Ruby Imap OpenSSL::SSL::SSLError：读取服务器证书 B：证书验证失败

Question

I am trying to use IMAP and it does not work. I tried the same with 'https' and it worked.

---

require 'net/imap' 
=> true
irb(main):002:0> Net::IMAP.new("xxx", 993, true).login("redmine", "redmine")
OpenSSL::SSL::SSLError: SSL_connect returned=1 errno=0 state=SSLv3 read server certificate B: certificate verify failed
    from /usr/local/lib/ruby/1.9.1/net/imap.rb:1439:in `connect'
    from /usr/local/lib/ruby/1.9.1/net/imap.rb:1439:in `start_tls_session'
    from /usr/local/lib/ruby/1.9.1/net/imap.rb:1036:in `initialize'
    from (irb):2:in `new'
    from (irb):2
    from /usr/local/bin/irb:12:in `<main>'
irb(main):003:0> 

---

ruby 1.9.3p0 (2011-10-30 revision 33570) [x86_64-linux]
gem -v 1.8.24

This is similar to: https://www.chiliproject.org/boards/1/topics/2076

---

openssl s_client -connect klevas.mif.vu.lt:imaps 

shows that the certificate expired. However, on another system, where Ruby and Gem are the same, the IMAP connection works.

Answer 1

试试这个： imap = Net::IMAP.new('xxx', {:ssl => {:verify_mode => 0 }})

Answer 2

If we are discussing redmine here the following was helpful.

In lib/redmine/imap.rb on line 29 there was a call

imap = Net::IMAP.new(host, port, ssl)

according to the information learned from /usr/lib/ruby/1.9.1/net/imap.rb

    def initialize(host, port_or_options = {},
               usessl = false, certs = nil, verify = true)

I changed it to

imap = Net::IMAP.new(host, port, ssl, nil, false)

and the error was gone