SR client: Don't disable cert verification if no ssl.ca.location set

edenhill · edenhill · commit 2390427afe49 · 2019-04-11T14:27:38.000+02:00
This is a regression in v1.0.0
diff --git a/confluent_kafka/avro/cached_schema_registry_client.py b/confluent_kafka/avro/cached_schema_registry_client.py
@@ -101,7 +101,9 @@ def __init__(self, url, max_schemas_per_subject=1000, ca_location=None, cert_loc
         self.subject_to_schema_versions = defaultdict(dict)
 
         s = Session()
-        s.verify = conf.pop('ssl.ca.location', None)
+        ca_path = conf.pop('ssl.ca.location', None)
+        if ca_path is not None:
+            s.verify = ca_path
         s.cert = self._configure_client_tls(conf)
         s.auth = self._configure_basic_auth(conf)
 
