make DEFAULT_CERT_STORE frozen and shareable

ruby · Nov 7, 2024 · b1c44db · b1c44db
1 parent d89f28c
commit b1c44db
Showing 1 changed file with 5 additions and 3 deletions.
diff --git a/lib/openssl/ssl.rb b/lib/openssl/ssl.rb
@@ -90,9 +90,11 @@ class SSLContext
         )
       end
 
-      DEFAULT_CERT_STORE = OpenSSL::X509::Store.new # :nodoc:
-      DEFAULT_CERT_STORE.set_default_paths
-      DEFAULT_CERT_STORE.flags = OpenSSL::X509::V_FLAG_CRL_CHECK_ALL
+      DEFAULT_CERT_STORE = OpenSSL::X509::Store.new.tap do |store| # :nodoc:
+        store.set_default_paths
+        store.flags = OpenSSL::X509::V_FLAG_CRL_CHECK_ALL
+        store.freeze
+      end
 
       # A callback invoked when DH parameters are required for ephemeral DH key
       # exchange.