Solution to "OpenSSL::X509::StoreError: setting default path failed: Invalid keystore format" for JRuby

solution.md

Solution to StoreError: invalid keystore format (OS X)

The following error appeared upon upgrading JRuby:

OpenSSL::X509::StoreError: setting default path failed: Invalid keystore format

Download cacert.pem

wget http://curl.haxx.se/ca/cacert.pem

Create a keystore from the file

sudo keytool -importcert -file cacert.pem -keystore /Users/youruser/.keystore

Set SSL_CERT_FILE

export SSL_CERT_FILE=/Users/youruser/.keystore

Install gems

jruby -S gem install whatever

+1 to everyone who posted all your helpful comments.

I've been dealing with this for months, commenting and uncommenting export SSL_CERT_FILE=... until I finally got fed up.

I tried pretty much everything listed here.

The steps that finally resolved everything for me.

• Installed the latest version of openssl via homebrew: brew install openssl
• Ensured that it had up to date certs in the right localtions
• Manually added a symlink in /usr/local/bin/ -> {the location of the latest homebrew version}
• Uninstalled all the previous versions of the java jdk

cd /Library/Java/JavaVirtualMachines/
sudo rm -rf jdk1.*

• Uninstalled rvm: rvm implode
• Restarted my machine
• Finally installed a new jdk , re-installed rvm, jruby, bundler, etc

Finally everything is working, no SSL_CERT_FILE, no random keystore files, no failures

ALSO: I would avoid rvm osx-ssl-certs update all this breaks my jdk cert everytime.

I'd like to add a few of points to make the procedure 100% clear:

• when prompted for keystore password I used "changeit" which is similar to the default Java one
  -- Enter keystore password: then type "changeit"
  -- Re-enter new password: and retype "changeit"
• when prompted to "Trust this certificate? [no]" enter "yes"
• for Bash users to make this persist add to your .bash_profile
  -- export SSL_CERT_FILE=/Users/youruser/.keystore

And to add to @madebysquares comment - I broke my install by running 'rvm osx-ssl-certs update all' too. RVM should not allow this to run on jruby until it does not break all jrubies.

how to solve invalid keystore format????????

how to solve invalid keystore error??????

how to solve invalid keystore error??????

nuking jdk seems to help

❤️ https://gist.github.com/kendagriff/adec3713b4dfe6a1abdf#gistcomment-1933072 this is EXACTLY how to fix. I have been dealing with this issue for months and setting that cert file every time.

• In finder go to /Library/Java/JavaVirtualMachines
• Delete your JDK(s) in that directory
• DL the JDK version you'd like: http://www.oracle.com/technetwork/java/javase/downloads/index.html (I used JDK 8 http://www.oracle.com/technetwork/java/javase/downloads/jdk8-downloads-2133151.html)
• Install and no more will you have to type export SSL_CERT_FILE=/Users/youruser/.keystore