resolving private gem server ssl issue

May 08, 2012

Update: This has been fixed on RubyGems 1.8.24. See Issue #320.

If you’ve been following the Ruby news, the Ruby core team recently released security fixes for RubyGems. The fixes were:

We’re going to focus on the first fix. After upgrading to the latest patch, if you receive the following error message when attempting to install a gem from a private gem server:

Gem::RemoteFetcher::FetchError: SSL_connect returned=1 errno=0 state=SSLv3 read server certificate B: certificate verify failed (https://gems.privateserver.com/gems/some-gem-1.0.0.gem)

then you’ll need to do the following:

:ssl_ca_cert: /path/to/pem/file.pem

You should now be able to gem install the desired gem from your private gem server.