undefined method `set_params' for OpenSSL::SSL::SSLContext when performing gem install with jruby

[ctaslimsq]

jruby is no longer able to use jruby-openssl library when performing gem install due to error below

# gem install bundler -V
ERROR:  While executing gem ... (NoMethodError)
    undefined method `set_params' for #<OpenSSL::SSL::SSLContext:0x512535ff>

I think that this commit is what broke it 588f414#diff-b84c6421b27eb9594128e9e623d2891cff5c1d5001cb5177ec127e628a58b0ecR143

@kares

[kares]

thanks for the report, could you clarify your environment (jruby -v, gem env etc.) it does not seem right the set_params method is expected to exists. here's my attempt to reproduce:

gem list jruby-openssl

*** LOCAL GEMS ***

jruby-openssl (0.12.1 java, default: 0.11.0 java)

gem install bundler -V

HEAD https://rubygems.org/api/v1/dependencies
200 OK
GET https://rubygems.org/api/v1/dependencies?gems=bundler
200 OK
Downloading gem bundler-2.3.6.gem
GET https://rubygems.org/gems/bundler-2.3.6.gem
Fetching bundler-2.3.6.gem
200 OK
/opt/local/rvm/gems/jruby-9.2.20.1@ls/gems/bundler-2.3.6/CHANGELOG.md
/opt/local/rvm/gems/jruby-9.2.20.1@ls/gems/bundler-2.3.6/LICENSE.md
/opt/local/rvm/gems/jruby-9.2.20.1@ls/gems/bundler-2.3.6/README.md
/opt/local/rvm/gems/jruby-9.2.20.1@ls/gems/bundler-2.3.6/bundler.gemspec
/opt/local/rvm/gems/jruby-9.2.20.1@ls/gems/bundler-2.3.6/exe/bundle
/opt/local/rvm/gems/jruby-9.2.20.1@ls/gems/bundler-2.3.6/exe/bundler
...
/opt/local/rvm/gems/jruby-9.2.20.1@ls/bin/bundle
/opt/local/rvm/gems/jruby-9.2.20.1@ls/bin/bundler
Successfully installed bundler-2.3.6
1 gem installed

[ctaslimsq]

Sorry i didn't include it in the original details.

installation steps i took that with gem install that works

# /usr/local/rvm/bin/rvm reinstall --disable-binary jruby-9.2.19.0
# rvm use jruby-9.2.19.0
# jruby -v
jruby 9.2.19.0 (2.5.8) 2022-02-10 55810c552b OpenJDK 64-Bit Server VM 25.272-b10 on 1.8.0_272-b10 +jit [linux-x86_64]
# gem -v
3.1.6
# rvm -v
rvm 1.29.12 (latest) by Michal Papis, Piotr Kuczynski, Wayne E. Seguin [https://rvm.io]
# gem which jruby-openssl
/usr/local/rvm/rubies/jruby-9.2.19.0/lib/ruby/gems/shared/gems/jruby-openssl-0.12.1-java/lib/jruby-openssl.rb
# gem install webmock
Successfully installed webmock-3.14.0
Parsing documentation for webmock-3.14.0
Done installing documentation for webmock after 2 seconds
1 gem installed

switching to rubygems 3.2.7 makes it start to break

# rvm rubygems 3.2.7
jruby-9.2.19.0 - #downloading rubygems-3.2.7
jruby-9.2.19.0 - #extracting rubygems-3.2.7......
jruby-9.2.19.0 - #removing old rubygems........
jruby-9.2.19.0 - #installing rubygems-3.2.7...........
# gem install webmock
ERROR:  While executing gem ... (NoMethodError)
    undefined method `set_params' for #<OpenSSL::SSL::SSLContext:0x13d9b21f>
# gem which jruby-openssl
/usr/local/rvm/rubies/jruby-9.2.19.0/lib/ruby/gems/shared/gems/jruby-openssl-0.12.1-java/lib/jruby-openssl.rb
# jruby -v
jruby 9.2.19.0 (2.5.8) 2022-02-10 55810c552b OpenJDK 64-Bit Server VM 25.272-b10 on 1.8.0_272-b10 +jit [linux-x86_64]
# gem env
RubyGems Environment:
  - RUBYGEMS VERSION: 3.2.7
  - RUBY VERSION: 2.5.8 (2022-02-10 patchlevel 0) [java]
  - INSTALLATION DIRECTORY: /usr/local/rvm/gems/jruby-9.2.19.0
  - USER INSTALLATION DIRECTORY: /root/.gem/jruby/2.5.0
  - RUBY EXECUTABLE: /usr/local/rvm/rubies/jruby-9.2.19.0/bin/jruby
  - GIT EXECUTABLE: /usr/local/bin/git
  - EXECUTABLE DIRECTORY: /usr/local/rvm/gems/jruby-9.2.19.0/bin
  - SPEC CACHE DIRECTORY: /root/.gem/specs
  - SYSTEM CONFIGURATION DIRECTORY: /usr/local/rvm/rubies/jruby-9.2.19.0/etc
  - RUBYGEMS PLATFORMS:
     - ruby
     - universal-java-1.8
  - GEM PATHS:
     - /usr/local/rvm/gems/jruby-9.2.19.0
     - /usr/local/rvm/rubies/jruby-9.2.19.0/lib/ruby/gems/shared
  - GEM CONFIGURATION:
     - :update_sources => true
     - :verbose => true
     - :backtrace => false
     - :bulk_threshold => 1000
     - "install" => "--no-rdoc --no-ri"
     - "update" => "--no-rdoc --no-ri"
     - "setup" => "--env-shebang"
     - "pristine" => "--env-shebang"
  - REMOTE SOURCES:
     - https://rubygems.org/
  - SHELL PATH:
     - /usr/local/rvm/gems/jruby-9.2.19.0/bin
     - /usr/local/rvm/gems/jruby-9.2.19.0@global/bin
     - /usr/local/rvm/rubies/jruby-9.2.19.0/bin
     - /usr/local/rvm/bin
     - /usr/local/go/bin
     - /usr/local/bin
     - /usr/local/sbin
     - /usr/local/bin
     - /usr/sbin
     - /usr/bin
     - /sbin
     - /bin

changing the jruby-openssl installation to an older version (0.11.0) makes it work again

# gem uninstall -i /usr/local/rvm/rubies/jruby-9.2.19.0/lib/ruby/gems/shared jruby-openssl
Gem jruby-openssl-0.10.5-java cannot be uninstalled because it is a default gem
Successfully uninstalled jruby-openssl-0.12.1-java
# gem install jruby-openssl:0.11.0
Fetching jruby-openssl-0.11.0-java.gem
Successfully installed jruby-openssl-0.11.0-java
Parsing documentation for jruby-openssl-0.11.0-java
Installing ri documentation for jruby-openssl-0.11.0-java
Done installing documentation for jruby-openssl after 2 seconds
1 gem installed
# gem install six
Fetching six-0.2.2.gem
Successfully installed six-0.2.2
Parsing documentation for six-0.2.2
Installing ri documentation for six-0.2.2
Done installing documentation for six after 0 seconds
1 gem installed
# gem which jruby-openssl
/usr/local/rvm/gems/jruby-9.2.19.0/gems/jruby-openssl-0.11.0-java/lib/jruby-openssl.rb

[kares]

Thanks, this must be some kind of loading mess because 0.12.1 has the method if you just run:

jruby -v -ropenssl -e 'p JOpenSSL::VERSION; p OpenSSL::SSL::SSLContext.new.set_params {}'

jruby 9.2.20.0 (2.5.8) 2021-11-02 1a3255440b Java HotSpot(TM) 64-Bit Server VM 11.0.13+10-LTS-370 on 11.0.13+10-LTS-370 +jit [linux-x86_64]
"0.12.1"
{:min_version=>769, :verify_mode=>1, :verify_hostname=>nil}

One way I would be able to explain this is the following:

• there's jruby-openssl 0.11.0 (or whatever version) that comes with JRuby (default gem)
• gem install jruby-openssl -v 0.12.1 so we have an "override" for the default gem
• at some point within Bundler's loading of require 'openssl' we end up loading jopenssl.jar from 0.12.1 but load
  the openssl/ssl.rb from stdlib (old version) instead of the version of the file shipped with 0.12.1

Do you think you can confirm that, intercepting the load process and printing the $LOAD_PATH upon the error?

[ctaslimsq]

So I tried to go through the same path I took in the steps in my previous comment with the load path output you requested

reinstalled jruby version again

# /usr/local/rvm/bin/rvm reinstall --disable-binary jruby-9.2.19.0
# rvm use jruby-9.2.19.0

modify the gem command file to include puts $LOAD_PATH before the main operation begins

# which gem
/usr/local/rvm/rubies/jruby-9.2.19.0/bin/gem
# cat /usr/local/rvm/rubies/jruby-9.2.19.0/bin/gem
#!/usr/bin/env jruby
#--
# Copyright 2006 by Chad Fowler, Rich Kilmer, Jim Weirich and others.
# All rights reserved.
# See LICENSE.txt for permissions.
#++

require 'rubygems'
require 'rubygems/gem_runner'
require 'rubygems/exceptions'

args = ARGV.clone

begin
  puts $LOAD_PATH
  Gem::GemRunner.new.run args
rescue Gem::SystemExitException => e
  exit e.exit_code
end

output of this

# gem install six
/usr/local/rvm/rubies/jruby-9.2.19.0/lib/ruby/gems/shared/gems/did_you_mean-1.2.1/lib
/usr/local/rvm/rubies/jruby-9.2.19.0/lib/ruby/gems/shared/gems/executable-hooks-1.6.1/lib
/usr/local/rvm/rubies/jruby-9.2.19.0/lib/ruby/gems/shared/extensions/universal-java-1.8/2.5.0/executable-hooks-1.6.1
/usr/local/rvm/rubies/jruby-9.2.19.0/lib/ruby/gems/shared/gems/jruby-openssl-0.12.1-java/lib
/usr/local/rvm/rubies/jruby-9.2.19.0/lib/ruby/gems/shared/gems/gem-wrappers-1.4.0/lib
/usr/local/rvm/rubies/jruby-9.2.19.0/lib/ruby/gems/shared/extensions/universal-java-1.8/2.5.0/gem-wrappers-1.4.0
/usr/local/rvm/rubies/jruby-9.2.19.0/lib/ruby/2.5/site_ruby
/usr/local/rvm/rubies/jruby-9.2.19.0/lib/ruby/stdlib
Successfully installed six-0.2.2
Parsing documentation for six-0.2.2
Done installing documentation for six after 0 seconds
1 gem installed

going to try to break it again by switching the rubygems version to 3.2.7, and re-modify the gem command file to include $LOAD_PATH

# rvm rubygems 3.2.7
# which gem
/usr/local/rvm/rubies/jruby-9.2.19.0/bin/gem
# cat /usr/local/rvm/rubies/jruby-9.2.19.0/bin/gem
#!/usr/bin/env jruby
#--
# Copyright 2006 by Chad Fowler, Rich Kilmer, Jim Weirich and others.
# All rights reserved.
# See LICENSE.txt for permissions.
#++

require 'rubygems'
require 'rubygems/gem_runner'
require 'rubygems/exceptions'

args = ARGV.clone

begin
  puts $LOAD_PATH
  Gem::GemRunner.new.run args
rescue Gem::SystemExitException => e
  exit e.exit_code
end

output of it breaking + the reduced $LOAD_PATH

[root@64cfbab6e72c project]# gem install six
/usr/local/rvm/rubies/jruby-9.2.19.0/lib/ruby/gems/shared/gems/did_you_mean-1.2.1/lib
/usr/local/rvm/rubies/jruby-9.2.19.0/lib/ruby/2.5/site_ruby
/usr/local/rvm/rubies/jruby-9.2.19.0/lib/ruby/stdlib
ERROR:  While executing gem ... (NoMethodError)
    undefined method `set_params' for #<OpenSSL::SSL::SSLContext:0x512535ff>

uninstalling and installing an older version jruby-openssl 0.11.0

# gem uninstall -i /usr/local/rvm/rubies/jruby-9.2.19.0/lib/ruby/gems/shared jruby-openssl
/usr/local/rvm/rubies/jruby-9.2.19.0/lib/ruby/gems/shared/gems/did_you_mean-1.2.1/lib
/usr/local/rvm/rubies/jruby-9.2.19.0/lib/ruby/2.5/site_ruby
/usr/local/rvm/rubies/jruby-9.2.19.0/lib/ruby/stdlib
Gem jruby-openssl-0.10.5-java cannot be uninstalled because it is a default gem
Successfully uninstalled jruby-openssl-0.12.1-java

# gem install jruby-openssl:0.11.0

trying gem install again which works along with the LOAD_PATH

# gem install webmock
/usr/local/rvm/rubies/jruby-9.2.19.0/lib/ruby/gems/shared/gems/did_you_mean-1.2.1/lib
/usr/local/rvm/rubies/jruby-9.2.19.0/lib/ruby/2.5/site_ruby
/usr/local/rvm/rubies/jruby-9.2.19.0/lib/ruby/stdlib
Successfully installed webmock-3.14.0
Parsing documentation for webmock-3.14.0
Done installing documentation for webmock after 2 seconds
1 gem installed

[skunkworker]

I've also been seeing this on recent JRuby installs where the latest rubygems is being pulled. The only way to get the previous behavior is to remove 0.12.1 and use 0.11.0. This is a breaking change

[kares]

sorry to circle back so late - this issue is weird but I made some progress and seems the problem is with how things get loaded -> a minimal reproducer: https://gist.github.com/kares/7379d315076f2a57927149cc116ae100

JRuby 9.2.20.1 (as well as JRuby 9.3.3.0) as part of the RVM install gem update jruby-openssl gem, so things might look as following (notice jruby-openssl (0.12.1 java, default: 0.11.0 java)):

*** LOCAL GEMS ***

bundler (default: 2.3.8)
bundler-unload (1.0.2)
cmath (default: 1.0.0)
csv (default: 1.0.0)
did_you_mean (1.2.1)
executable-hooks (1.6.1)
ffi (default: 1.15.4 java)
fileutils (default: 1.1.0)
gem-wrappers (1.4.0)
io-console (default: 0.5.9 java)
ipaddr (default: 1.2.0)
jar-dependencies (default: 0.4.1)
jruby-launcher (1.1.19 java)
jruby-openssl (0.12.1 java, default: 0.11.0 java)
jruby-readline (default: 1.3.7 java)
json (default: 2.5.1 java)
manticore (0.8.0 java)
minitest (5.10.3)
net-telnet (0.1.1)
openssl_pkcs8_pure (0.0.0.2)
power_assert (1.1.3)
psych (default: 3.2.0 java)
racc (default: 1.5.2 java)
rake (13.0.6, 12.3.3)
rake-ant (default: 1.0.4)
rdoc (default: 6.1.2)
rubygems-bundler (1.4.5)
rubygems-update (3.3.8)
rvm (1.11.3.9)
scanf (default: 1.0.0)
test-unit (3.2.8)
webrick (default: 1.6.1)
xmlrpc (0.3.0)

... in jruby-openssl 0.12.1 loading got changed to be more aligned with MRI.

JRuby-OpenSSL 0.11.0 has this in openssl.rb :

require 'jopenssl/load'

JRuby-OpenSSL 0.12.x has this in openssl.rb :

# frozen_string_literal: true

require 'jopenssl/load'

module OpenSSL
  autoload :Config, 'openssl/config' unless const_defined?(:Config, false)
  autoload :PKCS12, 'openssl/pkcs12'
end

=begin
= Info
  'OpenSSL for Ruby 2' project
  Copyright (C) 2002  Michal Rokos <m.rokos@sh.cvut.cz>
  All rights reserved.

= Licence
  This program is licensed under the same licence as Ruby.
  (See the file 'LICENCE'.)
=end

require_relative 'openssl/bn'
require_relative 'openssl/pkey'
require_relative 'openssl/cipher'
#require_relative 'openssl/config' if OpenSSL.const_defined?(:Config, false)
require_relative 'openssl/digest'
require_relative 'openssl/hmac'
require_relative 'openssl/x509'
require_relative 'openssl/ssl'
require_relative 'openssl/pkcs5'

module OpenSSL
  # call-seq:
  #   OpenSSL.secure_compare(string, string) -> boolean
  #
  # Constant time memory comparison. Inputs are hashed using SHA-256 to mask
  # the length of the secret. Returns +true+ if the strings are identical,
  # +false+ otherwise.
  def self.secure_compare(a, b)
    hashed_a = OpenSSL::Digest.digest('SHA256', a)
    hashed_b = OpenSSL::Digest.digest('SHA256', b)
    OpenSSL.fixed_length_secure_compare(hashed_a, hashed_b) && a == b
  end
end

