OpenSSL :: SSL :: SSLError-SSL_connect返回= 1 errno = 0狀態= SSLv3讀取服務器證書B：證書驗證失敗

Question

我收到此錯誤：

OpenSSL::SSL::SSLError

SSL_connect returned=1 errno=0 state=SSLv3 read server certificate B: certificate verify failed

Rails.application.config.middleware.use OmniAuth::Builder do  
  provider :facebook, 'MY_APPID', 'SECRET', {:scope => 'publish_stream,email', :client_options => {:ssl => {:ca_path => "#{Rails.root}/config/cacert.pem"}}}
end

那個行動：

def callback
  session['fb_auth'] = request.env['omniauth.auth']
  session['fb_token'] = session['fb_auth']['credentials']['token']
  session['fb_error'] = nil
render :text => request.env['omniauth.auth'].to_yaml  
end

我一直在嘗試一些解決此問題的方法，例如：

Rails.application.config.middleware.use OmniAuth::Builder do  
  provider :facebook, 'MY_APPID', 'SECRET', {:scope => 'publish_stream,email', :client_options => {:ssl => {:verify => false}}}
end

和

Rails.application.config.middleware.use OmniAuth::Builder do  
  provider :facebook, 'MY_APPID', 'SECRET', {:scope => 'publish_stream,email', :client_options => {:ssl => {:ca_path => "#{Rails.root}/config/ca-bundle.crt"}}}
end

其中ca-bundle是： http : //certifie.com/ca-bundle/ca-bundle.crt.txt

Rails.application.config.middleware.use OmniAuth::Builder do  
  provider :facebook, 'MY_APPID', 'SECRET', {:scope => 'publish_stream,email', :client_options => {:ssl => {:ca_path => "#{Rails.root}/config/cacert.pem"}}}
end

其中cacert.pem是： http ://curl.haxx.se/ca/cacert.pem

我正在使用Windows7。是否有人對此有解決方案，或者我做錯了什么。 .pem和.crt什么區別？

Answer 1

Ruby無法找到任何根證書。

這是用於調試目的的另一個選項：

require 'openssl'
OpenSSL::SSL::VERIFY_PEER = OpenSSL::SSL::VERIFY_NONE

來源： https : //stackoverflow.com/a/12032944/1047207 （我對類似問題的回答）

您可能還想看看這個博客 。