<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet href="/assets/atom.xsl" type="text/xsl"?><feed
	xmlns="http://www.w3.org/2005/Atom"
	xmlns:thr="http://purl.org/syndication/thread/1.0"
	xml:lang="en-US"
	><title>Sacha Chua - tag - troubleshooting</title>
	<subtitle>Emacs, sketches, and life</subtitle>
	<link rel="self" type="application/atom+xml" href="https://sachachua.com/blog/tag/troubleshooting/feed/atom/index.xml" />
  <link rel="alternate" type="text/html" href="https://sachachua.com/blog/tag/troubleshooting" />
  <id>https://sachachua.com/blog/tag/troubleshooting/feed/atom/index.xml</id>
  <generator uri="https://11ty.dev">11ty</generator>
	<updated>2014-06-09T12:00:44Z</updated>
<entry>
		<title type="html">SSL issues after moving to Ubuntu Precise</title>
		<link rel="alternate" type="text/html" href="https://sachachua.com/blog/2014/06/precise-ssl/"/>
		<author><name><![CDATA[Sacha Chua]]></name></author>
		<updated>2014-06-07T01:27:47Z</updated>
    <published>2014-06-09T12:00:44Z</published>
    <category term="geek" />
		<id>https://sachachua.com/blog/?p=27277</id>
		<content type="html"><![CDATA[<p>My Rails script for checking library due dates and renewing items stopped working the other day to BadGateway errors. While debugging I ended up going down this rabbit-hole of trying to upgrade RVM's OpenSSL and Ruby versions. <code>rvmsudo rvm pkg install openssl</code> failed in my production environment because the Linode VPS was now 64-bit, so even though I had the appropriate development libraries installed, the code still didn't compile. I tried all sorts of things like <code>rvm get head; rvm reload</code> and <code>gem update &#45;&#45;system</code>.</p>
<p>I kept running into errors like <code>There was an error while trying to resolve rubygems version for 'latest'.</code> when reinstalling Ruby and <code>/usr/bin/ld: cannot find -lz</code> when using RVM to reinstall OpenSSL (even though I had <code>zlib1g-dev</code> installed).</p>
<p>After an hour and a half of searching through StackOverflow and mailing list messages, I finally paid attention to the <code>curl</code> error message:</p>
<pre class="example">error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed
</pre>
<p>I searched for that and Ubuntu Precise. <b>As it turns out</b>, the upgrade from Ubuntu 10 to Ubuntu 12 resulted in <a href="https://bugs.launchpad.net/ubuntu/+source/openssl/+bug/1014640">some issues with Verisign-certified sites</a>. I know, I know, old news (almost two years old!) but I hadn't gotten around to upgrading off Lucid until recently.</p>
<p>Anyway, I followed the recommended steps to copy the text from <a href="https://knowledge.verisign.com/support/ssl-certificates-support/index?page=content&amp;id=AR1556">https://knowledge.verisign.com/support/ssl-certificates-support/index?page=content&amp;id=AR1556</a> into <code>/usr/local/share/ca-certificates/verisign.crt</code> and ran <code>update-ca-certificates</code>. After that, <code>rvm reinstall 2.0.0</code> worked, and so did my script.</p>
<p>Harumph! Anyway, I'm glad that's fixed.</p>
]]></content>
		</entry>
</feed>