OpenSSL::X509::Store

        # OpenSSL::X509::Store < Object

(from ruby core)
---
The X509 certificate store holds trusted CA certificates used to verify
peer certificates.

The easiest way to create a useful certificate store is:

    cert_store = OpenSSL::X509::Store.new
    cert_store.set_default_paths

This will use your system's built-in certificates.

If your system does not have a default set of certificates you can
obtain a set extracted from Mozilla CA certificate store by cURL
maintainers here: https://curl.haxx.se/docs/caextract.html (You may wish
to use the firefox-db2pem.sh script to extract the certificates from a
local install to avoid man-in-the-middle attacks.)

After downloading or generating a cacert.pem from the above link you can
create a certificate store from the pem file like this:

    cert_store = OpenSSL::X509::Store.new
    cert_store.add_file 'cacert.pem'

The certificate store can be used with an SSLSocket like this:

    ssl_context = OpenSSL::SSL::SSLContext.new
    ssl_context.verify_mode = OpenSSL::SSL::VERIFY_PEER
    ssl_context.cert_store = cert_store

    tcp_socket = TCPSocket.open 'example.com', 443

    ssl_socket = OpenSSL::SSL::SSLSocket.new tcp_socket, ssl_context
---
# Class methods:

    new

# Instance methods:

    add_cert
    add_crl
    add_file
    add_path
    chain
    error
    error_string
    flags=
    purpose=
    set_default_paths
    time=
    trust=
    verify
    verify_callback
    verify_callback=

# Attributes:

    attr_reader chain
    attr_reader error
    attr_reader error_string
    attr_reader verify_callback