#rubygems on 2013-10-17 — irc logs at freenode.irclog.whitequark.org

2013-10-14 22:50 drbrain changed the topic of #rubygems to: RubyGems 2.1.9: http://bit.ly/rubygems-2-1-9 CVE-2013-4363: http://bit.ly/CVE-2013-4363 - Latest status: http://twitter.com/rubygems_status and http://status.rubygems.org

00:06 havenwood has quit [Remote host closed the connection]

00:07 havenwood has joined #rubygems

00:11 havenwood has quit [Ping timeout: 260 seconds]

00:14 <mpapis> drbrain, you made me curious !

00:14 <drbrain> mpapis: one second, I will push

00:14 <drbrain> well, couple minutes

00:15 <mpapis> sue

00:26 brianwong has joined #rubygems

00:26 <brianwong> im getting intermitten SSL certificate verification errors

00:27 <brianwong> from one of my servers when trying to run 'bundle install'

00:27 <brianwong> but 'openssl s_client -connect rubygems.org:443' always returns "Verified"

00:27 <brianwong> anyone else having trouble?

00:28 <mpapis> brianwong, http://stackoverflow.com/questions/19150017/ssl-error-when-installing-rubygems-unable-to-pull-data-from-https-rubygems-o/19151697#19151697

00:28 <brianwong> thanks for the link

00:28 <brianwong> but like i said

00:28 <brianwong> im running the openssl command to verify

00:28 <brianwong> so it isnt a problem with my local store

00:29 <brianwong> not only that

00:29 <mpapis> brianwong, are you sure your ruby uses that openssl ?

00:29 <brianwong> not only that, the error appears randomly as it traverses the Gemfile

00:29 <mpapis> brianwong, do you know you can link program to use something else then the thing in $PATH?

00:29 TheComrade has quit [Quit: TheComrade]

00:31 <mpapis> brianwong, is: ruby -ropenssl -e 'puts OpenSSL::X509::DEFAULT_CERT_FILE'

00:31 <drbrain> brianwong: also, what is the exact error?

00:31 einarj has joined #rubygems

00:31 <drbrain> mpapis: I'm improving RubyGems' Gemfile support

00:32 <drbrain> but I don't know what order bundler uses for "group"

00:32 <mpapis> pointing to: openssl version -d ?

00:32 <drbrain> https://github.com/rubygems/rubygems/blob/master/lib/rubygems/request_set/gem_dependency_api.rb#L30-L33 is what I implemented

00:32 <drbrain> mpapis: so, prefer :group over :groups over block group

00:32 <brianwong> https://www.refheap.com/19892

00:32 <brianwong> sorry for the lack of wrap

00:32 <drbrain> but maybe it should be a union?

00:32 <drbrain> indirect: can tell me

00:32 antichatter has joined #rubygems

00:33 <drbrain> brianwong: can you run with RUBYOPT=-d to see the OpenSSL exception raised?

00:33 <brianwong> https://www.refheap.com/19893

00:34 <drbrain> openssl swallows the underlying error so it can report an SSLError when the connection is closed, for example

00:35 <mpapis> drbrain, it's bundler groups - development, assets, production

00:36 <mpapis> so you could have groups on many levels like: bundle instal --without=deelopment --- gem 'rake', :group => :assets

00:37 antichatter has quit [Client Quit]

00:37 <mpapis> brianwong, what system is this and did you update it first?

00:37 <drbrain> mpapis: https://gist.github.com/drbrain/0ab3898e054e0ce9eb95

00:37 <brianwong> this is an amazon ec2 system

00:37 <brianwong> amazon linux

00:37 <drbrain> mpapis: what groups is gem 'z' in?

00:38 henrikhodne has joined #rubygems

00:38 <brianwong> i ran the bundle install again and it finished

00:38 <brianwong> it was strange

00:38 einarj has quit [Ping timeout: 245 seconds]

00:38 <brianwong> i didnt change anything

00:38 <drbrain> brianwong: probably a network issue between you and rubygems.org/S3

00:38 <drbrain> s/you/your server/

00:38 TheComrade has joined #rubygems

00:38 <brianwong> but a few times before the bundle install kept failing with that ssl error

00:38 <mpapis> drbrain, ah, raise! in case you find group and groups (joking)

00:38 <brianwong> ok

00:38 <brianwong> thanks for your help guys

00:39 <drbrain> brianwong: OpenSSL can raise an exception indicating MITM when the connection hung up :/

00:42 <imperator> does bundle install have a verbose option?

