janus Installing mustache error

Installing mustache error

Open camsong opened this issue 12 years ago • 19 comments

****************************************
*         Installing mustache          *
****************************************

rake aborted!
SSL_connect returned=1 errno=0 state=SSLv3 read server certificate B: certificate verify failed

Tasks: TOP => install => mustache:install
(See full trace by running task with --trace)
rake aborted!
Command failed with status (1): [rake install...]

Tasks: TOP => default
(See full trace by running task with --trace)
Rake failed.

I installed several times, all failed with above. It seems that I don't have a certificate, how to fix this？

Jan 14 '12 04:01 camsong

finally I solved by add this to the head of ~/.vim/Rakefile

require 'openssl'
OpenSSL::SSL::VERIFY_PEER = OpenSSL::SSL::VERIFY_NONE

then run cd ~/.vim and rake install. but i still don't know why the SSL Verify failed.

Jan 14 '12 15:01 camsong

on fresh Fedora 16, when running janus installation got same problem, camelsong's quick fix works... thx

Jan 22 '12 13:01 equivalent

I also had the problem, the rake task by camelsong fixed it.

Feb 01 '12 16:02 jocke

Yeah, same problem here. And again, camelsong's fix worked for me too.

Feb 17 '12 19:02 metasoarous

Adding my 2 cents: I'm on Mac OS X 10.5.8, running System Ruby, and adding @camelsong 's fix to the Rakefile also worked for me.

Mar 15 '12 18:03 melriffe

I just got stung by this too but the Rakefile modification worked.

@camelsong : why don't you submit a pull request for the fix?

Mac OSX 10.6.8 ruby 1.9.3p0

Apr 21 '12 15:04 inkredabull

@camelsong's fix worked for me, except for causing this in the output:

[~]/.vim/Rakefile:2: warning: already initialized constant VERIFY_PEER

I'm not that familiar with the internals of the openssl library, but seems like there should be some config to allow this so that you don't have to redefine a constant. Oh well, at least I can run rake with janus again.

May 06 '12 18:05 JangoSteve

I had this same issue and camelsong's fix was appropriate.

May 15 '12 17:05 brandonprry

I found a even better way to do this. before you install janus, run this first:

wget http://curl.haxx.se/ca/cacert.pem
export SSL_CERT_FILE=~/cacert.pem

Jul 05 '12 08:07 camsong

None of these "fixes" actually get to the root issue. Setting verify peer actually disables Certificate checking, and downloading an SSL cert bundle from the internet also jeopardizes security... as your machine is now trusting whatever certs are inside that bundle.

Jul 26 '12 03:07 cixelsyd

@cixelsyd you're more than welcome to come up with a better solution. As a matter of fact, 'pull request' it as a contribution! :-)

Jul 26 '12 14:07 inkredabull

yeah, same issue here :/

Oct 09 '12 08:10 theoreticaLee

+1 but the fix from @camsong did work

Oct 28 '12 19:10 forrest

Just encountered this issue on FreeBSD, fix from @camsong worked a treat.

Nov 11 '12 22:11 rosstimson

The missing certificates are Digicert's, which is the authority used to certify https://raw.github.com.

If you don't want to download the bundle from haxx.se, go to your browser's certificate management settings, locate the digicert entries (I have 3), and export them to a PEM file.

Then use @camsong 's second solution (export SSL_CERT_FILE ...).