Skip to content

OpenSSL::SSL::SSLError when talking to github #189

Closed
rkh opened this Issue May 31, 2012 · 3 comments

4 participants

@rkh
rkh commented May 31, 2012

Running the following code on JRuby:

require 'open-uri'
open "https://api.github.com"

Results in a OpenSSL::SSL::SSLError: certificate verify failed.

Issue appears on 1.6.7.2, 1.7.0-preview1 and head, both in 1.8 and 1.9 mode, both on OSX 10.7 and Ubuntu.

See also http://travis-ci.org/#!/rkh/gh/jobs/1441018

@jsvd
jsvd commented May 31, 2012

I tried that on my setup and, strangely, fails miserabily on all my rvm rubies https://gist.github.com/2843908

Including jruby-1.6.7 and jruby-1.6.2

@sgonyea
sgonyea commented Jul 6, 2012

I've run into this issue separately. VERIFY_NONE will work with your example, but it's not ideal:

require 'open-uri'
open "https://api.github.com", ssl_verify_mode: OpenSSL::SSL::VERIFY_NONE

I could've sworn that there was a bug filed on this issue, but I can't seem to find it.

@BanzaiMan
JRuby Team member

On the master branch, this works (and denies the redirect):

$ jruby -S irb
irb(main):001:0> RUBY_DESCRIPTION
=> "jruby 1.7.0.RC1 (1.9.3p203) 2012-10-04 7152c18 on Java HotSpot(TM) 64-Bit Server VM 1.7.0_07-b10 [darwin-x86_64]"
irb(main):002:0> require 'open-uri'
=> true
irb(main):003:0> open "https://api.github.com"
RuntimeError: redirection forbidden: https://api.github.com -> http://developer.github.com
    from /Users/asari/Development/src/jruby/lib/ruby/1.9/open-uri.rb:216:in `open_loop'
    from /Users/asari/Development/src/jruby/lib/ruby/1.9/open-uri.rb:146:in `open_uri'
    from /Users/asari/Development/src/jruby/lib/ruby/1.9/open-uri.rb:677:in `open'
    from /Users/asari/Development/src/jruby/lib/ruby/1.9/open-uri.rb:33:in `open'
    from (irb):3:in `evaluate'
    from org/jruby/RubyKernel.java:1065:in `eval'
    from org/jruby/RubyKernel.java:1390:in `loop'
    from org/jruby/RubyKernel.java:1173:in `catch'
    from org/jruby/RubyKernel.java:1173:in `catch'
    from /Users/asari/Development/src/jruby/bin/jirb:13:in `(root)'

I'm closing this for now, but do let us know if further investigation is necessary.

@BanzaiMan BanzaiMan closed this Oct 5, 2012
@eregon eregon added a commit that referenced this issue Mar 1, 2016
@eregon eregon Squashed 'spec/ruby/' changes from d9a07bf..8d632d3
8d632d3 Fix a typo in Enumerable#grep specs
eb9a915 Clean up the entire spec temp dir when finished with mock dirs.
6793fc5 Add specs for constants with op assigns (2.0+ feature)
2428acb Duplicate grep_v block specs for grep.
f8fe203 Fix calls to close_read mistakenly copied as close_write.
6c483a1 Remove trailing spaces
aafde9a Setting umask seems unneeded for Dir specs
75c3c99 Fix indent and verify better the behavior of Dir.chdir without arguments
cafd965 Use full names in singleton_method_* fixtures to avoid confusion
793b0f5 Improve specs of Module#method_added and BasicObject#singleton_method_added
8c780f2 Fix namespace of BasicObject fixtures
19b3530 Unshare BasicObject#singleton_method_{added,removed,undefined}
7ec6446 Use ScratchPad instead of a global variable in Module#method_added spec
55bbe8d Merge pull request #199 from wied03/master
103e25a Test more block scenarios with super
2e3116d Remove unnecessary version guards
8d4cadb Prefer duplication to conditional code in specs
bb36c64 Merge pull request #197 from nobu/Numeric#step-error
33b90eb Numeric#step now raises TypeError
5940ab5 Fix lower version
dfb4e4b Merge pull request #196 from nobu/Numeric#step-error
bad02c6 Numeric#step will not raise ArgumentError
c559cd1 Fix location of version guard in Marshal#load
dc20179 Merge pull request #193 from unak/patch-1
51da767 Merge pull request #195 from iliabylich/reset-dollar-comma-gvar-back-to-nil
ef2bd56 Reset $, global variable back to nil to prevent IO.print from breaking.
44c6e32 taints float is 2.2 spec.
73e1e0b Specify Array#dig with non-numeric index
af15432 Merge pull request #191 from ruby/vais/masgn-const
86e0894 Wrap specs for multiple assignment to constants in a VariableSpecs module
fc1fee4 Add an example describing the behavior succinctly and a possible implementation for Fixnum#[]
e7b8c65 Merge pull request #192 from mame/fixnum-aref-negative
2900958 Merge pull request #190 from nobu/Symbol#match-fix
7604cbc check if the result is a MatchData
03f6140 Add some specs for `Fixnum#[]` when self is negative
4f8ca98 Add specs for multiple assignment to constants
51d46b1 New examples of Symbol#match since 2.4
7c797ee Merge pull request #189 from nobu/Symbol#match-fix
e450f73 Symbol#match will change at 2.4
e5db1f0 Merge pull request #187 from alex88/patch-1
0a9725a Add tests for Time.at with BigDecimal input

git-subtree-dir: spec/ruby
git-subtree-split: 8d632d36026879e617eae21ba913873e72a70dda
af839a0
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Something went wrong with that request. Please try again.