From: merch-redmine@... Date: 2019-07-25T17:42:18+00:00 Subject: [ruby-core:93913] [Ruby master Bug#12687] OpenSSL::X509::Store wont load certificates from set_default_paths Issue #12687 has been updated by jeremyevans0 (Jeremy Evans). Status changed from Feedback to Closed I'm guessing `c_rehash` in this case refers to `sample/c_rehash.rb` in the ruby/openssl repository (or `sample/openssl/c_rehash.rb` in the ruby repository). ---------------------------------------- Bug #12687: OpenSSL::X509::Store wont load certificates from set_default_paths https://bugs.ruby-lang.org/issues/12687#change-80016 * Author: bararchy (Bar Hofesh) * Status: Closed * Priority: Normal * Assignee: * Target version: * ruby -v: "2.2.5" revision: 54072 * Backport: 2.1: UNKNOWN, 2.2: UNKNOWN, 2.3: UNKNOWN ---------------------------------------- Setting up a new instance of OpenSSL::X509::Store, and setting "set_default_paths" will not actually import any certificates into Store. Environment: Ubuntu 14.04 `File.dirname OpenSSL::Config::DEFAULT_CONFIG_FILE => "/usr/lib/ssl"` use the store to verify a certificate (store.verify(ssl_certificate)) returns false After manually doing: `Dir.glob("/usr/lib/ssl/certs/*").each do |cert| begin cert_store.add_file cert rescue Exception next end end` the verify returns true. -- https://bugs.ruby-lang.org/ Unsubscribe: