ruby - connect: SSL_connect returned=1 errno=0 state=SSLv3 read server certificate B: certificate verify failed (OpenSSL::SSL::SSLError) -


i'm having terrible time getting ssl verify certificate. i'm ignorant on how certificates work that's major handicap begin with. here's error when running script:

c:/ruby191/lib/ruby/1.9.1/net/http.rb:611:in `connect': ssl_connect returned=1 e rrno=0 state=sslv3 read server certificate b: certificate verify failed (openssl ::ssl::sslerror)

here's relevant code:

client = savon::client.new order_svc  request = client.create_empty_cart { |soap, http|   http.auth.ssl.cert_file = 'mycert.crt'   http.auth.ssl.verify_mode = :none   http.read_timeout = 90   http.open_timeout = 90   http.headers = { "content-length" => "0", "connection" => "keep-alive" }   soap.namespaces["xmlns:open"] = "http://schemas.datacontract.org/2004/07/namespace"   soap.body = {       "wsdl:brand" => brand,       "wsdl:parnter" => [         {"open:catalogname" => catalogname, "open:partnerid" => partnerid }       ] }.to_soap_xml        }

any appreciated.

check cert.pem , key.pem

the cert key should have one

-----begin certificate----- miifgdccbacgawibagikg1diagaaaaaaazanbgkqhkig9w0baqsfadcbvdekmcig .... -----end certificate-----

your key.pem should have 

-----begin private key----- csqgsib3dqejaryvy2fjb250ywn0qgvzy3jlzw4uy29tmqswcqydvqqgewjvuzep .... -----end private key-----

and may have certs in doesn't matter case. (although me curl doesn't work without certs) webservice talking has root ca, client auth keys not trusted why certs make curl work.

getting out of client certificate caused me problems.

here worked me.

openssl pkcs12 -in client.pfx -clcerts -nokeys -out cert.pem openssl pkcs12 -in client.pfx -nodes -out key.pem

each prompt import password , can set pem password if want. (you have set in ruby code later)

require 'savon' client = savon::client.new "https://service/service.asmx?wsdl" client.http.auth.ssl.cert_key_file = "key.pem" client.http.auth.ssl.cert_file = "cert.pem" client.http.auth.ssl.verify_mode=:peer  p client.wsdl.soap_actions

you can test curl

curl -v  -e  key.pem  https://services/service.asmx?wsdl

Comments

Post a Comment

Popular posts from this blog

asp.net - repeatedly call AddImageUrl(url) to assemble pdf document -

i'm using abcpdf , i'm curious if can recursively call addimageurl() function assemble pdf document compile multiple urls? something like: int pagecount = 0; int theid = thedoc.addimageurl("http://stackoverflow.com/search?q=abcpdf+footer+page+x+out+of+", true, 0, true); //assemble document while (thedoc.chainable(theid)) { thedoc.page = thedoc.addpage(); theid = thedoc.addimagetochain(theid); } pagecount = thedoc.pagecount; console.writeline("1 document page count:" + pagecount); //flatten document (int = 1; <= pagecount; i++) { thedoc.pagenumber = i; thedoc.flatten(); } //now try again theid = thedoc.addimageurl("http://stackoverflow.com/questions/1980890/pdf-report-generation", true, 0, true); //assemble document while (thedoc.chainable(theid)) { thedoc.page = thedoc.addpage(); theid = thedoc.addimagetoc...
Read more

java - Android recognize cell phone with keyboard or not? -

in android app, want detect user's device if device has keyboard(like motorola milestone) , show corresponding user interface. guys know how that? ! regards justicepenny http://developer.android.com/reference/android/content/res/configuration.html public int keyboard the kind of keyboard attached device. 1 of: keyboard_nokeys, keyboard_qwerty, keyboard_12key. that's it!
Read more

iphone - How would you achieve a LED Scrolling effect? -

how achieve led scrolling effect example below? led sign - led ticker emulator iphone , ipad http://img.skitch.com/20101201-rsfh4p1bajb1wp94k466pdpiuj.preview.jpg sometimes remunerates comment in other posts :) have put code you, should implement font '8pin matrix' realistic feeling. uilabel *label; - (void)viewdidload { [super viewdidload]; label = [[uilabel alloc]initwithframe:cgrectmake(10, 50, 300, 20)]; label.font = [uifont fontwithname:@"courier-bold" size:16.0]; label.backgroundcolor = [uicolor blackcolor]; label.textcolor = [uicolor greencolor]; label.linebreakmode = uilinebreakmodecharacterwrap; // otherwise "…" label.text = @"this led text scrolled "; // blanks space between [self.view addsubview:label]; [nstimer scheduledtimerwithtimeinterval:0.12f target:self selector:@selector(scrolllabel) use...
Read more