{"action":"created","issue":{"url":"https://api.github.com/repos/rails-assets/rails-assets/issues/239","labels_url":"https://api.github.com/repos/rails-assets/rails-assets/issues/239/labels{/name}","comments_url":"https://api.github.com/repos/rails-assets/rails-assets/issues/239/comments","events_url":"https://api.github.com/repos/rails-assets/rails-assets/issues/239/events","html_url":"https://github.com/rails-assets/rails-assets/issues/239","id":63087021,"number":239,"title":"HTTPS errors (possibly related to certs since OpenSSL announcement?)","user":{"login":"geoffharcourt","id":319471,"avatar_url":"https://avatars.githubusercontent.com/u/319471?v=3","gravatar_id":"","url":"https://api.github.com/users/geoffharcourt","html_url":"https://github.com/geoffharcourt","followers_url":"https://api.github.com/users/geoffharcourt/followers","following_url":"https://api.github.com/users/geoffharcourt/following{/other_user}","gists_url":"https://api.github.com/users/geoffharcourt/gists{/gist_id}","starred_url":"https://api.github.com/users/geoffharcourt/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/geoffharcourt/subscriptions","organizations_url":"https://api.github.com/users/geoffharcourt/orgs","repos_url":"https://api.github.com/users/geoffharcourt/repos","events_url":"https://api.github.com/users/geoffharcourt/events{/privacy}","received_events_url":"https://api.github.com/users/geoffharcourt/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/rails-assets/rails-assets/labels/pending%20feedback","name":"pending feedback","color":"fef2c0"}],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":13,"created_at":"2015-03-19T20:41:44Z","updated_at":"2015-03-31T06:45:17Z","closed_at":null,"body":"http://openssl.org/news/secadv_20150319.txt\r\n\r\nI'm currently getting bad certificate errors since updating to OpenSSL 1.0.2a. I am able to access Rubygems over HTTPS without any issues, so I think this isn't specific to my development machine."},"comment":{"url":"https://api.github.com/repos/rails-assets/rails-assets/issues/comments/87965799","html_url":"https://github.com/rails-assets/rails-assets/issues/239#issuecomment-87965799","issue_url":"https://api.github.com/repos/rails-assets/rails-assets/issues/239","id":87965799,"user":{"login":"felixbuenemann","id":909587,"avatar_url":"https://avatars.githubusercontent.com/u/909587?v=3","gravatar_id":"","url":"https://api.github.com/users/felixbuenemann","html_url":"https://github.com/felixbuenemann","followers_url":"https://api.github.com/users/felixbuenemann/followers","following_url":"https://api.github.com/users/felixbuenemann/following{/other_user}","gists_url":"https://api.github.com/users/felixbuenemann/gists{/gist_id}","starred_url":"https://api.github.com/users/felixbuenemann/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/felixbuenemann/subscriptions","organizations_url":"https://api.github.com/users/felixbuenemann/orgs","repos_url":"https://api.github.com/users/felixbuenemann/repos","events_url":"https://api.github.com/users/felixbuenemann/events{/privacy}","received_events_url":"https://api.github.com/users/felixbuenemann/received_events","type":"User","site_admin":false},"created_at":"2015-03-31T06:45:17Z","updated_at":"2015-03-31T06:45:17Z","body":"@schurig's advice helped me too. I tested with a fresh ca bundle created from my system keychains and it was not sufficient:\r\n```bash\r\nsecurity find-certificate -a -p /Library/Keychains/System.keychain \\\r\n  /System/Library/Keychains/SystemRootCertificates.keychain > cabundle.pem\r\ncurl --cacert cabundle.pem -v https://rails-assets.org\r\n* Rebuilt URL to: https://rails-assets.org/\r\n* Hostname was NOT found in DNS cache\r\n*   Trying 178.32.77.8...\r\n* Connected to rails-assets.org (178.32.77.8) port 443 (#0)\r\n* SSL: certificate verification failed (result: 5)\r\n* Closing connection 0\r\ncurl: (51) SSL: certificate verification failed (result: 5)\r\n```\r\nWhy it works fine then in Safari is beyond me."}}