Gem install fails with SSL certificate connection error

[PavelEmelyanov]

Hello, I'm having a problem. Today, when I try to execute "gem install ..." or "gem update" I have the following error:

C:\WINDOWS\system32>gem update --system
ERROR:  While executing gem ... (Gem::RemoteFetcher::FetchError)
    SSL_connect returned=1 errno=0 state=SSLv3 read server certificate B: certif
icate verify failed (https://api.rubygems.org/specs.4.8.gz)

or

C:\WINDOWS\system32>gem install sass compass
ERROR:  Could not find a valid gem 'sass' (>= 0), here is why:
          Unable to download data from https://rubygems.org/ - SSL_connect retur
ned=1 errno=0 state=SSLv3 read server certificate B: certificate verify failed (
https://api.rubygems.org/specs.4.8.gz)
ERROR:  Could not find a valid gem 'compass' (>= 0), here is why:
          Unable to download data from https://rubygems.org/ - SSL_connect retur
ned=1 errno=0 state=SSLv3 read server certificate B: certificate verify failed (
https://api.rubygems.org/specs.4.8.gz)

I've updated ruby, but is doesn't help.

This issue is related to:

• Network problems
• The command line gem

Here are my current environment details:
gem 2.4.5.1
ruby 2.2.5p319 (2016-04-26 revision 54774) [x64-mingw32]

Thanks

[segiddins]

You may need to update your Ruby to use a newer version of OpenSSL

[PavelEmelyanov]

Well, I found this on http://rubyinstaller.org/downloads/

If you don’t know what version to install and you’re getting started with Ruby, we recommend you use Ruby 2.2.X installers.

So I updated my ruby to 2.2.5, but it didn't help me. Should I update ruby to 2.3.1?

[ptrikutam]

I had a similar issue:

$ gem install bundler
ERROR:  Could not find a valid gem 'bundler' (>= 0), here is why:
          Unable to download data from https://rubygems.org/ - SSL_connect returned=1 errno=0 state=error: certificate verify failed (https://api.rubygems.org/specs.4.8.gz)

I'm running:
rvm 1.27.0
ruby ruby 2.3.1p112 (via RVM)
gem 2.6.7

I tried following a number of suggestions provided in #1050, including the solution here: https://gist.github.com/luislavena/f064211759ee0f806c88#installing-using-update-packages-new

None of those worked for me. Turns out my OS X certs were out of date, I guess.

The solution that worked for me is updating my OS X certs with brew (took the suggestions from here) :

brew update
brew install openssl
brew tap raggi/ale
brew install openssl-osx-ca

Then, doing a gem update --system and gem install bundler worked fine. Hope this helps.

[ckenst]

@ptrikutam thanks for the link to OpenSSL Errors and Rails – Certificate Verify Failed. Following the instructions for the section Use RVM to Fix SSL Certificates worked for me.

[ptrikutam]

@ckenst Glat to hear it. For what it's worth, using RVM to fix the certs didn't work for me, I had to use brew.

[NarineM]

I am getting similar error with gem install mysql2:

WARNING: Unable to pull data from 'https://rubygems.org/': SSL_connect returned =1 errno=0 state=SSLv3 read server certificate B: certificate verify failed
(https://api.rubygems.org/specs.4.8.gz)

Is this a temp issue and will go away? I am using 2.4.5 version of ruby gem. I was able to make gem download the mysql2 using [insecure] http by [redacted for security purposes]

But I do not think this could be used as long term solution.

[zymzxq]

Same error :(

[gorenm]

Same here.
Happens when trying to install bundler.

Windows 10
Ruby 2.2.4p230
gem 2.4.5.1

Edit: I was able to fix it by downloading the latest rubygems version (2.6.7) and updating from the downloaded gem.

[Azolo]

So, the reason why this is happening is because rubygems.org updated their SSL certificate and older versions don't have the updated certificate bundled.

If you're using a traditional OpenSSL distribution then updating it would likely pull in new certificates that include the new rubygems certificate.

If you're on Windows(where the certifications aren't included) or don't have or can't update system certifications for whatever reason, then you will have to update rubygems through other means. See https://gist.github.com/luislavena/f064211759ee0f806c88#installing-using-update-packages-new, but get a more recent updated package.

Unfortunately, there really isn't any other way to solve this issue other than updating your system certificates (impossible for typical Windows users), obtaining the new certificate manually, or through a manually updating rubygems.

Edit: Here's a quicklink download to the updated gem: https://rubygems.org/downloads/rubygems-update-2.6.7.gem

[PavelEmelyanov]

Thank you, manual updating of rubygem helped me.