Savon ruby gem 的“dh 键太小”答案

【问题标题】："dh key too small" with Savon ruby gemSavon ruby gem 的“dh 键太小”
【发布时间】：2019-09-06 06:39:57
【问题描述】：

升级到 Debian Buster 后，Savon 失败并显示：

SSL_connect returned=1 errno=0 state=error: dh key too small

/var/www/ws/capistrano/shared/bundle/ruby/2.5.0/gems/httpi-2.4.4/lib/httpi/adapter/net_http.rb:51:in `rescue in request'
/var/www/ws/capistrano/shared/bundle/ruby/2.5.0/gems/httpi-2.4.4/lib/httpi/adapter/net_http.rb:30:in `request'
/var/www/ws/capistrano/shared/bundle/ruby/2.5.0/gems/httpi-2.4.4/lib/httpi.rb:161:in `request'
/var/www/ws/capistrano/shared/bundle/ruby/2.5.0/gems/httpi-2.4.4/lib/httpi.rb:133:in `post'
/var/www/ws/capistrano/shared/bundle/ruby/2.5.0/gems/savon-2.12.0/lib/savon/operation.rb:94:in `block in call_with_logging'
/var/www/ws/capistrano/shared/bundle/ruby/2.5.0/gems/savon-2.12.0/lib/savon/request_logger.rb:12:in `log'
/var/www/ws/capistrano/shared/bundle/ruby/2.5.0/gems/savon-2.12.0/lib/savon/operation.rb:94:in `call_with_logging'
/var/www/ws/capistrano/shared/bundle/ruby/2.5.0/gems/savon-2.12.0/lib/savon/operation.rb:54:in `call'
/var/www/ws/capistrano/shared/bundle/ruby/2.5.0/gems/savon-2.12.0/lib/savon/client.rb:36:in `call'

我尝试通过更改 /etc/ssl/openssl.cnf

[system_default_sect]
#MinProtocol = TLSv1.2
#CipherString = DEFAULT@SECLEVEL=2
MinProtocol = None
CipherString = DEFAULT

但没有效果，我无法控制远程站点，因此无法更改 DH 密钥另请参阅相关的 Debian 错误： https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=907788

系统信息：

ruby version: ruby 2.5.5p157 (2019-03-15 revision 67260) [x86_64-linux-gnu]
savon version: 2.12.0

我也在这里输入了一个问题https://github.com/savonrb/savon/issues/914

【问题讨论】：

标签： ruby savon debian-buster

【解决方案1】：

起来！重启 ruby 进程所需的 /etc/ssl/openssl.cnf 中的更改，重启后错误消失了！

【讨论】：