Ruby HTTP无法正确验证来自Google的证书

Question

我刚刚注意到我的Ruby代码无法验证来自Google的证书(Facebook工作得很好，就像普通的HTTP一样)。

✗ ruby -rnet/https -e "Net::HTTP.get URI('http://www.google.com')"
✗ ruby -rnet/https -e "Net::HTTP.get URI('https://www.facebook.com')"
✗ ruby -rnet/https -e "Net::HTTP.get URI('https://www.google.com')"  
/Users/ephracis/.rvm/rubies/ruby-2.2.2/lib/ruby/2.2.0/net/http.rb:923:in `connect': SSL_connect returned=1 errno=0 state=SSLv3 read server certificate B: certificate verify failed (OpenSSL::SSL::SSLError)
    from /Users/ephracis/.rvm/rubies/ruby-2.2.2/lib/ruby/2.2.0/net/http.rb:923:in `block in connect'
    from /Users/ephracis/.rvm/rubies/ruby-2.2.2/lib/ruby/2.2.0/timeout.rb:74:in `timeout'
    from /Users/ephracis/.rvm/rubies/ruby-2.2.2/lib/ruby/2.2.0/net/http.rb:923:in `connect'
    from /Users/ephracis/.rvm/rubies/ruby-2.2.2/lib/ruby/2.2.0/net/http.rb:863:in `do_start'
    from /Users/ephracis/.rvm/rubies/ruby-2.2.2/lib/ruby/2.2.0/net/http.rb:852:in `start'
    from /Users/ephracis/.rvm/rubies/ruby-2.2.2/lib/ruby/2.2.0/net/http.rb:583:in `start'
    from /Users/ephracis/.rvm/rubies/ruby-2.2.2/lib/ruby/2.2.0/net/http.rb:478:in `get_response'
    from /Users/ephracis/.rvm/rubies/ruby-2.2.2/lib/ruby/2.2.0/net/http.rb:455:in `get'

我在OS 10.11.1上运行ruby 2.2.2p95。

Answer 1

也许更多的是一种变通而不是答案，但至少它解决了我的问题：

安装ruby-head解决了这个问题：

rvm install ruby-head
rvm use ruby-head

我尝试重新安装我当前的ruby，2.2.2，也试图升级到2.2.3，但我仍然得到相同的错误。当前的ruby head指向2.3.0dev，这个版本似乎适合我。