Forum: JRuby Intermittent OpenSSL::SSL::SSLError: certificate verify failed - JRuby/Windows Server 2008 R2

Announcement (2017-05-07): www.ruby-forum.com is now read-only since I unfortunately do not have the time to support and maintain the forum any more. Please see rubyonrails.org/community and ruby-lang.org/en/community for other Rails- und Ruby-related community platforms.
A1d3d284df3ab5d3deff90de29e96bfa?d=identicon&s=25 Tim Griffin (enwood)
on 2013-06-26 00:18
Hi all;

I have a Rails 3.2.12 application running under JRuby 1.7.2 under
Windows Server 2008 R2.

The application uses OpenSSL to call out to an HTTPS site (a payment
gateway) and in order to do so, it references a Certificate Authority
(CA) file pulled from http://curl.haxx.se/ca/cacert.pem.

The application works, as does the interaction with the HTTPS site, but
***on occasion*** it responds with the following error:

  certificate verify failed
  org/jruby/ext/openssl/SSLSocket.java:170:in `connect'

Can anyone offer any suggestions about why this would be an intermittent
error? Is it purely being triggered from a connectivity issue? Is there
some JVM cache of the CA file that is being refreshed at the wrong time?

I can't think what's making this unpredictably intermittent, so any
ideas would be welcome.

Tim
This topic is locked and can not be replied to.