Fix OpenSSL::SSL::SSLError due to Dokku Let's Encrypt SSL certificates
Budget: $30 – $250 CAD
Our main Ruby on Rails app relies on another CouchDB API (deployed via a Dokku instance) whose root certificate recently expired causing the Ruby on Rails app to throw OpenSSL::SSL::SSLError errors. The timeout issues are due to the fact that both services use a letsencrypt certificates, I think because the root cert expired as described here: https://letsencrypt.org/docs/dst-root-ca-x3-expiration-september-2021/#:~:text=On%20September%2030%202021%2C%20there,accept%20your%20Let's%20Encrypt%20certificate. I think the solution is related to the client (Ruby on Rails) needs to trust the ISRG Root X1 certificate.
The full error is in the Ruby on Rails app is OpenSSL::SSL::SSLError (SSL_connect returned=1 errno=0 state=error: certificate verify failed (certificate has expired))
The full error is in the Ruby on Rails app is OpenSSL::SSL::SSLError (SSL_connect returned=1 errno=0 state=error: certificate verify failed (certificate has expired))