Solved a different cause of SSL_connect returned=1 errno=0 state=SSLv3 read server certificate B: certificate verify failed (OpenSSL::SSL::SSLError)

You get SSL_connect returned=1 errno=0 state=SSLv3 read server certificate B: certificate verify failed (OpenSSL::SSL::SSLError) or similar error when trying to request to a https endpoint but no any other people solutions you have found through googling seems to be able to fix it.

What I have found is that those blog posts and stackoverflow answers led me to the wrong direction. The problem is neither Ruby's false nor you misconfigured it. Instead, missing intermediate CA certificate is the cause of the problem.

To verify that you are having the same cause of problem that I had, try running these command and compare the results

$ ruby -rnet/http -e "puts Net::HTTP.get(URI('https://github.com'))"

$ ruby -rnet/http -e "puts Net::HTTP.get(URI('https://your_webserver'))"

If you get back proper result for the first command and get the same error for the second command. That's the same problem I had. If you get errors on both commands, this post won't help solving you problem.

What's happening is that Ruby doesn't have a certificate of the intermediate CA that is used to issue certificate of the server you are requesting to

Compare Certificate chain section of the result of these 2 commands

$ openssl s_client -connect github.com:443

$ openssl s_client -connect your_webserver.com:443

In github's server case, you will get 0 and 1. On the other hand, in your web server case, you probably get only 0. SSL certificate chains section of this nginx documentation page has a good explanation of the chain.

If you own that web server or has an access to it, go fix that and your ssl issue should be resolved. For nginx web server, the fix is described in the previous link.

Good luck.

Installing Ruby: cannot load such file -- [ openssl | zlib ]

If you like me, installed Ruby by compiling from source code manually, and found that this 2 errors when trying to install bundler

• cannot load such file -- openssl
• cannot load such file -- zlib

You missed configure make to compile with those 2 libraries. Follow these steps to fix this issue.

1. Remove the installed Ruby with make clean
2. Install libssl-dev with your OS's package manager of choice. E.g. apt-get install libssl-dev
3. Install zlib1g-dev with your OS's package manager of choice. E.g. apt-get install zlib1g-dev
4. Config make file to include openssl by go to ext/openssl and run ruby extconf.rb
5. Config make file to include zlib by go to ext/zlib and run ruby extconf.rb
6. Go back to ruby source code directory run make && make install
7. You should be able to successfully run gem install bundler

You can also do the same thing for readline. Install libreadline-dev and run extconf.rb in ext/readline

Tested with ruby 2.0.0p247

Credit:

• http://askubuntu.com/questions/261914/install-ruby-2-0-with-openssl-and-readline-support
• http://stackoverflow.com/questions/769496/ubuntu-noob-rails-install-fails-on-zlib