ruby-on-rails - 使用 heroku bundle 时出现无效证书错误

Question

我有一个托管在云端的私有(private) gem 存储库，可通过 https 访问。证书有效且已签名。

问题是在将使用此私有(private)存储库的应用程序部署到 Heroku 时，我得到以下输出:

Retrying source fetch due to error (2/3): Bundler::Fetcher::CertificateFailureError Could not verify the SSL certificate for https://mygemserver.com/.
  There is a chance you are experiencing a man-in-the-middle attack, but most likely your system doesn't have the CA certificates needed for verification. For information about OpenSSL certificates, see bit.ly/ruby-ssl. To connect without using SSL, edit your Gemfile sources and change 'https' to 'http'.
  Retrying source fetch due to error (3/3): Bundler::Fetcher::CertificateFailureError Could not verify the SSL certificate for https://mygemserver.com/.
  There is a chance you are experiencing a man-in-the-middle attack, but most likely your system doesn't have the CA certificates needed for verification. For information about OpenSSL certificates, see bit.ly/ruby-ssl. To connect without using SSL, edit your Gemfile sources and change 'https' to 'http'.
  Could not verify the SSL certificate for https://mygemserver.com/.
  There is a chance you are experiencing a man-in-the-middle attack, but most
  likely your system doesn't have the CA certificates needed for verification. For
  information about OpenSSL certificates, see bit.ly/ruby-ssl. To connect without
  using SSL, edit your Gemfile sources and change 'https' to 'http'.
  Bundler Output: Fetching source index from https://mygemserver.com/
  Retrying source fetch due to error (2/3): Bundler::Fetcher::CertificateFailureError Could not verify the SSL certificate for https://mygemserver.com/.
  There is a chance you are experiencing a man-in-the-middle attack, but most likely your system doesn't have the CA certificates needed for verification. For information about OpenSSL certificates, see bit.ly/ruby-ssl. To connect without using SSL, edit your Gemfile sources and change 'https' to 'http'.
  Retrying source fetch due to error (3/3): Bundler::Fetcher::CertificateFailureError Could not verify the SSL certificate for https://mygemserver.com/.
  There is a chance you are experiencing a man-in-the-middle attack, but most likely your system doesn't have the CA certificates needed for verification. For information about OpenSSL certificates, see bit.ly/ruby-ssl. To connect without using SSL, edit your Gemfile sources and change 'https' to 'http'.
  Could not verify the SSL certificate for https://mygemserver.com/.
  There is a chance you are experiencing a man-in-the-middle attack, but most
  likely your system doesn't have the CA certificates needed for verification. For
  information about OpenSSL certificates, see bit.ly/ruby-ssl. To connect without
  using SSL, edit your Gemfile sources and change 'https' to 'http'.
  !
  !     Failed to install gems via Bundler.
  !

  !     Push rejected, failed to compile Ruby app

看起来它无法验证证书。我在本地遇到了同样的问题，可以通过运行“rvm osx-ssl-certs update”来解决。此命令更新系统识别的证书包。如何在 Heroku 中重现此行为？

Answer 1

事实证明，我们能够通过将 comodo 提供的中间证书附加到证书本身来解决此问题。