SSL certs included in bundler

[Frederick Cheung]

Hi,

Should the SSL certs at

https://github.com/bundler/bundler/tree/master/lib/bundler/ssl_certs

and

https://github.com/rubygems/rubygems/tree/master/lib/rubygems/ssl_certs

match?

There is some overlap (geotrust, Entrustnet) and it looks like in the past these 2 were identical - what's in bundlers repo seems to match 

https://github.com/rubygems/rubygems/blob/b79ed97aff89e4e5fab4d7917791042f51fd5512/lib/rubygems/ssl_certs/

I've been getting the occasional sporadic ssl failure when running bundle (as in when deploying to multiple servers built in the past 24 hours from the same AMI bundle install will fail with an SSL verification error on one but not on the others) and was wondering if this could be the cause.

Fred

[Andre Arko]

Hmm. That could be true. If that is the underlying problem, then you will be able to install those gems via "gem install" but not via "bundle install".

I've created a ticket so we'll remember to set up an automated way to update the certs to match: https://github.com/bundler/bundler/issues/2750