From ce1be5d70deb792ca8f6912bd7a48c50cb19bad7 Mon Sep 17 00:00:00 2001
From: alro1965 <alro65@gmail.com>
Date: Mon, 4 May 2026 23:19:05 -0400
Subject: [PATCH] Security: enable SSL certificate verification for NGA
 downloads

---
 nga_fetch.py | 4 +---
 1 file changed, 1 insertion(+), 3 deletions(-)

diff --git a/nga_fetch.py b/nga_fetch.py
index 8504d5c..1f0b4ef 100644
--- a/nga_fetch.py
+++ b/nga_fetch.py
@@ -39,9 +39,7 @@ NGA_URL = (
     "&includeRemovals=false&output=json"
 )
 
-_SSL_CTX = ssl.create_default_context()
-_SSL_CTX.check_hostname = False
-_SSL_CTX.verify_mode    = ssl.CERT_NONE
+_SSL_CTX = ssl.create_default_context()  # verifica certificado SSL por defecto
 
 # ── Rumbos conocidos de enfilaciones Bocas de Ceniza / Rio Magdalena ─────────
 # Fuente: NGA Pub.110 Vol.D (Colombia) + geometria del canal DIMAR.