Bugs item #5995, was opened at 2006-10-02 22:16 You can respond by visiting: http://rubyforge.org/tracker/?func=detail&atid=1698&aid=5995&group_id=426 Category: Standard Library Group: None Status: Open Resolution: None Priority: 3 Submitted By: M B (mrbright) Assigned to: Nobody (None) Summary: OpenSSL::X509::Certificate.new is broken in the 1.8.5 libraries Initial Comment: Applying the following code in the 1.8.4 instance works, however in the 1.8.5 instance it will fail with: Not enough data (CertificateError) error. out=<path to der file, or pem file> cert=OpenSSL::X509::Certificate.new(File.read(out)) if out && FileTest::file?(out) ---------------------------------------------------------------------- Comment By: Technorama Ltd. (technorama) Date: 2007-04-05 22:46 Message: It wouldn't suprise me if the change in behaviour is from a different openssl version. It would be very helpful to have some information on the certificate itself. Please post the results of the following command and the openssl version on each machine. openssl x509 -in cert.pem -noout -text If there is any information that you feel is confidential you can replace it with ***. ---------------------------------------------------------------------- Comment By: Technorama Ltd. (technorama) Date: 2007-04-05 20:29 Message: How did you create the certificate? Did you set both not_before and not_after? Both fields are required by rfc2459. OpenSSL will allow you to create a bad X509 certificate and export it to DER/PEM. Trying to load it will throw an exception. ---------------------------------------------------------------------- Comment By: M B (mrbright) Date: 2006-10-11 15:36 Message: Matz: I can tell you that I am running the above code on Linux ruby version 1.8.4 and then running the same file with the same certificate on windows 1.8.5. That seems to be all the information that I have. mrbright ---------------------------------------------------------------------- Comment By: Tom Copeland (tom) Date: 2006-10-11 03:33 Message: If you have a chance, please respond to Matz on ruby-core here: http://blade.nagaokaut.ac.jp/cgi-bin/scat.rb/ruby/ruby-core/9003 Thanks! tom ---------------------------------------------------------------------- You can respond by visiting: http://rubyforge.org/tracker/?func=detail&atid=1698&aid=5995&group_id=426