Skip to content

Conversation

@cretz
Copy link
Member

@cretz cretz commented Oct 29, 2025

What was changed

There is an issue validating certs on macOS for Ruby 3.4. This works around the issue until Ruby 3.4.8 is released which will have the proper fix. Not linking other issues here in description, see comment in GH workflow file for more details.

Issue often appears like:

SSL_connect returned=1 errno=0 peeraddr=23.215.0.136:443 state=error: certificate verify failed (unable to get certificate CRL) {attempt: 1, namespace: "default", run_id: "019a5f30-11ce-7a64-9d1b-f00847d4e753", task_queue: "tq-b314ee42-8a52-439c-be49-61c838faa3ce", workflow_id: "wf-aea0f2b7-ebae-4836-8a59-485d1c01487d", workflow_type: "UnsafeIOWorkflow"} (OpenSSL::SSL::SSLError)

@cretz cretz force-pushed the macos-openssl-fix branch from 6bb9808 to 9907179 Compare October 29, 2025 16:48
@cretz cretz force-pushed the macos-openssl-fix branch 2 times, most recently from dc92d2e to a5de492 Compare November 7, 2025 16:31
@cretz cretz marked this pull request as ready for review November 7, 2025 16:32
@cretz cretz requested a review from a team as a code owner November 7, 2025 16:32
@cretz cretz force-pushed the macos-openssl-fix branch from a5de492 to e6f2387 Compare November 7, 2025 16:49
@cretz cretz force-pushed the macos-openssl-fix branch from e6f2387 to 9633c51 Compare November 7, 2025 17:02
def run_in_background: { (?) -> untyped } -> (Thread | Fiber)

def find_free_port: -> String
def find_free_port: -> Integer
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Just noting for myself here, this is correct now as TCPServer#addr returns [String, Integer, String, String]

Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Yeah, adding openssl as a gem caused RBS to get new sigs that changed a couple of things in this method

@cretz cretz merged commit 1274ac5 into temporalio:main Nov 7, 2025
7 checks passed
@cretz cretz deleted the macos-openssl-fix branch November 7, 2025 20:57
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants