Peter Krimmel created JRUBY-6270:
------------------------------------
Summary: certificate verify failed when trying to connect to
https://www.macys.com
Key: JRUBY-6270
URL: https://jira.codehaus.org/browse/JRUBY-6270
Project: JRuby
Issue Type: Bug
Components: OpenSSL
Affects Versions: JRuby 1.6.4, JRuby-OpenSSL 0.7
Reporter: Peter Krimmel
Priority: Minor
Attachments: cert.pem
When I attempt to connect to https://www.macys.com using VERIFY_PEER, I get
certificate verify failure. I am able to connect to other https connections ok.
I have pasted the code below and am attaching the pem file I'm using as my CA
root certs. I attempted this using jruby-openssl 0.7.4 and 0.7.5-dev
require 'net/https'
require 'uri'
url = URI.parse('https://www.macys.com')
http = Net::HTTP.new(url.host, url.port)
http.set_debug_output $stderr
http.use_ssl=true
http.ca_file = "/etc/pki/tls/cert.pem"
http.verify_mode = OpenSSL::SSL::VERIFY_PEER
http.start() do |http|
request = Net::HTTP::Get.new url.request_uri
response = http.request request # Net::HTTPResponse object
puts response
end
Note that I can run the following commands fine from the same machine:
openssl s_client -connect www.google.com:443 -CAfile "/etc/pki/tls/cert.pem"
openssl s_client -connect www.macys.com:443 -CAfile "/etc/pki/tls/cert.pem"
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators:
https://jira.codehaus.org/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
---------------------------------------------------------------------
To unsubscribe from this list, please visit:
http://xircles.codehaus.org/manage_email
