Rails6.1.4.1：证书验证失败（无法获得本地发行者证书）（OpenSSL::SSL::SSLError）

Question

Rails/Ruby/OpenSSL不允许我发送电子邮件，为什么？

控制台中的测试：

irb(main):001:0> @webmessage = Webmessage.new(subject: "Hi there", body: "Bye now.", email: "[e-mail]", firstname: "Me")
=> #<Webmessage:0x000055bee43fa1d0 id: nil, subject: "Hi there", body: "Bye now.", email: "[e-mail]", firstname: "Me">

irb(main):002:0> ApplicationMailer.with(webmessage: @webmessage).email_webmessage.deliver_now
  Rendered application_mailer/email_webmessage.html.erb within layouts/mailer (Duration: 3.2ms | Allocations: 810)
  Rendered layout layouts/mailer.html.erb (Duration: 4.3ms | Allocations: 1044)
Delivered mail [e-mail] (52.1ms)
/home/user/.rbenv/versions/3.0.1/lib/ruby/3.0.0/net/protocol.rb:46:in `connect_nonblock': SSL_connect returned=1 errno=0 state=error: certificate verify failed (unable to get local issuer certificate) (OpenSSL::SSL::SSLError)

结果错误：

“SSL\u connect返回=1 errno=0 state=错误：证书验证失败（无法获取本地颁发者证书）（OpenSSL:：SSL:：SSLError）”

我的证书路径：

$ echo $SSL_CERT_DIR
/etc/ssl/certs

$ echo $SSL_CERT_FILE
/etc/ssl/certs/ca-certificates.crt

我的环境：

• 铁轨6.1.4.1
• 红宝石3.0.1p64
• OpenSSL 1.1.1f

编辑：这将建立工作连接：

$ openssl s_client -connect example.com:443 -CAfile /etc/ssl/certs/ca-certificates.crt


irb(main):001:0> require 'open-uri'
=> true

irb(main):002:0> p open(URI.open('https://google.com'))
#<File:/tmp/open-uri20210915-4444-phdsb>
=> #<File:/tmp/open-uri20210915-4444-phdsb>

Answer 1

这是给子孙后代的解决方案：

事实证明，Rails需要在配置/环境/production.rb中的以下条目之一才能使上述错误消失：

config.force_ssl = true

config.action_mailer.default_url_options = {
    protocol: 'https',
    host: "www.mydomain.com"
}

config.action_mailer.delivery_method = :sendmail
config.action_mailer.sendmail_settings = {
    location: '/usr/sbin/sendmail',
    arguments: '-i -t'
}