From: Pat Maddox <pergesu@...>
Date: 2006-06-05T04:32:37+09:00
Subject: Re: DRb over SSL

On 6/4/06, Pat Maddox <pergesu@gmail.com> wrote:
> I'm trying to set up DRb over SSL, following the guide at
> http://segment7.net/projects/ruby/drb/DRbSSL/.  When I create the
> DRbObject though, I get the error "drbssl://localhost:1111 -
> #<OpenSSL::SSL::SSLError: unknown protocol>"
>
> I'm requiring drb and drb/ssl, and you can see the connection string
> I'm using.  What's wrong with this?
>
> Pat
>
>

Okay I've gotten past that error.  Now I'm getting
"drbssl://localhost:1111 - #<OpenSSL::SSL::SSLError: sslv3 alert
unsupported certificate>"

My config for the server is
config = {
      :SSLVerifyMode => OpenSSL::SSL::VERIFY_PEER |
OpenSSL::SSL::VERIFY_FAIL_IF_NO_PEER_CERT,
      :SSLPrivateKey =>
OpenSSL::PKey::RSA.new(File.read("specs/certs/localhost/localhost_keypair.pem")),
      :SSLCertificate =>
OpenSSL::X509::Certificate.new(File.read("specs/certs/localhost/cert_localhost.pem")),
      :SSLCACertificateFile => "specs/certs/CA/cacert.pem"
    }

and my config for the client is
config = {
      :SSLVerifyMode => OpenSSL::SSL::VERIFY_PEER,
      :SSLCACertificateFile => ("specs/certs/CA/cacert.pem"),
      :SSLPrivateKey =>
          OpenSSL::PKey::RSA.new(File.read("specs/certs/username/username_keypair.pem")),
        :SSLCertificate =>
          OpenSSL::X509::Certificate.new(File.read("specs/certs/username/cert_username.pem"))
    }

It prompts me for the password when I create the server.  Then it
gives me that "unsupported certificate error" when I try to make a
remote call.  Any ideas?

Pat