# Unknown\_ca exception when using client certificate in net::https

**URL:** <https://www.ruby-forum.com/t/unknown-ca-exception-when-using-client-certificate-in-net-https/192182>\
**Category:** Ruby\
**Created:** [July 25, 2010, 7:35pm UTC](https://www.ruby-forum.com/t/unknown-ca-exception-when-using-client-certificate-in-net-https/192182 "2010-07-25T19:35:28Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![William\_Sthe\_Better](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/w/b3f665/32.png) [@William\_Sthe\_Better](https://www.ruby-forum.com/u/William_Sthe_Better)\
**Post date:** [July 25, 2010, 7:35pm UTC](https://www.ruby-forum.com/t/unknown-ca-exception-when-using-client-certificate-in-net-https/192182/1 "2010-07-25T19:35:28Z")

</div>

Hello All,

I have using net::https in an Jruby program to connect an SSL web site  
required an client certificate. I got the required client certificate  
and tested it in IE and Firefox. In both IE and Firefox, it works  
fine. Then I tried to use it in my Jruby program by using net::https  
library. Below is my code:

uri = URI.parse( “[https://test.com/test2/request](https://test.com/test2/request)” )  
ds\_http = Net::HTTP.new uri.host, uri.port  
ds\_http.use\_ssl = true

File.open( “client\_cer.pem”, ‘rb’ ) do |f|  
keydata = f.read  
ds\_http.cert = OpenSSL::X509::Certificate.new(keydata)  
ds\_http.key = OpenSSL::PKey::RSA.new(keydata, nil)  
ds\_http.ca\_file = CA\_PATH  
end

res = ds\_http.start {|http| http.request(req, rqt) }

When I run it by using Jruby, I got below exception:

C:/atb/jruby-1.3.1/bin/…/lib/ruby/1.8/net/protocol.rb:135:in  
`rbuf_fill': Recei ved fatal alert: unknown_ca (IOError) from C:/atb/jruby-1.3.1/bin/../lib/ruby/1.8/net/protocol.rb: 134:in `rbuf  
\_fill’

If anybody have any idea would be great appreciated.

Thanks in advance,  
Jim

---

<div class="post-metadata">

**Author:** ![William\_Sthe\_Better](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/w/b3f665/32.png) [@William\_Sthe\_Better](https://www.ruby-forum.com/u/William_Sthe_Better)\
**Post date:** [July 27, 2010, 2:07pm UTC](https://www.ruby-forum.com/t/unknown-ca-exception-when-using-client-certificate-in-net-https/192182/2 "2010-07-27T14:07:25Z")

</div>

> C:/atb/jruby-1.3.1/bin/…/lib/ruby/1.8/net/protocol.rb:135:in  
> `rbuf_fill': Recei ved fatal alert: unknown_ca (IOError) from C:/atb/jruby-1.3.1/bin/../lib/ruby/1.8/net/protocol.rb: 134:in`rbuf  
> \_fill’

Does it work in MRI? Also note that the active\_merchant code uses CA’s  
if their code is any help demo-wise.  
-r