{"id":85798,"library":"always-verify-ssl-certificates","title":"Always Verify SSL Certificates","description":"Ruby’s net/http is setup to never verify SSL certificates by default. Most ruby libraries do the same. That means that you’re not verifying the identity of the server you’re communicating with and are therefore exposed to man in the middle attacks. This gem monkey-patches net/http to force certificate verification and make turning it off impossible.","status":"active","version":"0.3.0","language":"ruby","source_language":null,"source_url":"https://github.com/jamesgolick/always_verify_ssl_certificates","tags":["ssl","security","net-http","monkey-patch"],"install":[{"cmd":"gem install always_verify_ssl_certificates","lang":"bash","label":"gem install"},{"cmd":"# Gemfile\ngem 'always_verify_ssl_certificates', '~> 0.3.0'","lang":"ruby","label":"Gemfile"}],"dependencies":[],"imports":[{"symbol":"AlwaysVerifySSLCertificates","correct":"require 'always_verify_ssl_certificates'"}],"quickstart":{"code":"require 'always_verify_ssl_certificates'\n# Now all Net::HTTP requests will verify SSL certificates automatically","lang":"ruby","description":"Require the gem to enforce SSL certificate verification globally"},"warnings":[{"fix":"Use only in production or where strict SSL verification is required; consider using an environment variable to conditionally load.","message":"Monkey-patches Net::HTTP globally, which may break code that relies on skipping verification (e.g., in development).","severity":"gotcha","affected_versions":">= 0.0.0"}],"env_vars":null,"search_vec":"'alway':1 'attack':48 'certif':4,14,57 'communic':37 'default':16 'expos':42 'forc':56 'gem':50 'http':69 'ident':31 'imposs':64 'librari':19 'make':60 'man':44 'mean':24 'middl':47 'monkey':52,71 'monkey-patch':51,70 'net':68 'net-http':67 'net/http':7,54 'never':11 'patch':53,72 're':27,36 'rubi':5,18 'secur':66 'server':34 'setup':9 'ssl':3,13,65 'therefor':41 'turn':61 'verif':58 'verifi':2,12,29","created_at":"2026-06-19T06:42:52.011871+00:00","updated_at":"2026-06-19T06:42:52.011871+00:00","problems":[],"ecosystem":"rubygems","meta_description":null,"install_score":null,"quickstart_score":null,"quickstart_tag":null,"pypi_latest":null,"cli_name":null,"cli_version":null,"type":"library","homepage":"http://github.com/jamesgolick/always_verify_ssl_certificates","github":"https://github.com/jamesgolick/always_verify_ssl_certificates","docs":"http://www.rubydoc.info/gems/always_verify_ssl_certificates/","changelog":null,"pypi":null,"npm":null,"openapi_spec":null,"status_page":null,"smithery":null,"categories":["networking","security"],"base_url":null,"auth_type":null,"provenance":{"verified_status":null,"verified_at":null,"last_verified":"2026-06-19","next_check":"2026-12-16","install_tag":null}}