--- build/gist	2014-06-29 23:42:21.158933799 +0800
+++ build/gist.ssl	2014-06-29 23:42:09.848935272 +0800
@@ -1536,7 +1536,8 @@
                  end
     if uri.scheme == "https"
       connection.use_ssl = true
-      connection.verify_mode = OpenSSL::SSL::VERIFY_NONE
+      connection.verify_mode = OpenSSL::SSL::VERIFY_PEER
+      connection.ca_file = "%%LOCALBASE%%/share/certs/ca-root-nss.crt"
     end
     connection.open_timeout = 10
     connection.read_timeout = 10