search

ActiveState / activeruby

The Ruby Programming Language
https://www.ruby-lang.org/
Other
8 stars 7 forks source link

No default OpenSSL CA file provided #2

Open allenatdecisiv opened 6 years ago

allenatdecisiv commented 6 years ago 
C:\>set | findstr "RUBY SSL"
OPENSSL_CONF=C:\Program Files\PostgreSQL\psqlODBC\0903\etc\openssl.cnf

C:\>ruby --version
ActiveRuby 2.3.4.0 provided by ActiveState https://www.ActiveState.com
 based on ruby 2.3.4p302 (2017-04-09 revision 58214) [x64-mingw32]

C:\>ruby -r openssl -e 'puts OpenSSL::OPENSSL_VERSION'
OpenSSL 1.0.2l  25 May 2017

C:\>ruby -r openssl -e 'puts OpenSSL::X509::DEFAULT_CERT_FILE'
C:/tools/msys64/home/gecko/AR-2.3.4.0-beta-win64-403482/local-lib/ssl/cert.pem

here's one of the main project issues relating to OpenSSL CA file issues, others (e.g. RubyInstaller) are similar: https://github.com/rubygems/rubygems/issues/1758

Generally, this issue revolves around an outdated or non-existent CA file which then causes Ruby OpenSSL certificate methods to fail (validate client, etc).

rawktron commented 6 years ago

Thanks again! Great repro steps.