Allow non-SSL connection with TimestampService

AjuntamentdeBarcelona · Jan 21, 2025 · 72a40f3 · 72a40f3
1 parent 7ddd5e7
commit 72a40f3
Showing 1 changed file with 9 additions and 1 deletion.
diff --git a/app/services/timestamp_service.rb b/app/services/timestamp_service.rb
@@ -80,10 +80,18 @@ def timestamp_service_url
     Rails.application.secrets.timestamp_service_url
   end
 
+  def skip_ssl_verification?
+    Decidim::Env.new("TIMESTAMP_SERVICE_SKIP_SSL").present?
+  end
+
   def timestamp_response
     return Time.current.to_s unless timestamp_service_url
 
-    resp = Faraday.post timestamp_service_url do |request|
+    connection = Faraday.new do |faraday|
+      faraday.ssl.verify = false if skip_ssl_verification?
+    end
+
+    resp = connection.post(timestamp_service_url) do |request|
       request.headers["Content-Type"] = "text/xml"
       request.body = request_message
     end