topic Re: Ruby on rails SSL certificate verify failed in Integration and Testing

Ruby on rails SSL certificate verify failed

sbirochester — Tue, 22 Sep 2015 20:49:35 GMT

We use Ruby 1.9 and CIM integration method. as of last night we can't authorize any payments. We get the error:

SSL_connect returned=1 errno=0 state=SSLv3 read server certificate B: certificate verify failed
/usr/lib/ruby/1.9.1/net/http.rb:799:in `connect'

I have installed the root certificates from this post http://community.developer.authorize.net/t5/The-Authorize-Net-Developer-Blog/Production-Certificate-Upgrades-begin-May-27-2015/bc-p/50616

but continue to recieve the error.

any help would be appreciated.

Re: Ruby on rails SSL certificate verify failed

RichardH — Tue, 22 Sep 2015 21:02:09 GMT

Hello @sbirochester

Sorry to hear you're having trouble.

Do you know what version of OpenSSL you are using?

And where did you install the root certificates?

Richard

Re: Ruby on rails SSL certificate verify failed

sbirochester — Tue, 22 Sep 2015 21:18:19 GMT

Openssl 1.0.1

I moved them to /usr/share/ca-certificates/extra, then ran

sudo dpkg-reconfigure ca-certificates

Re: Ruby on rails SSL certificate verify failed

RichardH — Tue, 22 Sep 2015 21:33:41 GMT

Hello @sbirochester

A couple of suggestions. First, it appears you're using an unsupported version of Ruby. Merchants are strongly encouraged to keep their systems, tools and platforms up to date and fully patched to maintain PCI DSS compliance.

You may also wish to seek out a Ruby expert for advice on updating the certificate store properly.

Richard

Re: Ruby on rails SSL certificate verify failed

sbirochester — Tue, 22 Sep 2015 21:49:23 GMT

Which version(s) are supported?

Re: Ruby on rails SSL certificate verify failed

RichardH — Tue, 22 Sep 2015 21:58:46 GMT

You might check here: https://www.ruby-lang.org/en/news/2015/02/25/ruby-2-0-0-p643-is-released/

Richard