Skip to content

OpenSSL::SSL::SSLSocket#verify_result returns wrong result for self-signed certs #25

Open
@headius

Description

@headius

From http://jira.codehaus.org/browse/JRUBY-7049

See the following tests from Celluloid::IO
https://github.com/celluloid/celluloid-io/blob/master/spec/celluloid/io/ssl_socket_spec.rb#L105
On MRI, these return OpenSSL::X509::V_ERR_DEPTH_ZERO_SELF_SIGNED_CERT as expected.
On JRuby, this returns 1, which does not seem to be even valid. (Note: this is not returning V_OK, so at least that much should be good)

--- Want to back this issue? **[Post a bounty on it!](https://www.bountysource.com/issues/7364392-openssl-ssl-sslsocket-verify_result-returns-wrong-result-for-self-signed-certs?utm_campaign=plugin&utm_content=tracker%2F136995&utm_medium=issues&utm_source=github)** We accept bounties via [Bountysource](https://www.bountysource.com/?utm_campaign=plugin&utm_content=tracker%2F136995&utm_medium=issues&utm_source=github).

Metadata

Metadata

Assignees

No one assigned

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions