的OpenSSL :: SSL :: SSLError - 所以SSL_connect返回= 1个错误号= 0状态= SSLv3的读取服务器证书B：证书验证失败

Question

我得到这个错误：

OpenSSL::SSL::SSLError 

SSL_connect returned=1 errno=0 state=SSLv3 read server certificate B: certificate verify failed 

Rails.application.config.middleware.use OmniAuth::Builder do 
    provider :facebook, 'MY_APPID', 'SECRET', {:scope => 'publish_stream,email', :client_options => {:ssl => {:ca_path => "#{Rails.root}/config/cacert.pem"}}} 
end 

行动：

def callback 
    session['fb_auth'] = request.env['omniauth.auth'] 
    session['fb_token'] = session['fb_auth']['credentials']['token'] 
    session['fb_error'] = nil 
render :text => request.env['omniauth.auth'].to_yaml 
end 

我一直在尝试了一些解决方案，像这样的问题：

Rails.application.config.middleware.use OmniAuth::Builder do 
    provider :facebook, 'MY_APPID', 'SECRET', {:scope => 'publish_stream,email', :client_options => {:ssl => {:verify => false}}} 
end 

和

Rails.application.config.middleware.use OmniAuth::Builder do 
    provider :facebook, 'MY_APPID', 'SECRET', {:scope => 'publish_stream,email', :client_options => {:ssl => {:ca_path => "#{Rails.root}/config/ca-bundle.crt"}}} 
end 

其中CA-包是：http://certifie.com/ca-bundle/ca-bundle.crt.txt

Rails.application.config.middleware.use OmniAuth::Builder do 
    provider :facebook, 'MY_APPID', 'SECRET', {:scope => 'publish_stream,email', :client_options => {:ssl => {:ca_path => "#{Rails.root}/config/cacert.pem"}}} 
end 

其中cacert.pem是：http://curl.haxx.se/ca/cacert.pem

我使用Windows 7是否有人对此有解决方案或我做错了什么。 .pem和.crt之间有什么不同？

Answer 1

Ruby找不到任何根证书。

下面是用于调试目的的另一种选择：

require 'openssl' 
OpenSSL::SSL::VERIFY_PEER = OpenSSL::SSL::VERIFY_NONE 

来源：https://stackoverflow.com/a/12032944/1047207（我的回答类似的问题）

你可能想看看这个Blog也。