的OpenSSL :: SSL :: SSLError - 所以SSL_connect返回= 1個錯誤號= 0狀態= SSLv3的讀取服務器證書B：證書驗證失敗

Question

我得到這個錯誤：

OpenSSL::SSL::SSLError 

SSL_connect returned=1 errno=0 state=SSLv3 read server certificate B: certificate verify failed 

Rails.application.config.middleware.use OmniAuth::Builder do 
    provider :facebook, 'MY_APPID', 'SECRET', {:scope => 'publish_stream,email', :client_options => {:ssl => {:ca_path => "#{Rails.root}/config/cacert.pem"}}} 
end 

行動：

def callback 
    session['fb_auth'] = request.env['omniauth.auth'] 
    session['fb_token'] = session['fb_auth']['credentials']['token'] 
    session['fb_error'] = nil 
render :text => request.env['omniauth.auth'].to_yaml 
end 

我一直在嘗試了一些解決方案，像這樣的問題：

Rails.application.config.middleware.use OmniAuth::Builder do 
    provider :facebook, 'MY_APPID', 'SECRET', {:scope => 'publish_stream,email', :client_options => {:ssl => {:verify => false}}} 
end 

和

Rails.application.config.middleware.use OmniAuth::Builder do 
    provider :facebook, 'MY_APPID', 'SECRET', {:scope => 'publish_stream,email', :client_options => {:ssl => {:ca_path => "#{Rails.root}/config/ca-bundle.crt"}}} 
end 

其中CA-包是：http://certifie.com/ca-bundle/ca-bundle.crt.txt

Rails.application.config.middleware.use OmniAuth::Builder do 
    provider :facebook, 'MY_APPID', 'SECRET', {:scope => 'publish_stream,email', :client_options => {:ssl => {:ca_path => "#{Rails.root}/config/cacert.pem"}}} 
end 

其中cacert.pem是：http://curl.haxx.se/ca/cacert.pem

我使用Windows 7是否有人對此有解決方案或我做錯了什麼。 .pem和.crt之間有什麼不同？

Answer 1

Ruby找不到任何根證書。

下面是用於調試目的的另一種選擇：

require 'openssl' 
OpenSSL::SSL::VERIFY_PEER = OpenSSL::SSL::VERIFY_NONE 

來源：https://stackoverflow.com/a/12032944/1047207（我的回答類似的問題）

你可能想看看這個Blog也。