Ruby on rails Rails omniauth facebook SSL握手失败

Ruby on rails Rails omniauth facebook SSL握手失败,ruby-on-rails,facebook,ssl,omniauth,poodle-attack,Ruby On Rails,Facebook,Ssl,Omniauth,Poodle Attack,我的应用程序已经运行了好几个月了,突然登录不起作用,我发现: 2014-10-18T18:09:33.971670+00:00应用程序[web.1]:法拉第::SSLError(SSL_connect返回=1 errno=0 state=SSLv3读取服务器hello A:SSLv3警报握手失败): 2014-10-18T18:09:33.971672+00:00应用程序[web.1]:供应商/ruby-2.0.0/lib/ruby/2.0.0/net/http.rb:918:in'conne

我的应用程序已经运行了好几个月了,突然登录不起作用,我发现:


2014-10-18T18:09:33.971670+00:00应用程序[web.1]:法拉第::SSLError(SSL_connect返回=1 errno=0 state=SSLv3读取服务器hello A:SSLv3警报握手失败):
2014-10-18T18:09:33.971672+00:00应用程序[web.1]:供应商/ruby-2.0.0/lib/ruby/2.0.0/net/http.rb:918:in'connect'
2014-10-18T18:09:33.971674+00:00应用程序[web.1]:供应商/ruby-2.0.0/lib/ruby/2.0.0/net/http.rb:918:在“连接中的块”中
2014-10-18T18:09:33.971675+00:00应用程序[web.1]:供应商/ruby-2.0.0/lib/ruby/2.0.0/timeout.rb:52:in'timeout'
2014-10-18T18:09:33.971676+00:00应用程序[web.1]:供应商/ruby-2.0.0/lib/ruby/2.0.0/net/http.rb:918:in'connect'
2014-10-18T18:09:33.971678+00:00应用程序[web.1]:供应商/ruby-2.0.0/lib/ruby/2.0.0/net/http.rb:862:in'do_start'
2014-10-18T18:09:33.971679+00:00应用程序[web.1]:供应商/ruby-2.0.0/lib/ruby/2.0.0/net/http.rb:851:“开始”
2014-10-18T18:09:33.971680+00:00应用程序[web.1]:供应商/ruby-2.0.0/lib/ruby/2.0.0/net/http.rb:1367:在“请求”中
2014-10-18T18:09:33.971682+00:00应用程序[web.1]:供应商/捆绑包/ruby/2.0.0/gems/newrelic_rpm-3.8.1.221/lib/newrelic/agent/instrumentation/net.rb:27:in`block(2级
ls)在请求中\u带有\u newrelic\u trace'
2014-10-18T18:09:33.971683+00:00应用程序[web.1]:供应商/捆绑包/ruby/2.0.0/gems/newrelic\u rpm-3.8.1.221/lib/new\u relic/agent.rb:404:in“禁用所有跟踪”
2014-10-18T18:09:33.971685+00:00应用程序[web.1]:供应商/捆绑包/ruby/2.0.0/gems/newrelic_rpm-3.8.1.221/lib/newrelic/agent/instrumentation/net.rb:26:in'block in requ
有“新遗迹”的est_'
2014-10-18T18:09:33.971686+00:00应用程序[web.1]:供应商/捆绑包/ruby/2.0.0/gems/newrelic\u rpm-3.8.1.221/lib/newrelic/agent/cross\u应用程序\u跟踪
est'
2014-10-18T18:09:33.971687+00:00应用程序[web.1]:供应商/捆绑包/ruby/2.0.0/gems/newrelic_rpm-3.8.1.221/lib/new_relic/agent/instrumentation/net.rb:23:in'request_with_
新遗迹'
2014-10-18T18:09:33.971689+00:00应用程序[web.1]:供应商/ruby-2.0.0/lib/ruby/2.0.0/net/http.rb:1126:in'get'
2014-10-18T18:09:33.971690+00:00应用程序[web.1]:供应商/捆绑包/ruby/2.0.0/gems/faraday-0.9.0/lib/faraday/adapter/net_http.rb:78:“执行请求”
2014-10-18T18:09:33.971691+00:00应用程序[web.1]:供应商/捆绑包/ruby/2.0.0/gems/faraday-0.9.0/lib/faraday/adapter/net_http.rb:39:in'call'
2014-10-18T18:09:33.971693+00:00应用程序[网站1]:供应商/捆绑包/ruby/2.0.0/gems/faraday-0.9.0/lib/faraday/request/url_encoded.rb:15:in'call'
2014-10-18T18:09:33.971694+00:00应用程序[web.1]:供应商/捆绑包/ruby/2.0.0/gems/faraday-0.9.0/lib/faraday/rack_builder.rb:139:内置响应
