Ruby 企业版 + OpenSSL ->“证书验证失败”

Question

试图让 REE 与 SSL 很好地配合使用，我有点做噩梦。

每当我连接到 SSL 站点时：

require 'open-uri'
open 'https://www.google.com'

我收到以下错误：

/Users/jon/.rvm/rubies/ree-1.8.7-2011.03/lib/ruby/1.8/net/http.rb:586:in `connect': SSL_connect returned=1 errno=0 state=SSLv3 read server certificate B: certificate verify failed (OpenSSL::SSL::SSLError)
from /Users/jon/.rvm/rubies/ree-1.8.7-2011.03/lib/ruby/1.8/net/http.rb:586:in `connect'
from /Users/jon/.rvm/rubies/ree-1.8.7-2011.03/lib/ruby/1.8/net/http.rb:553:in `do_start'
from /Users/jon/.rvm/rubies/ree-1.8.7-2011.03/lib/ruby/1.8/net/http.rb:542:in `start'
from /Users/jon/.rvm/rubies/ree-1.8.7-2011.03/lib/ruby/1.8/open-uri.rb:242:in `open_http'
from /Users/jon/.rvm/rubies/ree-1.8.7-2011.03/lib/ruby/1.8/open-uri.rb:616:in `buffer_open'
from /Users/jon/.rvm/rubies/ree-1.8.7-2011.03/lib/ruby/1.8/open-uri.rb:164:in `open_loop'
from /Users/jon/.rvm/rubies/ree-1.8.7-2011.03/lib/ruby/1.8/open-uri.rb:162:in `catch'
from /Users/jon/.rvm/rubies/ree-1.8.7-2011.03/lib/ruby/1.8/open-uri.rb:162:in `open_loop'
from /Users/jon/.rvm/rubies/ree-1.8.7-2011.03/lib/ruby/1.8/open-uri.rb:132:in `open_uri'
from /Users/jon/.rvm/rubies/ree-1.8.7-2011.03/lib/ruby/1.8/open-uri.rb:518:in `open'
from /Users/jon/.rvm/rubies/ree-1.8.7-2011.03/lib/ruby/1.8/open-uri.rb:30:in `open'

它在 Ruby 1.9.2 或常规 1.8.7 下运行良好。如on the RVM OpenSSL page 所述，我尝试重新打包 OpenSSL 并安装 ree 以链接它，但它没有效果。我在 OS X 10.6.7 上，但在安装 OpenSolaris REE 时遇到了同样的问题。

任何建议将不胜感激。

Answer 1

听起来它没有正确获取受信任 CA 证书的位置 - REE 必须具有不同的编译默认位置，这对您的系统不正确。

---

为了后代：

通过下载http://curl.haxx.se/ca/cacert.pem复制到/opt/local/etc/openssl/cert.pem解决了OP的问题。