[Potion Store] SSL_connect certificate verify failed

[Stefan Reitshamer]

I'm getting this error when somebody tries to purchase by credit card
(I'm using Paypal for payment processing):

OpenSSL::SSL::SSLError (SSL_connect returned=1 errno=0 state=SSLv3
read server certificate B: certificate verify failed):
/lib/http-access2.rb:1001:in `connect'
/lib/http-access2.rb:1001:in `ssl_connect'
/lib/http-access2.rb:1363:in `connect'
/usr/lib64/ruby/1.8/timeout.rb:62:in `timeout'
/usr/lib64/ruby/1.8/timeout.rb:93:in `timeout'
/lib/http-access2.rb:1351:in `connect'
/lib/http-access2.rb:1209:in `query'
/lib/http-access2.rb:892:in `query'
/lib/http-access2.rb:434:in `do_get_block'
/lib/http-access2.rb:370:in `conn_request'
/lib/http-access2.rb:285:in `request'
/lib/http-access2.rb:264:in `post'
/lib/soap/streamHandler.rb:199:in `send_post'
/lib/soap/streamHandler.rb:137:in `send'
/lib/soap/rpc/proxy.rb:170:in `route'
/lib/soap/rpc/proxy.rb:141:in `call'
/lib/soap/rpc/driver.rb:178:in `call'
/lib/soap/rpc/driver.rb:232:in `doDirectPayment'
/vendor/plugins/paypal/lib/paypal.rb:209:in `directcharge'
/app/models/order.rb:397:in `paypal_directcharge'
/app/controllers/store/order_controller.rb:205:in `purchase'

I get the same error when they pick the "Paypal" radio button on the
main page and click "Continue".

It was working fine yesterday.
Does anybody know what "certificate verify failed" means?
Is it Paypal's certificate that won't verify? Is there any way to not
verify it?

Thanks
- Stefan

--
You received this message because you are subscribed to the Google Groups "Potion Store Discussions" group.
To post to this group, send email to potion...@googlegroups.com.
To unsubscribe from this group, send email to potion-store...@googlegroups.com.
For more options, visit this group at http://groups.google.com/group/potion-store?hl=en.

[Andy Kim]

See if your <potionstore dir>/config/certs/api_cert_chain.crt is the same as the one I attached to this email. I'm not having the same issue. At least not yet.

- Andy Kim

[Stefan Reitshamer]

That file is identical to the one I have.
Since my original post I managed to find the posts from last year about Paypal updating their certs, or more specifically Verisign using a new intermediate certificate https://ppmts.custhelp.com/cgi-bin/ppdts.cfg/php/enduser/popup_adp.php?p_faqid=800&p_created=1244653674

Is this error the same problem? Or could it be something else?
Is there a workaround?

Thanks
- Stefan

On Apr 21, 2010, at 8:20 AM, Andy Kim wrote:

> See if your <potionstore dir>/config/certs/api_cert_chain.crt is the same as the one I attached to this email. I'm not having the same issue. At least not yet.
>
> - Andy Kim
>
>
>

> <api_cert_chain.crt>--