2014-10-18T18:09:33.971695+00:00应用程序[web.1]:供应商/捆绑包/ruby/2.0.0/gems/faraday-0.9.0/lib/faraday/connection.rb:377:在“运行请求”中
2014-10-18T18:09:33.971696+00:00应用程序[web.1]:供应商/捆绑包/ruby/2.0.0/gems/oauth2-0.8.1/lib/oauth2/cli
ent.rb:88:“请求”中的
2014-10-18T18:09:33.971698+00:00应用程序[web.1]:供应商/捆绑包/ruby/2.0.0/gems/oauth2-0.8.1/lib/oauth2/access_token.rb:99:在“请求”中
2014-10-18T18:09:33.971699+00:00应用程序[web.1]:供应商/捆绑包/ruby/2.0.0/gems/oauth2-0.8.1/lib/oauth2/access_token.rb:106:in'get'
2014-10-18T18:09:33.971700+00:00应用程序[网站1]:供应商/捆绑/ruby/2.0.0/gems/omniauth-facebook-access-token-0.1.3/lib/omniauth/strategies/facebook-access-token.rb:
90.“回调阶段”
2014-10-18T18:09:33.971702+00:00应用程序[web.1]:供应商/捆绑包/ruby/2.0.0/gems/omniauth-1.2.1/lib/omniauth/strategy.rb:227:在“回调”中
2014-10-18T18:09:33.971703+00:00应用程序[web.1]:供应商/捆绑包/ruby/2.0.0/gems/omniauth-1.2.1/lib/omniauth/strategy.rb:184:in'call!'
2014-10-18T18:09:33.971704+00:00应用程序[web.1]:供应商/捆绑包/ruby/2.0.0/gems/omniauth-1.2.1/lib/omniauth/strategy.rb:164:in'call'
2014-10-18T18:09:33.971706+00:00应用程序[web.1]:供应商/捆绑包/ruby/2.0.0/gems/omniauth-1.2.1/lib/omniauth/strategy.rb:186:in'call!'
2014-10-18T18:09:33.971707+00:00应用程序[web.1]:供应商/捆绑包/ruby/2.0.0/gems/omniauth-1.2.1/lib/omniauth/strategy.rb:164:在“通话”中
2014-10-18T18:09:33.971708+00:00应用程序[web.1]:供应商/捆绑包/ruby/2.0.0/gems/omniauth-1.2.1/lib/omniauth/builder.rb:59:in'call'
2014-10-18T18:09:33.971709+00:00应用程序[web.1]:供应商/捆绑包/ruby/2.0.0/gems/newrelic_rpm-3.8.1.221/lib/newrelic/rack/error_collector.rb:55:in'call'
2014-10-18T18:09:33.971711+00:00应用程序[web.1]:供应商/捆绑包/ruby/2.0.0/gems/newrelic_rpm-3.8.1.221/lib/new_relic/rack/agent_hooks.rb:32:in'call'
2014-10-18T18:09:33.971712+00:00应用程序[web.1]:供应商/捆绑包/ruby/2.0.0/gems/newrelic_rpm-3.8.1.221/lib/newrelic/rack/browser_monitoring.rb:27:in'call'
2014-10-18T18:09:33.971713+00:00应用程序[web.1]:供应商/捆绑包/ruby/2.0.0/gems/rack-ssl-1.4.1/lib/rack/ssl.rb:27:in'call'
2014-10-18T18:09:33.971714+00:00应用程序[web.1]:供应商/捆绑包/ruby/2.0.0/gems/warden-1.2.3/lib/warden/manager.rb:35:在“呼叫阻塞”中
2014-10-18T18:09:33.880979+00:00应用程序[web.1]:I[2014-10-18T18:09:33.880840#15]信息——omniauth:(facebook访问令牌)回调阶段启动。
2014-10-18T18:09:33.971716+00:00应用程序[web.1]:供应商/捆绑包/ruby/2.0.0/gems/warden-1.2.3/lib/warden/manager.rb:34:in'catch'


我无意中发现了一条推文,其中提到facebook以某种方式悄悄地处理了狮子狗的漏洞,我觉得这与我所经历的有关。我不知道如何解决这个问题。看看这个问题,它可能有你想要的解决方案。您还可以关闭SSL验证,这显然不是一个好的永久解决方案,但它将允许您临时运行应用程序


基本上,如果这种情况发生在任何人身上——我使用的是omniauth facebook gem,而该gem中的某些东西(不确定在哪里)一直在使用sslv3(尽管facebook由于贵宾犬漏洞而放弃了它)。我只是换成了考拉宝石,我很乐意去

嘿,我刚刚尝试添加这个::client_options=>{:ssl=>{:ca_path=>“#{Rails.root}/lib/ssl/cacert。