{"action":"created","issue":{"url":"https://api.github.com/repos/nomad/shenzhen/issues/288","labels_url":"https://api.github.com/repos/nomad/shenzhen/issues/288/labels{/name}","comments_url":"https://api.github.com/repos/nomad/shenzhen/issues/288/comments","events_url":"https://api.github.com/repos/nomad/shenzhen/issues/288/events","html_url":"https://github.com/nomad/shenzhen/issues/288","id":97325000,"number":288,"title":"Unable to upload IPA using shenzhen on Travis CI","user":{"login":"a1cooke","id":1611431,"avatar_url":"https://avatars.githubusercontent.com/u/1611431?v=3","gravatar_id":"","url":"https://api.github.com/users/a1cooke","html_url":"https://github.com/a1cooke","followers_url":"https://api.github.com/users/a1cooke/followers","following_url":"https://api.github.com/users/a1cooke/following{/other_user}","gists_url":"https://api.github.com/users/a1cooke/gists{/gist_id}","starred_url":"https://api.github.com/users/a1cooke/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/a1cooke/subscriptions","organizations_url":"https://api.github.com/users/a1cooke/orgs","repos_url":"https://api.github.com/users/a1cooke/repos","events_url":"https://api.github.com/users/a1cooke/events{/privacy}","received_events_url":"https://api.github.com/users/a1cooke/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":4,"created_at":"2015-07-26T15:01:45Z","updated_at":"2015-08-26T17:16:39Z","closed_at":null,"body":"Hi,\r\n\r\nI have exhausted everything I found on the internet in an attempt to solve this problem.\r\n\r\nI am getting the following stack trace when I attempt to upload an IPA to HockeyApp.\r\n\r\n```\r\n[14:49:38]: fastlane finished with errors\r\n/Users/travis/.rvm/rubies/ruby-2.0.0-p643/lib/ruby/2.0.0/net/http.rb:921:in `connect': SSL_connect returned=1 errno=0 state=SSLv3 read server certificate B: certificate verify failed (Faraday::SSLError)\r\n\tfrom /Users/travis/.rvm/rubies/ruby-2.0.0-p643/lib/ruby/2.0.0/net/http.rb:921:in `block in connect'\r\n\tfrom /Users/travis/.rvm/rubies/ruby-2.0.0-p643/lib/ruby/2.0.0/timeout.rb:52:in `timeout'\r\n\tfrom /Users/travis/.rvm/rubies/ruby-2.0.0-p643/lib/ruby/2.0.0/net/http.rb:921:in `connect'\r\n\tfrom /Users/travis/.rvm/rubies/ruby-2.0.0-p643/lib/ruby/2.0.0/net/http.rb:862:in `do_start'\r\n\tfrom /Users/travis/.rvm/rubies/ruby-2.0.0-p643/lib/ruby/2.0.0/net/http.rb:851:in `start'\r\n\tfrom /Users/travis/.rvm/rubies/ruby-2.0.0-p643/lib/ruby/2.0.0/net/http.rb:1373:in `request'\r\n\tfrom /Users/travis/.rvm/gems/ruby-2.0.0-p643/gems/faraday-0.9.1/lib/faraday/adapter/net_http.rb:82:in `perform_request'\r\n\tfrom /Users/travis/.rvm/gems/ruby-2.0.0-p643/gems/faraday-0.9.1/lib/faraday/adapter/net_http.rb:40:in `block in call'\r\n\tfrom /Users/travis/.rvm/gems/ruby-2.0.0-p643/gems/faraday-0.9.1/lib/faraday/adapter/net_http.rb:87:in `with_net_http_connection'\r\n\tfrom /Users/travis/.rvm/gems/ruby-2.0.0-p643/gems/faraday-0.9.1/lib/faraday/adapter/net_http.rb:32:in `call'\r\n\tfrom /Users/travis/.rvm/gems/ruby-2.0.0-p643/gems/faraday_middleware-0.9.1/lib/faraday_middleware/response/follow_redirects.rb:79:in `perform_with_redirection'\r\n\tfrom /Users/travis/.rvm/gems/ruby-2.0.0-p643/gems/faraday_middleware-0.9.1/lib/faraday_middleware/response/follow_redirects.rb:65:in `call'\r\n\tfrom /Users/travis/.rvm/gems/ruby-2.0.0-p643/gems/faraday_middleware-0.9.1/lib/faraday_middleware/response_middleware.rb:30:in `call'\r\n\tfrom /Users/travis/.rvm/gems/ruby-2.0.0-p643/gems/faraday-0.9.1/lib/faraday/request/url_encoded.rb:15:in `call'\r\n\tfrom /Users/travis/.rvm/gems/ruby-2.0.0-p643/gems/faraday-0.9.1/lib/faraday/request/multipart.rb:14:in `call'\r\n\tfrom /Users/travis/.rvm/gems/ruby-2.0.0-p643/gems/faraday-0.9.1/lib/faraday/rack_builder.rb:139:in `build_response'\r\n\tfrom /Users/travis/.rvm/gems/ruby-2.0.0-p643/gems/faraday-0.9.1/lib/faraday/connection.rb:377:in `run_request'\r\n\tfrom /Users/travis/.rvm/gems/ruby-2.0.0-p643/gems/faraday-0.9.1/lib/faraday/connection.rb:177:in `post'\r\n\tfrom /Users/travis/.rvm/gems/ruby-2.0.0-p643/gems/krausefx-shenzhen-0.14.5/lib/shenzhen/plugins/hockeyapp.rb:29:in `upload_build'\r\n\tfrom /Users/travis/.rvm/gems/ruby-2.0.0-p643/gems/fastlane-1.13.0/lib/fastlane/actions/hockey.rb:43:in `run'\r\n\tfrom /Users/travis/.rvm/gems/ruby-2.0.0-p643/gems/fastlane-1.13.0/lib/fastlane/runner.rb:142:in `block (2 levels) in execute_action'\r\n\tfrom /Users/travis/.rvm/gems/ruby-2.0.0-p643/gems/fastlane-1.13.0/lib/fastlane/actions/actions_helper.rb:62:in `execute_action'\r\n\tfrom /Users/travis/.rvm/gems/ruby-2.0.0-p643/gems/fastlane-1.13.0/lib/fastlane/runner.rb:128:in `block in execute_action'\r\n\tfrom /Users/travis/.rvm/gems/ruby-2.0.0-p643/gems/fastlane-1.13.0/lib/fastlane/runner.rb:127:in `chdir'\r\n\tfrom /Users/travis/.rvm/gems/ruby-2.0.0-p643/gems/fastlane-1.13.0/lib/fastlane/runner.rb:127:in `execute_action'\r\n\tfrom /Users/travis/.rvm/gems/ruby-2.0.0-p643/gems/fastlane-1.13.0/lib/fastlane/fast_file.rb:120:in `method_missing'\r\n\tfrom (eval):49:in `block (3 levels) in parse'\r\n\tfrom /Users/travis/.rvm/gems/ruby-2.0.0-p643/gems/fastlane-1.13.0/lib/fastlane/lane.rb:29:in `call'\r\n\tfrom /Users/travis/.rvm/gems/ruby-2.0.0-p643/gems/fastlane-1.13.0/lib/fastlane/lane.rb:29:in `call'\r\n\tfrom /Users/travis/.rvm/gems/ruby-2.0.0-p643/gems/fastlane-1.13.0/lib/fastlane/runner.rb:50:in `block in execute'\r\n\tfrom /Users/travis/.rvm/gems/ruby-2.0.0-p643/gems/fastlane-1.13.0/lib/fastlane/runner.rb:44:in `chdir'\r\n\tfrom /Users/travis/.rvm/gems/ruby-2.0.0-p643/gems/fastlane-1.13.0/lib/fastlane/runner.rb:44:in `execute'\r\n\tfrom /Users/travis/.rvm/gems/ruby-2.0.0-p643/gems/fastlane-1.13.0/lib/fastlane/lane_manager.rb:36:in `cruise_lane'\r\n\tfrom /Users/travis/.rvm/gems/ruby-2.0.0-p643/gems/fastlane-1.13.0/lib/fastlane/command_line_handler.rb:31:in `handle'\r\n\tfrom /Users/travis/.rvm/gems/ruby-2.0.0-p643/gems/fastlane-1.13.0/bin/fastlane:35:in `block (2 levels) in run'\r\n\tfrom /Users/travis/.rvm/gems/ruby-2.0.0-p643/gems/commander-4.3.4/lib/commander/command.rb:178:in `call'\r\n\tfrom /Users/travis/.rvm/gems/ruby-2.0.0-p643/gems/commander-4.3.4/lib/commander/command.rb:178:in `call'\r\n\tfrom /Users/travis/.rvm/gems/ruby-2.0.0-p643/gems/commander-4.3.4/lib/commander/command.rb:153:in `run'\r\n\tfrom /Users/travis/.rvm/gems/ruby-2.0.0-p643/gems/commander-4.3.4/lib/commander/runner.rb:428:in `run_active_command'\r\n\tfrom /Users/travis/.rvm/gems/ruby-2.0.0-p643/gems/commander-4.3.4/lib/commander/runner.rb:68:in `run!'\r\n\tfrom /Users/travis/.rvm/gems/ruby-2.0.0-p643/gems/commander-4.3.4/lib/commander/delegates.rb:15:in `run!'\r\n\tfrom /Users/travis/.rvm/gems/ruby-2.0.0-p643/gems/fastlane-1.13.0/bin/fastlane:124:in `run'\r\n\tfrom /Users/travis/.rvm/gems/ruby-2.0.0-p643/gems/fastlane-1.13.0/bin/fastlane:130:in `<top (required)>'\r\n\tfrom /Users/travis/.rvm/gems/ruby-2.0.0-p643/bin/fastlane:23:in `load'\r\n\tfrom /Users/travis/.rvm/gems/ruby-2.0.0-p643/bin/fastlane:23:in `<main>'\r\n\tfrom /Users/travis/.rvm/gems/ruby-2.0.0-p643/bin/ruby_executable_hooks:15:in `eval'\r\n\tfrom /Users/travis/.rvm/gems/ruby-2.0.0-p643/bin/ruby_executable_hooks:15:in `<main>'\r\n```\r\nI've tried:\r\n* `rvm osx-ssl-certs update all`\r\n* Switching versions of Ruby\r\n* Using Homebrew to upgrade OpenSSL but all to no joy\r\n\r\nFindings:\r\nI did try and use a ruby script from SSL-tools: https://github.com/mislav/ssl-tools and ran the doctor.rb on travis with the following output:\r\n```\r\nOpenSSL 1.0.1j 15 Oct 2014: /etc/openssl\r\nSSL_CERT_DIR=\"\"\r\nSSL_CERT_FILE=\"/usr/local/etc/openssl/cert.pem\"\r\nHEAD https://upload.hockeyapp.net:443\r\nOK\r\n```\r\nI've tried the solutions proposed here:\r\n* https://github.com/KrauseFx/fastlane/issues/258\r\n* https://github.com/nomad/shenzhen/issues/255\r\n\r\nEnvironment Details:\r\n* Ruby Version: ruby 2.0.0p643 (2015-02-25 revision 49749) [x86_64-darwin14.1.0]\r\n* RVM Version: rvm 1.26.11 (latest) by Wayne E. Seguin <wayneeseguin@gmail.com>, Michal Papis <mpapis@gmail.com> [https://rvm.io/]\r\n\r\nI've concluded at some point along the way that the issue is somewhat isolated to Faraday but my limited knowledge of it has stopped me from tracking down the issue further."},"comment":{"url":"https://api.github.com/repos/nomad/shenzhen/issues/comments/135112136","html_url":"https://github.com/nomad/shenzhen/issues/288#issuecomment-135112136","issue_url":"https://api.github.com/repos/nomad/shenzhen/issues/288","id":135112136,"user":{"login":"chillpop","id":49619,"avatar_url":"https://avatars.githubusercontent.com/u/49619?v=3","gravatar_id":"","url":"https://api.github.com/users/chillpop","html_url":"https://github.com/chillpop","followers_url":"https://api.github.com/users/chillpop/followers","following_url":"https://api.github.com/users/chillpop/following{/other_user}","gists_url":"https://api.github.com/users/chillpop/gists{/gist_id}","starred_url":"https://api.github.com/users/chillpop/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/chillpop/subscriptions","organizations_url":"https://api.github.com/users/chillpop/orgs","repos_url":"https://api.github.com/users/chillpop/repos","events_url":"https://api.github.com/users/chillpop/events{/privacy}","received_events_url":"https://api.github.com/users/chillpop/received_events","type":"User","site_admin":false},"created_at":"2015-08-26T17:16:39Z","updated_at":"2015-08-26T17:16:39Z","body":"Adding the following commands to `before_install` appears to fix the problem:\r\n```yml\r\n  - sudo security delete-certificate -Z 2F173F7DE99667AFA57AF80AA2D1B12FAC830338 /System/Library/Keychains/SystemRootCertificates.keychain\r\n  - rvm osx-ssl-certs update all\r\n```\r\n\r\nI believe the issue is that the expired GlobalSign root certificate is in the keychain of those Travis OS X images. The first line deletes the expired certificate. The second line re-exports the revised certificates from the keychain (propagating the delete to openssl).\r\n\r\n(https://support.globalsign.com/customer/portal/articles/1426272-expiration-of-old-globalsign-2014-root-ca-certificate)\r\n\r\nThis issue should be closed since it is an issue with Travis, not shenzhen."}}