00:43 <mpapis> there should be one

00:45 jnimety has quit [Quit: Computer has gone to sleep.]

01:01 jfoy has quit [Quit: jfoy]

01:02 vertis has quit [Read error: Connection reset by peer]

01:08 TheComrade has quit [Quit: TheComrade]

01:09 vertis has joined #rubygems

01:10 huoxito has quit [Remote host closed the connection]

01:11 huoxito has joined #rubygems

01:13 dvu has joined #rubygems

01:20 redmenace has quit [Ping timeout: 268 seconds]

01:21 arthurnn has quit [Remote host closed the connection]

01:22 arthurnn has joined #rubygems

01:26 arthurnn has quit [Ping timeout: 260 seconds]

01:29 dvu has quit [Remote host closed the connection]

01:36 redmenace has joined #rubygems

01:48 arthurnn has joined #rubygems

02:11 lsegal has joined #rubygems

03:19 havenwood has joined #rubygems

03:31 redmenace has quit [Ping timeout: 260 seconds]

03:37 neo_ has joined #rubygems

03:38 neo_ has quit [Client Quit]

03:52 arthurnn has quit [Remote host closed the connection]

03:52 arthurnn has joined #rubygems

03:57 arthurnn has quit [Ping timeout: 272 seconds]

04:02 imperator has left #rubygems ["Leaving"]

04:05 jonahR has joined #rubygems

04:18 havenwood has quit [Ping timeout: 240 seconds]

04:19 noyb has joined #rubygems

04:31 jonahR has left #rubygems [#rubygems]

04:38 redmenace has joined #rubygems

04:42 redmenace has quit [Ping timeout: 268 seconds]

04:43 jkline has joined #rubygems

04:44 lsegal has quit [Quit: Quit: Quit: Quit: Stack Overflow.]

04:56 DanKnox is now known as DanKnox_away

05:03 huoxito has quit [Remote host closed the connection]

05:03 huoxito has joined #rubygems

05:08 huoxito has quit [Ping timeout: 245 seconds]

05:28 DanKnox_away is now known as DanKnox

05:39 DanKnox is now known as DanKnox_away

05:45 noyb has quit [Quit: leaving]

06:00 vertis has quit [Quit: vertis]

06:38 redmenace has joined #rubygems

06:44 redmenace has quit [Ping timeout: 272 seconds]

06:49 jkline has quit [Quit: jkline]

06:58 TheComrade has joined #rubygems

07:18 TheComrade has quit [Quit: TheComrade]

07:44 Elhu has joined #rubygems

07:53 mattwynne has joined #rubygems

07:54 mattwynne has quit [Read error: Connection reset by peer]

07:54 hakunin has quit [Ping timeout: 272 seconds]

07:54 mattwynne has joined #rubygems

07:54 mattwynne has quit [Remote host closed the connection]

07:55 hakunin has joined #rubygems

07:57 mattwynne has joined #rubygems

08:01 mattwynne has quit [Ping timeout: 245 seconds]

08:06 workmad3 has joined #rubygems

08:15 mattwynne has joined #rubygems

08:15 adambeynon has joined #rubygems

08:27 einarj has joined #rubygems

08:39 redmenace has joined #rubygems

08:43 redmenace has quit [Ping timeout: 245 seconds]

08:55 cmeiklejohn has quit [Ping timeout: 260 seconds]

09:02 tcopeland1 has joined #rubygems

09:03 tcopeland has quit [Read error: Connection reset by peer]

09:51 markoa has joined #rubygems

09:52 <markoa> hi guys, I'm Marko from semaphoreapp.com. Trying to figure out what has changed recently about SSL certificate verification. Does anybody know something about that?

10:26 <mpapis> markoa, try http://stackoverflow.com/questions/19150017/ssl-error-when-installing-rubygems-unable-to-pull-data-from-https-rubygems-o/19151697#19151697

10:29 <markoa> thanks mpapis... so far we've found that upgrading rubygems to the latest version is alone not enough

10:30 <mpapis> markoa, there are few errors, so yo you might have something else yet .. what is the full error?

