Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bundling gems constantly fails #1080

Closed
nirvdrum opened this issue Oct 3, 2013 · 3 comments
Closed

Bundling gems constantly fails #1080

nirvdrum opened this issue Oct 3, 2013 · 3 comments

Comments

@nirvdrum
Copy link
Contributor

nirvdrum commented Oct 3, 2013

This may very well be a problem with SSL handling on rubygems.org, but I'm providing debug output in the event that it isn't. GitHub Issues won't let me include the full text here, so I had to gist it up:

https://gist.github.com/nirvdrum/6818017

@headius
Copy link
Member

headius commented Oct 4, 2013

There's a lot of confusing information about this error online. It appears to be some issue with crypto in TLS where the previously-agreed-upon MAC is no longer valid, or something.

Most of the workarounds people recommend involve turning off TLS on the server or client.

For the moment, what I have for you to try is a patch to net/http that makes it avoid TLS:

diff --git a/lib/ruby/1.9/net/http.rb b/lib/ruby/1.9/net/http.rb
index 2087066..1ef193c 100644
--- a/lib/ruby/1.9/net/http.rb
+++ b/lib/ruby/1.9/net/http.rb
@@ -773,6 +773,7 @@ module Net   #:nodoc:
         end
         @ssl_context = OpenSSL::SSL::SSLContext.new
         @ssl_context.set_params(ssl_parameters)
+        @ssl_context.options = OpenSSL::SSL::OP_NO_TLSv1
         s = OpenSSL::SSL::SSLSocket.new(s, @ssl_context)
         s.sync_close = true
       end

@nirvdrum
Copy link
Contributor Author

nirvdrum commented Oct 4, 2013

I applied the patch, but still ran into the problem. Please see the latest trace here:

https://gist.github.com/nirvdrum/6825710

@kares
Copy link
Member

kares commented Jan 18, 2017

these have been resolved along the way ... let us know if I missed something and this is still relevant.

@kares kares closed this as completed Jan 18, 2017
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

No branches or pull requests

5 participants