OmniAuth & Facebook: certificate verify failed [duplicate]

by

The real problem is that Faraday (which Omniauth/Oauth use for their HTTP calls) is not wasn’t setting the ca_path variable for OpenSSL. At least on Ubuntu, most root certs are stored in “/etc/ssl/certs”. Since Faraday isn’t wasn’t setting this variable (and currently does not have a method to do so), OpenSSL isn’t wasn’t finding the root certificate for Facebook’s SSL certificate.

I’ve submitted a pull request to Faraday which will add support for this variable and hopefully they will pull in this change soon. Until then, you can monkeypatch faraday to look like this or use my fork of Faraday. After that, you should specify version 0.3.0 of the OAuth2 gem in your Gemspec which supports the passing of SSL options through to Faraday. All you need to do now is upgrade to Faraday 0.6.1, which supports passing of the ca_path variable and upgrade to OmniAuth 0.2.2, which has the proper dependencies for OAuth2. You’ll then be able to properly fix this issue by just adding the following to your Omniauth initializer:

Rails.application.config.middleware.use OmniAuth::Builder do
    provider :facebook, FACEBOOK_KEY, FACEBOOK_SECRET, {:client_options => {:ssl => {:ca_path => "/etc/ssl/certs"}}}
end

So, to recap:

  1. Faraday needs to be updated to support SSL ca_path. Install Faraday 0.6.1
  2. Your app needs to use OAuth2 version 0.3.0. You may need to fork omniauth since it currently has a minor version dependency in the 0.2.x tree. Upgrade to OmniAuth 0.2.2
  3. Modify your provider initializer to point to your system’s certificate path (“/etc/ssl/certs” on Ubuntu et al)

Hopefully the next releases of both Faraday and Omniauth will incorporate this solution.

Thanks to KirylP above for setting me on the right path.

More Related Contents:

  1. Turn omniauth facebook login into a popup
  2. Setting Environment Variables in Rails 3 (Devise + Omniauth)
  3. Omniauth: callback not firing, returns failure with “invalid credentials”
  4. How to get rid of OpenSSL::SSL::SSLError
  5. OmniAuth Strategies Facebook NoAuthorizationCodeError (must pass either a `code` parameter or a signed request (via `signed_request` parameter):
  6. OpenSSL::SSL::SSLError on Heroku [duplicate]
  7. Refresh token using Omniauth-oauth2 in Rails application
  8. Is Ruby pass by reference or by value?
  9. Many-to-many relationship with the same model in rails?
  10. Eager load polymorphic
  11. Best way to create custom config options for my Rails app?
  12. Rails params explained?
  13. Save image from URL by paperclip
  14. How to handle Ruby on Rails error: “Please install the postgresql adapter: `gem install activerecord-postgresql-adapter'”
  15. Rails sessions current practices
  16. Rails: Missing host to link to! Please provide :host parameter or set default_url_options[:host]
  17. Devise limit one session per user at a time
  18. rails db:migrate vs rake db:migrate
  19. “Incomplete response received from application” from nginx / passenger
  20. How to avoid NoMethodError for nil elements when accessing nested hashes? [duplicate]
  21. Add a default value to a column through a migration
  22. How to use my view helpers in my ActionMailer views?
  23. delete_all vs destroy_all?
  24. How to return HTML directly from a Rails controller?
  25. NoMethodError when trying to invoke helper method from Rails controller
  26. Why not use shared ActiveRecord connections for Rspec + Selenium?
  27. link_to image_tag with inner text or html in rails
  28. Ruby on rails 4 app does not work in iframe
  29. Validates acceptance always failing
  30. Incompatible library version: nokogiri.bundle requires version 11.0.0 or later, but libxml2.2.dylib

Leave a Comment