10:32 <markoa> see https://gist.github.com/markoa/7022642

10:34 <mpapis> hmm, this one is new, are you sure your certificates are up to date?

10:36 <markoa> not sure really what's up to date in that area :) our platform is based on ubuntu 12.04

10:36 <markoa> one user also reported a Bundler::Fetcher::CertificateFailureError: Could not verify the SSL certificate for https://rubygems.org/. after rubygems upgrade

10:39 redmenace has joined #rubygems

10:41 <markoa> currently checking how to update the certificates

10:45 redmenace has quit [Ping timeout: 272 seconds]

10:56 cmeiklejohn has joined #rubygems

11:17 imperator has joined #rubygems

11:24 Elhu has quit [Quit: Computer has gone to sleep.]

11:44 Elhu has joined #rubygems

12:15 graphex has quit [Ping timeout: 248 seconds]

12:26 graphex has joined #rubygems

12:32 huoxito has joined #rubygems

12:40 redmenace has joined #rubygems

12:45 redmenace has quit [Ping timeout: 272 seconds]

13:18 <indirect> drbrain: I'm around now

13:19 <indirect> groups are unions

13:19 <indirect> there's no precedence

13:25 jnimety has joined #rubygems

13:36 almostwhitehat has joined #rubygems

13:38 roidrage has joined #rubygems

13:43 sebson has joined #rubygems

13:45 arthurnn has joined #rubygems

13:49 cowboyd has joined #rubygems

13:55 havenwood has joined #rubygems

14:00 rafaelfranca has joined #rubygems

14:04 ZachBeta has joined #rubygems

14:07 roidrage has quit [Ping timeout: 245 seconds]

14:07 havenwood has quit [Remote host closed the connection]

14:09 havenwood has joined #rubygems

14:20 havenwood has quit [Remote host closed the connection]

14:24 ZachBeta has quit [Quit: Computer has gone to sleep.]

14:34 ZachBeta has joined #rubygems

14:37 jnimety_ has joined #rubygems

14:39 jnimety has quit [Ping timeout: 245 seconds]

14:39 TheComrade has joined #rubygems

14:42 TheComrade has quit [Client Quit]

14:42 havenwood has joined #rubygems

14:45 TheComrade has joined #rubygems

14:57 brianwong has left #rubygems [#rubygems]

14:59 huoxito has quit [Remote host closed the connection]

14:59 huoxito has joined #rubygems

15:04 huoxito has quit [Ping timeout: 272 seconds]

15:05 stevenharman has joined #rubygems

15:08 TheMoonMaster has quit [Excess Flood]

15:09 TheComrade has quit [Quit: TheComrade]

15:10 ZachBeta has quit [Quit: Computer has gone to sleep.]

15:10 codezomb has joined #rubygems

15:11 TheMoonMaster has joined #rubygems

15:19 jfoy has joined #rubygems

15:20 ZachBeta has joined #rubygems

15:26 ZachBeta has quit [Quit: Computer has gone to sleep.]

15:33 hakunin has quit [Read error: Connection reset by peer]

15:34 hakunin has joined #rubygems

15:40 pglombardo has joined #rubygems

15:43 DanKnox_away is now known as DanKnox

15:43 ZachBeta has joined #rubygems

16:13 codezomb has quit [Quit: Linkinus - http://linkinus.com]

16:21 RichardBronosky has joined #rubygems

16:22 redmenace has joined #rubygems

16:27 cowboyd has quit [Remote host closed the connection]

16:27 arthurnn has quit [Remote host closed the connection]

16:27 arthurnn has joined #rubygems

16:28 einarj has quit [Remote host closed the connection]

16:31 ZachBeta has quit [Quit: Computer has gone to sleep.]

16:32 arthurnn has quit [Ping timeout: 272 seconds]

16:38 arthurnn has joined #rubygems

16:39 arthurnn has quit [Remote host closed the connection]

16:40 arthurnn has joined #rubygems

16:40 Elhu has quit [Quit: Computer has gone to sleep.]

