-
-
Notifications
You must be signed in to change notification settings - Fork 41
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
SSL verify error: 20 #29
Comments
That is an error when failed to verify the SSL certificate with OpenSSL.
Typically, the reason is missing of a certification file, like
/etc/ssl/cert.pem.
Have you tried other HTTP clients like curl to access to the endpoint?
What version of OpenSSL is installed?
2017年1月30日(月) 2:37 SANO,Masatoshi <notifications@github.com>:
… on travis ci environment I couldn't access https://api.github.com using
dexador.
does anyone know how to fix it?
detail https://github.com/snmsts/experiment/tree/dexador201701
—
You are receiving this because you are subscribed to this thread.
Reply to this email directly, view it on GitHub
<#29>, or mute the thread
<https://github.com/notifications/unsubscribe-auth/AAFhyu_1fgTKYyp4PBYL94zONGA1ekpwks5rXM5zgaJpZM4Lw2X1>
.
|
Thank you. I checked openssl version anad curl access. https://travis-ci.org/snmsts/experiment/builds/196384519
name of cert file? |
It may be related to SSLv3 is disabled by default in CL+SSL, so Dexador tries to connect with TLS 1.2. |
thank you. |
SSL verification of Dexador is quite new and not mature at all. |
Sure.I think I need to try sslv3 (don't know how though) and ask cl+ssl guys as well. |
This is because the cl-coveralls throw an error, X509_V_ERR_UNABLE_TO_GET_ISSUER_CERT_L in TravisCI. This problem is related to the following issue in dexador. fukamachi/dexador#29
This is because the cl-coveralls throw an error, X509_V_ERR_UNABLE_TO_GET_ISSUER_CERT_L in TravisCI. This problem is related to the following issue in dexador. fukamachi/dexador#29
I also have the same problem using mac os x sierra, updating /etc/ssl/certs.pem with the one in the repo and with OpenSSL 1.0.2k 26 Jan 2017, it works for me on https facebook, https api github but fail on google. The problem with google is that it seems that the one signing their certificate is Equifax Secure Certificate Authority and not geo trust, so for that case it was not working you can download here
I also have the Equifax Secure Certificate Authority, /etc/ssl/certs.pem but there is not in the one that you provide in this repo so if I use the one in my computer and the one download from geotrust it works well.
or
So the problem in this case was having the correct CA certificate |
For future searches: when using dexador behind an SSL proxy (like ZScaler), set the ca-path to the root certificate provided by your organization. Without specifying the ca-path: CL-USER> (dex:get "http://www.lisp.org")
; Debugger entered on #<CL+SSL:SSL-ERROR-VERIFY {10031E3D03}> Then again with ca-path specified: [1] CL-USER> (dex:get "http://www.lisp.org" :ca-path "/Users/Ron/Library/CloudStorage/OneDrive/Reference Materials/ZScalerRootCA.pem")
"<HTML>
<HEAD>
<title>John McCarthy, 1927-2011</title>
<STYLE type="text/css">
BODY {text-align: center}
</STYLE>
</HEAD>
<BODY>
<h1>John McCarthy</h1>
<img src="jmccolor.jpg" alt="a picture ...[sly-elided string of length 459]"
200 (8 bits, #xC8, #o310, #b11001000)
#<HASH-TABLE :TEST EQUAL :COUNT 10 {1003E617E3}>
#<QURI.URI.HTTP:URI-HTTPS https://www.lisp.org/>
NIL
|
on travis ci environment I couldn't access https://api.github.com using dexador.
does anyone know how to fix it?
detail https://github.com/snmsts/experiment/tree/dexador201701
The text was updated successfully, but these errors were encountered: