what is the reason behind using OpenSSL::SSL::VERIFY_NONE ? 
I think it should not disable certificate verification by default.