SSL Error When installing rubygems, Unable to pull data from 'https://rubygems.org/

Question

I am trying to do the Michael Hartl tutorial. When I attempt to install rails 3.2.14 in my gemset, I get the following issue:

$ gem install rails -v 3.2.14

ERROR: Could not find a valid gem 'rails' (= 3.2.14), here is why:

Unable to download data from https://rubygems.org/ - SSL_connect returned=1 errno=0 state=SSLv3 read server certificate B: certificate verify failed (https://s3.amazonaws.com/production.s3.rubygems.org/specs.4.8.gz)

After Googling around, I found that I could use a non-SSL source for rubygems so I ran:

sudo gem sources -a http://rubygems.org

Then, when I tried to install rails again, it was successful. However, I still got the issue above but as a warning:

WARNING: Unable to pull data from 'https://rubygems.org/': SSL_connect returned=1 errno=0 state=SSLv3 read server certificate B: certificate verify failed (https://s3.amazonaws.com/production.s3.rubygems.org/specs.4.8.gz)

How can I remove this warning/error entirely?

I am using the following:

• rvm 1.22.15
• ruby 2.0.0p247 (2013-06-27 revision 41674) [x86_64-darwin12.3.0]
• OSX 10.8.5

Answer 1

For RVM & OSX users

Make sure you use latest rvm:

rvm get stable

Then you can do two things:

1. Update certificates:

   rvm osx-ssl-certs update all
   

2. Update rubygems:

   rvm rubygems latest
   

---

For non RVM users

Find path for certificate:

cert_file=$(ruby -ropenssl -e 'puts OpenSSL::X509::DEFAULT_CERT_FILE')

Generate certificate:

security find-certificate -a -p /Library/Keychains/System.keychain > "$cert_file"
security find-certificate -a -p /System/Library/Keychains/SystemRootCertificates.keychain >> "$cert_file"

The whole code: https://github.com/wayneeseguin/rvm/blob/master/scripts/functions/osx-ssl-certs

---

For non OSX users

Make sure to update package ca-certificates. (on old systems it might not be available - do not use an old system which does not receive security updates any more)

Windows note

The Ruby Installer builds for windows are prepared by Luis Lavena and the path to certificates will be showing something like C:/Users/Luis/... check https://github.com/oneclick/rubyinstaller/issues/249 for more details and this answer https://stackoverflow.com/a/27298259/497756 for fix.