Ruby 1.8.7 and REE builds broken by SSL certificate failure

Languages Ruby
#1

Travis CI builds of Ruby 1.8.7 and REE appear to be fully broken by an SSL certificate issue.

This is not surprising, given their age. I would hazard a guess that fixing may require configuration of the most recent OpenSSL version they can be built with, potentially including patches, followed by installation of newer platform certificates.

Example failure message:

ruby-1.8.7-p371 - #generating default wrappers…
Using /home/travis/.rvm/gems/ruby-1.8.7-p371

** Updating RubyGems to the latest compatible version for security reasons. **
** If you need an older version, you can downgrade with ‘gem update --system OLD_VERSION’. **

$ gem install bundler -v ‘< 2’
ERROR: Could not find a valid gem ‘bundler’ (< 2), here is why:
Unable to download data from https://rubygems.org/ - hostname was not match with the server certificate (https://rubygems.org/specs.4.8.gz)
ERROR: While executing gem … (TypeError)
can’t modify frozen object
The command “gem install bundler -v ‘< 2’” failed and exited with 1 during .

Example build failure:

1 Like
#2

I’m having the same problem.

#3

I am highly doubtful that these can be compiled with recent versions of OpenSSL that can use the certificates.

#4

Note: I would be equally satisfied if Travis CI were to clarify that Ruby 1.8.7 and ree are no longer supported?

#5

I’m having the same problem.

It seems travis_fold:start:install_bundler is broken.
raw log:

e[0Ktravis_fold:end:rvm
e[0Ktravis_fold:start:install_bundler
e[0Ktravis_time:start:072c452a
e[0K$ gem install bundler -v '< 2'
ERROR:  Could not find a valid gem 'bundler' (< 2), here is why:
          Unable to download data from https://rubygems.org/ - hostname was not match with the server certificate (https://rubygems.org/specs.4.8.gz)
ERROR:  While executing gem ... (TypeError)
    can't modify frozen object
travis_time:end:072c452a:start=1609997846431058838,finish=1609997846557437923,duration=126379085,event=
e[0Ke[31;1mThe command "gem install bundler -v '< 2'" failed and exited with 1 during .e[0m

Your build has been stopped.

And it is run before before_install. I have no chance to run my patch:

before_install:
  - if `ruby -e 'exit(RUBY_VERSION.to_f < 2.7)'`; then
      gem i rubygems-update -v '< 3' && update_rubygems;
      gem install bundler -v '< 2';
    fi
#6

I am sorry, but I don’t think 1.8.7 or REE can reasonably interact with rubygems.org at this point.

Using a C job and a Precise image, you can use Ruby 1.8.7 (and probably REE), but you can’t coerce it to communicate with it.

https://travis-ci.com/github/BanzaiMan/com_testing/builds/212391477#L158

1 Like
#7

Can we ask Travis CI simply to remove 1.8.7 and REE at this point, since their inability to communicate with Rubygems renders them unusable?

#8

It can, if you insert a proxy that forges TLS certificates and supports the older TLS version…

But since this version is effectively unusable in today’s Internet, why do you even support it in your project?

Imprint