16:41 arthurnn has quit [Read error: No route to host]

16:42 arthurnn has joined #rubygems

16:48 havenwood has quit [Remote host closed the connection]

16:49 havenwood has joined #rubygems

16:49 TheComrade has joined #rubygems

16:49 TheComrade has quit [Client Quit]

16:53 havenwood has quit [Ping timeout: 246 seconds]

16:54 danrabinowitz has left #rubygems ["Textual IRC Client: www.textualapp.com"]

16:54 workmad3 is now known as tubbot

16:55 tubbot is now known as workmad3

16:59 workmad3 has quit [Ping timeout: 268 seconds]

17:01 jnimety_ has quit [Ping timeout: 268 seconds]

17:01 ZachBeta has joined #rubygems

17:05 havenwood has joined #rubygems

17:06 jnimety has joined #rubygems

17:10 snuffeluffegus has joined #rubygems

17:10 snuffeluffegus has quit [Read error: Connection reset by peer]

17:11 snuffeluffegus has joined #rubygems

17:17 markoa has quit [Remote host closed the connection]

17:21 huoxito has joined #rubygems

17:37 snuffeluffegus has quit [Remote host closed the connection]

17:39 revans has joined #rubygems

17:41 TheComrade has joined #rubygems

17:44 roidrage has joined #rubygems

17:50 stevenharman has quit [Quit: Leaving...]

17:52 TheComrade has quit [Quit: TheComrade]

18:04 snuffeluffegus has joined #rubygems

18:07 revans has quit [Read error: Connection reset by peer]

18:07 revans has joined #rubygems

18:07 snuffeluffegus has quit [Client Quit]

18:08 DanKnox is now known as DanKnox_away

18:10 roidrage has quit [Quit: http://riakhandbook.com]

18:12 cowboyd has joined #rubygems

18:13 DanKnox_away is now known as DanKnox

18:15 pglombardo has quit [Remote host closed the connection]

18:18 havenwood has quit [Read error: Connection reset by peer]

18:18 havenn has joined #rubygems

18:22 jkline has joined #rubygems

18:31 jkline has quit [Quit: jkline]

18:47 stevenharman has joined #rubygems

18:47 <qrush> whats going on with the ssl issues?

18:48 TheComrade has joined #rubygems

18:53 Sc0rp10n has joined #rubygems

18:56 redmenace has quit [Ping timeout: 268 seconds]

19:04 <mpapis> qrush, https://github.com/rubygems/rubygems/issues/688 - there was a bug that prevented update

19:05 <qrush> hmm thats not the issue i see most people on twitter having

19:05 <qrush> main issue is installing gems gives ssl cert validation errors

19:05 <mpapis> http://stackoverflow.com/questions/19150017/ssl-error-when-installing-rubygems-unable-to-pull-data-from-https-rubygems-o/19151697#19151697 ?

19:07 <qrush> does not look related

19:07 <qrush> https://twitter.com/keiththomps/status/390895771135918080

19:07 <mpapis> the same as the question on SO - I just linked to my answer

19:07 <jnimety> qrush I've been having this issue intermittently for a little over a week

19:08 <qrush> an rvm-only answer is not the solution here

19:08 <qrush> there's something fucked server side

19:08 <mpapis> qrush, there are points for non rvm

19:08 <qrush> hmm

19:09 <mpapis> I think it would be also good to add note to update rubygems on ssl errors

19:14 pglombardo has joined #rubygems

19:28 redmenace has joined #rubygems

19:35 einarj has joined #rubygems

19:42 einarj has quit [Ping timeout: 245 seconds]

19:43 snuffeluffegus has joined #rubygems

20:12 arthurnn has quit [Remote host closed the connection]

20:12 arthurnn has joined #rubygems

20:14 stevenharman has quit [Quit: Leaving...]

20:17 arthurnn has quit [Ping timeout: 272 seconds]

20:38 rafaelfr_ has joined #rubygems

20:41 rafaelfranca has quit [Ping timeout: 245 seconds]

20:42 mattwynne has quit [Remote host closed the connection]

20:42 mattwynne has joined #rubygems

20:44 mattwynn_ has joined #rubygems

20:45 mattwynne has quit [Read error: Connection reset by peer]

20:46 ZachBeta has quit [Quit: Computer has gone to sleep.]

