From 64189592523d91ac21dd56c7e3eb4cc2c1de6603 Mon Sep 17 00:00:00 2001
From: "David J. Kalbfleisch" <1.21e9W@protonmail.com>
Date: Thu, 19 Jan 2023 16:22:43 -0500
Subject: [PATCH] squash

---
 lambda_functions/va_profile/va_profile_opt_in_out_lambda.py | 1 +
 1 file changed, 1 insertion(+)

diff --git a/lambda_functions/va_profile/va_profile_opt_in_out_lambda.py b/lambda_functions/va_profile/va_profile_opt_in_out_lambda.py
index fc6fda04d2..50ae8c51d2 100644
--- a/lambda_functions/va_profile/va_profile_opt_in_out_lambda.py
+++ b/lambda_functions/va_profile/va_profile_opt_in_out_lambda.py
@@ -125,6 +125,7 @@
         # ssl_context = ssl.create_default_context(capath=CA_PATH)
         # TODO - This is a workaround.  The capath approach doesn't seem to load anything.
         ssl_context = ssl.create_default_context(cafile=f"{CA_PATH}VA-Internal-S2-ICA11.cer")
+        ssl_context.load_verify_locations(cafile=f"{CA_PATH}VA-Internal-S2-RCA2.cer")
 
         with NamedTemporaryFile() as f:
             f.write(acm_response["Certificate"].encode())