使用heroku获取捆绑包上的无效证书错误

Question

我在云中有一个私有的gem存储库，可以通过https访问。证书是有效的并已签名。

问题是，在将使用此私有存储库的应用程序部署到Heroku时，我会得到以下输出：

Retrying source fetch due to error (2/3): Bundler::Fetcher::CertificateFailureError Could not verify the SSL certificate for https://mygemserver.com/.
  There is a chance you are experiencing a man-in-the-middle attack, but most likely your system doesn't have the CA certificates needed for verification. For information about OpenSSL certificates, see bit.ly/ruby-ssl. To connect without using SSL, edit your Gemfile sources and change 'https' to 'http'.
  Retrying source fetch due to error (3/3): Bundler::Fetcher::CertificateFailureError Could not verify the SSL certificate for https://mygemserver.com/.
  There is a chance you are experiencing a man-in-the-middle attack, but most likely your system doesn't have the CA certificates needed for verification. For information about OpenSSL certificates, see bit.ly/ruby-ssl. To connect without using SSL, edit your Gemfile sources and change 'https' to 'http'.
  Could not verify the SSL certificate for https://mygemserver.com/.
  There is a chance you are experiencing a man-in-the-middle attack, but most
  likely your system doesn't have the CA certificates needed for verification. For
  information about OpenSSL certificates, see bit.ly/ruby-ssl. To connect without
  using SSL, edit your Gemfile sources and change 'https' to 'http'.
  Bundler Output: Fetching source index from https://mygemserver.com/
  Retrying source fetch due to error (2/3): Bundler::Fetcher::CertificateFailureError Could not verify the SSL certificate for https://mygemserver.com/.
  There is a chance you are experiencing a man-in-the-middle attack, but most likely your system doesn't have the CA certificates needed for verification. For information about OpenSSL certificates, see bit.ly/ruby-ssl. To connect without using SSL, edit your Gemfile sources and change 'https' to 'http'.
  Retrying source fetch due to error (3/3): Bundler::Fetcher::CertificateFailureError Could not verify the SSL certificate for https://mygemserver.com/.
  There is a chance you are experiencing a man-in-the-middle attack, but most likely your system doesn't have the CA certificates needed for verification. For information about OpenSSL certificates, see bit.ly/ruby-ssl. To connect without using SSL, edit your Gemfile sources and change 'https' to 'http'.
  Could not verify the SSL certificate for https://mygemserver.com/.
  There is a chance you are experiencing a man-in-the-middle attack, but most
  likely your system doesn't have the CA certificates needed for verification. For
  information about OpenSSL certificates, see bit.ly/ruby-ssl. To connect without
  using SSL, edit your Gemfile sources and change 'https' to 'http'.
  !
  !     Failed to install gems via Bundler.
  !

  !     Push rejected, failed to compile Ruby app

看起来它无法验证证书。我在本地也遇到了同样的问题，可以通过运行'rvm osx-ssl-certs update‘来修复。此命令更新系统识别的证书捆绑包。我如何在Heroku中重现这种行为？

Answer 1

事实证明，我们能够通过将由comodo提供的中间证书附加到证书本身来修复此问题。