sslv3 alert handshake failure

[massdonati]

hello, I'm having a weird issue with the latest jazzy. I get this error and I have no Idea what to do and google doesn't seem to help a lot.
Any help?

building search index
downloading coverage badge
/System/Library/Frameworks/Ruby.framework/Versions/2.0/usr/lib/ruby/2.0.0/net/http.rb:921:in `connect': SSL_connect returned=1 errno=0 state=SSLv2/v3 read server hello A: sslv3 alert handshake failure (OpenSSL::SSL::SSLError)
	from /System/Library/Frameworks/Ruby.framework/Versions/2.0/usr/lib/ruby/2.0.0/net/http.rb:921:in `block in connect'
	from /System/Library/Frameworks/Ruby.framework/Versions/2.0/usr/lib/ruby/2.0.0/timeout.rb:52:in `timeout'
	from /System/Library/Frameworks/Ruby.framework/Versions/2.0/usr/lib/ruby/2.0.0/net/http.rb:921:in `connect'
	from /System/Library/Frameworks/Ruby.framework/Versions/2.0/usr/lib/ruby/2.0.0/net/http.rb:862:in `do_start'
	from /System/Library/Frameworks/Ruby.framework/Versions/2.0/usr/lib/ruby/2.0.0/net/http.rb:851:in `start'
	from /System/Library/Frameworks/Ruby.framework/Versions/2.0/usr/lib/ruby/2.0.0/net/http.rb:582:in `start'
	from /Library/Ruby/Gems/2.0.0/gems/jazzy-0.7.5/lib/jazzy/doc_builder.rb:267:in `download_badge'
	from /Library/Ruby/Gems/2.0.0/gems/jazzy-0.7.5/lib/jazzy/doc_builder.rb:133:in `build_site'
	from /Library/Ruby/Gems/2.0.0/gems/jazzy-0.7.5/lib/jazzy/doc_builder.rb:161:in `build_docs_for_sourcekitten_output'
	from /Library/Ruby/Gems/2.0.0/gems/jazzy-0.7.5/lib/jazzy/doc_builder.rb:78:in `build'
	from /Library/Ruby/Gems/2.0.0/gems/jazzy-0.7.5/bin/jazzy:15:in `<top (required)>'
	from /usr/local/bin/jazzy:23:in `load'
	from /usr/local/bin/jazzy:23:in `<main>'

[johnfairh]

Hi - latest jazzy is 0.8.2 vs. the 0.7.5 above -- I don't think this will actually stop the problem above but does have a --no-download-badge flag that skips the download step.

[massdonati]

Same thing on 0.8.2

[jpsim]

I don't think this will actually stop the problem above but does have a --no-download-badge flag that skips the download step.

[johnfairh]

Looking at OpenSSL::SSL::SSLContext::METHODS the mac system Ruby 2.0.0p648 does not appear to support TLS v1.1 or TLS v1.2 [I hadn’t quite realized how old this version of ruby is!]. It looks like some (but not all...) of the shields.io/cloudflare servers require one of these: I was seeing intermittent failures late yesterday but today all seems fine. Ruby 2.2 has decent TLS support.

Maybe shields.io was just doing some reconfig; if this comes back then I think the only way to reliably get badges is to install a more modern version of Ruby or to hope Apple give us a new one soon.

[segiddins]

It's not the ruby version that's the issue per-se, it's the version of OpenSSL it was compiled with.

[jpsim]

From #765 (comment):

Perhaps shelling out to curl would be an acceptable solution.

[orta]

Yeah - I saw a tonne of these in CocoaDocs after CocoaPods/cocoadocs.org#508 - I ended up disabling the feature via --no-download-badge flag

[johnfairh]

Using curl sounds pragmatic. And if it fails print a message pointing user at the skip flag.

[jpsim]

Fixed in #830

[Nakilon]

Guys, I've got another gem telling me the same exception.
What is a proper solution for Mac OS? Do I have to switch to rbenv everywhere or should I update Mac OS and it already has Ruby updated?

[johnfairh]

High Sierra's Ruby includes a full set of SSL protocols.

[Nakilon]

Yeah, forgot to update my comment. I've upgraded from El Captain and issue is gone, and now it's even Ruby 2.3.3 instead of 2.0.0.