environment
 -r base.txt
 
+certifi==2016.2.28
 gevent==1.1.1
 gunicorn==19.4.5
 mysqlclient==1.3.7