20:47 mattwynn_ has quit [Read error: Connection reset by peer]

20:48 mattwynne has joined #rubygems

20:52 ZachBeta has joined #rubygems

20:52 mattwynne has quit [Remote host closed the connection]

20:52 mattwynne has joined #rubygems

20:54 adambeynon has quit [Quit: ["Textual IRC Client: www.textualapp.com"]]

21:00 huoxito has quit [Remote host closed the connection]

21:00 havenn is now known as havenwood

21:01 huoxito has joined #rubygems

21:01 mattwynne has quit [Ping timeout: 265 seconds]

21:02 jnimety has quit [Quit: Computer has gone to sleep.]

21:03 jnimety has joined #rubygems

21:03 workmad3 has joined #rubygems

21:05 huoxito has quit [Ping timeout: 252 seconds]

21:05 mattwynne has joined #rubygems

21:08 imperator has quit [Quit: Leaving]

21:13 rafaelfranca has joined #rubygems

21:13 snuffeluffegus has quit [Remote host closed the connection]

21:14 snuffeluffegus has joined #rubygems

21:17 rafaelfr_ has quit [Ping timeout: 272 seconds]

21:23 arthurnn has joined #rubygems

21:24 mattwynne has quit [Remote host closed the connection]

21:24 mattwynne has joined #rubygems

21:28 arthurnn has quit [Ping timeout: 252 seconds]

21:29 Elhu has joined #rubygems

21:29 mattwynne has quit [Ping timeout: 272 seconds]

21:33 arthurnn has joined #rubygems

21:34 Elhu has quit [Quit: Computer has gone to sleep.]

21:37 Elhu has joined #rubygems

21:39 mattwynne has joined #rubygems

21:39 rafaelfranca has quit [Remote host closed the connection]

21:39 rafaelfranca has joined #rubygems

21:44 rafaelfranca has quit [Ping timeout: 252 seconds]

21:44 pglombardo has quit [Remote host closed the connection]

21:48 Elhu has quit [Quit: Computer has gone to sleep.]

21:48 jkline has joined #rubygems

21:51 jnimety has quit [Quit: Computer has gone to sleep.]

21:52 mattwynne has quit [Remote host closed the connection]

21:52 mattwynne has joined #rubygems

21:54 Elhu has joined #rubygems

21:57 mattwynne has quit [Ping timeout: 272 seconds]

21:57 cowboyd has quit [Remote host closed the connection]

22:03 arthurnn has quit [Remote host closed the connection]

22:03 arthurnn has joined #rubygems

22:04 ZachBeta has quit [Quit: Textual IRC Client: www.textualapp.com]

22:05 almostwhitehat has quit []

22:08 arthurnn has quit [Ping timeout: 252 seconds]

22:09 mattwynne has joined #rubygems

22:19 arthurnn has joined #rubygems

22:19 arthurnn has quit [Remote host closed the connection]

22:20 arthurnn has joined #rubygems

22:21 Elhu has quit [Quit: Computer has gone to sleep.]

22:24 mattwynne has quit [Remote host closed the connection]

22:24 jkline has quit [Quit: jkline]

22:24 arthurnn has quit [Ping timeout: 245 seconds]

22:36 redmenace has quit [Ping timeout: 272 seconds]

22:40 stevenharman has joined #rubygems

22:47 redmenace has joined #rubygems

22:58 snuffeluffegus has quit [Remote host closed the connection]

23:02 workmad3 has quit [Ping timeout: 272 seconds]

23:30 arthurnn has joined #rubygems

23:34 stevenharman has quit [Quit: Leaving...]

23:34 <shaiguitar> qrush: any progress on getting a production dump? some people are waiting on putting urbygem graphs on the web but I would rather first figure out the data inconsistincies...

23:35 arthurnn has quit [Ping timeout: 245 seconds]

23:40 <qrush> shaiguitar: sorry i can't help tonight

23:40 <qrush> your best bet is finding one of the actual ops folks who can help

23:40 <qrush> i am barely a sysadmin :(

23:44 stevenharman has joined #rubygems

23:45 stevenharman has quit [Client Quit]

23:47 brianwong has joined #rubygems

23:51 huoxito has joined #rubygems

23:52 huoxito has quit [Read error: Connection reset by peer]

23:53 huoxito has joined #rubygems

23:55 Sc0rp10n has quit [Quit: Leaving]

23:58 huoxito has quit [Ping timeout: 272 seconds]