ubuntu - 来自命令行的 ruby​​gems.org 超时问题——SSL 问题？

Question

多年来我一直不需要使用 Linux，但现在我正在创建一台 Linux 机器，这样我就可以运行 Ruby on Rails。我正在使用 Ubuntu 18.04。我以为我已经加载了所有内容并正在尝试创建我的第一个 Rails 项目，但我在以下过程中遇到了错误:

run bundle install --local
Traceback (most recent call last):
    19: from /usr/bin/rails:9:in `<main>'
    18: from /usr/lib/ruby/2.5.0/rubygems/core_ext/kernel_require.rb:59:in `require'
    17: from /usr/lib/ruby/2.5.0/rubygems/core_ext/kernel_require.rb:59:in `require'
    16: from /usr/lib/ruby/vendor_ruby/rails/cli.rb:14:in `<top (required)>'
    15: from /usr/lib/ruby/2.5.0/rubygems/core_ext/kernel_require.rb:59:in `require'
    14: from /usr/lib/ruby/2.5.0/rubygems/core_ext/kernel_require.rb:59:in `require'
    13: from /usr/lib/ruby/vendor_ruby/rails/commands/application.rb:17:in `<top (required)>'
    12: from /usr/lib/ruby/vendor_ruby/thor/base.rb:444:in `start'
    11: from /usr/lib/ruby/vendor_ruby/thor/group.rb:232:in `dispatch'
    10: from /usr/lib/ruby/vendor_ruby/thor/invocation.rb:133:in `invoke_all'
     9: from /usr/lib/ruby/vendor_ruby/thor/invocation.rb:133:in `map'
     8: from /usr/lib/ruby/vendor_ruby/thor/invocation.rb:133:in `each'
     7: from /usr/lib/ruby/vendor_ruby/thor/invocation.rb:133:in `block in invoke_all'
     6: from /usr/lib/ruby/vendor_ruby/thor/invocation.rb:126:in `invoke_command'
     5: from /usr/lib/ruby/vendor_ruby/thor/command.rb:27:in `run'
     4: from (eval):1:in `run_bundle'
     3: from /usr/lib/ruby/vendor_ruby/rails/generators/app_base.rb:351:in `run_bundle'
     2: from /usr/lib/ruby/vendor_ruby/rails/generators/app_base.rb:335:in `bundle_command'
     1: from /usr/lib/ruby/2.5.0/rubygems/core_ext/kernel_require.rb:59:in `require'
/usr/lib/ruby/2.5.0/rubygems/core_ext/kernel_require.rb:59:in `require': cannot load such file -- bundler (LoadError)
chris@linuxbox:~/Sites$

深入研究问题后，我发现我与 gem 之间存在通信问题。我无法从命令行与 ruby​​gems.org 通信!我尝试的所有操作似乎都超时了，但我从浏览器访问 ruby​​gems.org 没有问题。

我尝试安装 bundler ，但得到了这个(经过漫长的等待):

chris@linuxbox:~/Sites$ gem install bundler
ERROR:  Could not find a valid gem 'bundler' (>= 0), here is why:
          Unable to download data from https://rubygems.org/ - timed out (https://api.rubygems.org/specs.4.8.gz)
chris@linuxbox:~/Sites$

我做了更多的挖掘，想知道我是否遇到了 OpenSSL 问题。这是 eval 语句的输出:

chris@linuxbox:~/Sites$ ruby -ropen-uri -e 'eval open("https://git.io/vQhWq").read'
Here's your Ruby and OpenSSL environment:

Ruby:           2.5.1p57 (2018-03-29 revision 63029) [x86_64-linux]
RubyGems:       2.7.7
Bundler:        1.16.2
Compiled with:  OpenSSL 1.1.0g  2 Nov 2017
Loaded version: OpenSSL 1.1.0g  2 Nov 2017
SSL_CERT_FILE:  /usr/lib/ssl/cert.pem
SSL_CERT_DIR:   /usr/lib/ssl/certs

With that out of the way, let's see if you can connect to rubygems.org...

Bundler connection to rubygems.org:       failed  ❌  (execution expired)
RubyGems connection to rubygems.org:      failed  ❌  (timed out (https://rubygems.org))
Ruby net/http connection to rubygems.org: failed  ❌

Unfortunately, this Ruby can't connect to rubygems.org. 😡
Even worse, we're not sure why. 😕

Here's the full error information:
Net::OpenTimeout: execution expired
  /home/chris/.rvm/rubies/ruby-2.5.1/lib/ruby/2.5.0/net/http.rb:937:in `initialize'
  /home/chris/.rvm/rubies/ruby-2.5.1/lib/ruby/2.5.0/net/http.rb:937:in `open'
  /home/chris/.rvm/rubies/ruby-2.5.1/lib/ruby/2.5.0/net/http.rb:937:in `block in connect'
  /home/chris/.rvm/rubies/ruby-2.5.1/lib/ruby/2.5.0/timeout.rb:103:in `timeout'
  /home/chris/.rvm/rubies/ruby-2.5.1/lib/ruby/2.5.0/net/http.rb:935:in `connect'
  /home/chris/.rvm/rubies/ruby-2.5.1/lib/ruby/2.5.0/net/http.rb:920:in `do_start'
  /home/chris/.rvm/rubies/ruby-2.5.1/lib/ruby/2.5.0/net/http.rb:915:in `start'
  (eval):90:in `<main>'
  -e:1:in `eval'
  -e:1:in `<main>'

You might have more luck using Mislav's SSL doctor.rb script. You can get it here:
https://github.com/mislav/ssl-tools/blob/8b3dec4/doctor.rb
Read more about the script and how to use it in this blog post:
https://mislav.net/2013/07/ruby-openssl/

我在该输出的末尾下载并运行了 doctor.rb 脚本，它是这样说的:

chris@linuxbox:~/Sites$ ruby doctor.rb 
/home/chris/.rvm/rubies/ruby-2.5.1/bin/ruby (2.5.1-p57)
OpenSSL 1.1.0g  2 Nov 2017: /usr/lib/ssl
SSL_CERT_DIR=""
SSL_CERT_FILE=""

HEAD https://status.github.com:443
#<Net::HTTPGatewayTimeOut 504 GATEWAY_TIMEOUT readbody=true>
chris@linuxbox:~/Sites$ 

那么我的 SSL 问题是否正确？我该如何解决这个问题？

Answer 1

我遇到了同样的问题，几乎与您提到的输出和命令完全相同。

这是在系统更新之后。我认为问题是将 openssl 更新到 1.1.1b，但我不太确定，因为其他软件也已更新。

我试过类似的东西

openssl s_client -connect www.rubygems.com:443

和

wget https://rubygems.org/rubygems/rubygems-2.7.7.tgz

我注意到它会在大约 2 分钟后连接。

我随便看了 wget 输出并赞赏它在切换到 ipv4 地址时起作用。

所以我搜索了如何在 Linux 上更喜欢 ipv4 而不是 ipv6，并且似乎它可能在基于 glibc 的系统上替换行:

优先级::ffff:0:0/96 10

通过

优先级::ffff:0:0/96 100

(10 到 100)

上

/etc/gai.conf

之后就可以正常使用ruby了。

希望对你有所帮助。