Monkey patching use_ssl= method works for Net:HTTP but not for OpenURI in Ruby 1.9.3? -

-

background:

  • ruby 1.9.3
  • rails 3.2.16
  • windows 7 x64

issue

i'm trying fix infamous

ssl_connect returned=1 errno=0 state=sslv3 read server certificate b: certificate verify failed

error including certificates in each http request perform. monkey patch net::http#use_ssl=:

# lib/gem_ext/net_http.rb require 'open-uri' require 'net/https'  module net   class http     alias_method :original_use_ssl=, :use_ssl=      def use_ssl=(flag)       store = openssl::x509::store.new       store.set_default_paths # auto-include system cas.        dir[rails.root + 'config/certificates/*'].each |cert|         puts "adding cert: #{cert}"         store.add_cert(openssl::x509::certificate.new(file.read(cert)))       end        self.cert_store = store       self.verify_mode = openssl::ssl::verify_peer       self.original_use_ssl = flag     end   end end

now, requests performed using net::http, example:

> uri = uri.parse('https://internal-app/secure_url.json?foo=bar') > net::http.start(uri.host, uri.port, :read_timeout => 10.minutes, :use_ssl => uri.scheme == 'https') |http| >  http.request net::http::get.new(uri.request_uri) > end adding cert: config/certificates/cert1.cer adding cert: config/certificates/cert2.cer => #<net::httpok 200 ok readbody=true>

work perfectly.

however, when try use openuri, thought wrapper around net::http (and other io operations), such as:

> require 'open-uri'     > open('https://our-all/secure_url.json?foo=bar', 'r', :read_timeout => 10.minutes) adding cert: config/certificates/cert1.cer adding cert: config/certificates/cert2.cer #<class:0x870e2e0>: ssl_connect returned=1 errno=0 state=sslv3 read server certi   d:/ruby/ruby193/lib/ruby/1.9.1/net/http.rb:800:in `connect'   d:/ruby/ruby193/lib/ruby/1.9.1/net/http.rb:800:in `block in connect

so can see monkey patched method getting hit ("adding cert.."), still error. seems though else overriding it. ideas?

thanks

i managed come solution (a while now, hope still applicable).

according comments in code, needed monkey patch cert_store= "as use_ssl= net::http , openuri.open_httpcall these methods in different orders, need ensure certificates consistently added."

so, here solution:

module net   class http      alias_method :original_use_ssl=, :use_ssl=     def use_ssl=(flag)       store = openssl::x509::store.new       store.set_default_paths # auto-include system cas.       self.cert_store = store # include internal certificates.       self.verify_mode = openssl::ssl::verify_peer # force verification.       self.original_use_ssl = flag     end      alias_method :original_cert_store=, :cert_store=     def cert_store=(store)       dir[rails.root + 'config/certificates/*'].each |cert|         store.add_cert(openssl::x509::certificate.new(file.read(cert)))       end        self.original_cert_store = store     end   end end

hope helps


Comments

Post a Comment

Popular posts from this blog

python - Subclassed QStyledItemDelegate ignores Stylesheet -

-
i'm trying subclass qstyleditemdelegate remove focus rectangle in qcombobox . even though i'm calling base implementation of paint function , nothing else, result different. looks if parts of style-sheet influence bounding box of item taken consideration. class pstyleditemdelegate(qstyleditemdelegate): def __init__(self, *args, **kwds): super(pstyleditemdelegate, self).__init__(*args, **kwds) def paint(self, *args, **kwargs): qstyleditemdelegate.paint(*args, **kwargs) what have paint unmodified qstyleditemdelegate ? as suggested tried replacing pyside pyqt4 , works, appears bug. update pyside 1.1.2 1.2.1 result same. unfortunately switch breaks other parts of code, if there no other suggestions i'm going accept answer. edit bug tracked here
Read more

java - HttpClient 3.1 Connection pooling vs HttpClient 4.3.2 -

-
i have used httpclient3.1(java) connection pooling below : import org.apache.commons.httpclient.httpclient; import org.apache.commons.httpclient.multithreadedhttpconnectionmanager; import org.apache.commons.httpclient.params.httpclientparams; import org.apache.commons.httpclient.params.httpmethodparams; import org.apache.log4j.logger; public class httpclientmanager { private static logger logger = logger.getlogger(httpclientmanager.class); private static multithreadedhttpconnectionmanager connectionmanager = new multithreadedhttpconnectionmanager(); private static httpclientparams clientparams = new httpclientparams(); static { try { clientparams.makelenient(); clientparams.setauthenticationpreemptive(false); clientparams.setparameter(httpmethodparams.so_timeout, new integer(30000)); // set so_timeout clientparams.setparameter(httpmethodparams.head_body_check_timeout, new integer(3000)); // head responses ...
Read more

node.js - StackOverflow API not returning JSON -

-
i using node.js script gather data stackoverflow. know responses gzipped, put code in should take care of that. script follows: var request = require('request'); var zlib = require('zlib'); function getstackoverflowresponse(url, callback){ request(url, {encoding: null}, function(err, response, body){ if(response.headers['content-encoding'] == 'gzip'){ zlib.gunzip(body, function(err, dezipped) { callback(dezipped); }); } else { callback(body); } }); } var url = "https://api.stackexchange.com/docs/questions#pagesize=2&order=desc&min=2014-01-04&max=2014-02-02&sort=activity&tagged=apigee&filter=default&site=stackoverflow&run=true"; getstackoverflowresponse(url, function(questions) { console.log(questions); }); instead of getting json output, i'm getting following response: buffer 0d 0a 0d 0a 0d 0a 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48...
Read more