{"action":"created","issue":{"url":"https://api.github.com/repos/seattlerb/minitest/issues/558","labels_url":"https://api.github.com/repos/seattlerb/minitest/issues/558/labels{/name}","comments_url":"https://api.github.com/repos/seattlerb/minitest/issues/558/comments","events_url":"https://api.github.com/repos/seattlerb/minitest/issues/558/events","html_url":"https://github.com/seattlerb/minitest/issues/558","id":91196806,"number":558,"title":"Attempting to install MiniTest with MediumSecurity or higher fails.","user":{"login":"jdickey","id":157938,"avatar_url":"https://avatars.githubusercontent.com/u/157938?v=3","gravatar_id":"","url":"https://api.github.com/users/jdickey","html_url":"https://github.com/jdickey","followers_url":"https://api.github.com/users/jdickey/followers","following_url":"https://api.github.com/users/jdickey/following{/other_user}","gists_url":"https://api.github.com/users/jdickey/gists{/gist_id}","starred_url":"https://api.github.com/users/jdickey/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/jdickey/subscriptions","organizations_url":"https://api.github.com/users/jdickey/orgs","repos_url":"https://api.github.com/users/jdickey/repos","events_url":"https://api.github.com/users/jdickey/events{/privacy}","received_events_url":"https://api.github.com/users/jdickey/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":6,"created_at":"2015-06-26T09:04:32Z","updated_at":"2015-06-27T00:12:40Z","closed_at":null,"body":"```\r\n$ gem install -P MediumSecurity minitest\r\nERROR:  While executing gem ... (Gem::Security::Exception)\r\n    root cert /CN=ryand-ruby/DC=zenspider/DC=com is not trusted\r\n```\r\n\r\nSigned Gems with trustable certificates would be Helpful."},"comment":{"url":"https://api.github.com/repos/seattlerb/minitest/issues/comments/115923231","html_url":"https://github.com/seattlerb/minitest/issues/558#issuecomment-115923231","issue_url":"https://api.github.com/repos/seattlerb/minitest/issues/558","id":115923231,"user":{"login":"zenspider","id":9832,"avatar_url":"https://avatars.githubusercontent.com/u/9832?v=3","gravatar_id":"","url":"https://api.github.com/users/zenspider","html_url":"https://github.com/zenspider","followers_url":"https://api.github.com/users/zenspider/followers","following_url":"https://api.github.com/users/zenspider/following{/other_user}","gists_url":"https://api.github.com/users/zenspider/gists{/gist_id}","starred_url":"https://api.github.com/users/zenspider/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/zenspider/subscriptions","organizations_url":"https://api.github.com/users/zenspider/orgs","repos_url":"https://api.github.com/users/zenspider/repos","events_url":"https://api.github.com/users/zenspider/events{/privacy}","received_events_url":"https://api.github.com/users/zenspider/received_events","type":"User","site_admin":false},"created_at":"2015-06-27T00:12:40Z","updated_at":"2015-06-27T00:12:40Z","body":"@jdickey take a look at http://www.zenspider.com/~ryan/security.txt\r\n\r\nDon't run it blindly, tho I've run it several times on my system now. That's the gist of the security model for rubygems. In my specific case, there's some added complexity to deal with my certificate provider not being in the major root chains. The script uses `security` to add the certificate root for cacert.org to the keychain, but `security` assumes/imples you're running on OSX. I don't know the equivalent cmds for linux/windows/whatever.\r\n\r\nThe first curl also has `-k` to disable cert verification, since cacert uses cacert there is a chicken&egg problem going on.\r\n\r\nI was able to use this script and now `-P MediumSecurity` works fine."}}