** this loading is internal and both load fine on their own - the problem is here loading gets mixed up: **

undefined method `set_params' for #<OpenSSL::SSL::SSLContext:0x6d7677d8>

$LOAD_PATH:
  /opt/local/rvm/rubies/jruby-9.2.20.1/lib/ruby/gems/shared/gems/did_you_mean-1.2.1/lib
  /opt/local/rvm/rubies/jruby-9.2.20.1/lib/ruby/gems/shared/gems/jruby-openssl-0.12.1-java/lib
  /opt/local/rvm/rubies/jruby-9.2.20.1/lib/ruby/2.5/site_ruby
  /opt/local/rvm/rubies/jruby-9.2.20.1/lib/ruby/stdlib
  
$LOADED_FEATURES:
  # ...
  /opt/local/rvm/rubies/jruby-9.2.20.1/lib/ruby/stdlib/unicode_normalize.rb
  /opt/local/rvm/rubies/jruby-9.2.20.1/lib/ruby/stdlib/rbconfig.rb
  /opt/local/rvm/rubies/jruby-9.2.20.1/lib/ruby/stdlib/rubygems/compatibility.rb
  # ...
  /opt/local/rvm/rubies/jruby-9.2.20.1/lib/ruby/stdlib/rubygems/source.rb
  /opt/local/rvm/rubies/jruby-9.2.20.1/lib/ruby/stdlib/bundler/vendor/fileutils/lib/fileutils.rb
  /opt/local/rvm/rubies/jruby-9.2.20.1/lib/ruby/stdlib/bundler/vendored_fileutils.rb
  /opt/local/rvm/rubies/jruby-9.2.20.1/lib/ruby/stdlib/pathname.rb
  /opt/local/rvm/rubies/jruby-9.2.20.1/lib/ruby/stdlib/bundler/errors.rb
  /opt/local/rvm/rubies/jruby-9.2.20.1/lib/ruby/stdlib/bundler/environment_preserver.rb
  /opt/local/rvm/rubies/jruby-9.2.20.1/lib/ruby/stdlib/bundler/plugin/api.rb
  /opt/local/rvm/rubies/jruby-9.2.20.1/lib/ruby/stdlib/bundler/plugin.rb
  /opt/local/rvm/rubies/jruby-9.2.20.1/lib/ruby/stdlib/bundler/gem_helpers.rb
  /opt/local/rvm/rubies/jruby-9.2.20.1/lib/ruby/stdlib/bundler/match_platform.rb
  /opt/local/rvm/rubies/jruby-9.2.20.1/lib/ruby/stdlib/bundler/rubygems_ext.rb
  /opt/local/rvm/rubies/jruby-9.2.20.1/lib/ruby/stdlib/bundler/rubygems_integration.rb
  /opt/local/rvm/rubies/jruby-9.2.20.1/lib/ruby/stdlib/bundler/version.rb
  /opt/local/rvm/rubies/jruby-9.2.20.1/lib/ruby/stdlib/bundler/constants.rb
  /opt/local/rvm/rubies/jruby-9.2.20.1/lib/ruby/stdlib/bundler/current_ruby.rb
  /opt/local/rvm/rubies/jruby-9.2.20.1/lib/ruby/stdlib/bundler/build_metadata.rb
  /opt/local/rvm/rubies/jruby-9.2.20.1/lib/ruby/stdlib/bundler.rb
  # ...
  /opt/local/rvm/rubies/jruby-9.2.20.1/lib/ruby/stdlib/net/http.rb
  /opt/local/rvm/rubies/jruby-9.2.20.1/lib/ruby/stdlib/cgi/core.rb
  /opt/local/rvm/rubies/jruby-9.2.20.1/lib/ruby/stdlib/cgi/escape.rb
  /opt/local/rvm/rubies/jruby-9.2.20.1/lib/ruby/stdlib/cgi/util.rb
  /opt/local/rvm/rubies/jruby-9.2.20.1/lib/ruby/stdlib/cgi/cookie.rb
  /opt/local/rvm/rubies/jruby-9.2.20.1/lib/ruby/stdlib/cgi.rb
  /opt/local/rvm/rubies/jruby-9.2.20.1/lib/ruby/stdlib/bundler/vendor/connection_pool/lib/connection_pool/version.rb
  /opt/local/rvm/rubies/jruby-9.2.20.1/lib/ruby/stdlib/bundler/vendor/connection_pool/lib/connection_pool/timed_stack.rb
  /opt/local/rvm/rubies/jruby-9.2.20.1/lib/ruby/stdlib/bundler/vendor/connection_pool/lib/connection_pool/wrapper.rb
  /opt/local/rvm/rubies/jruby-9.2.20.1/lib/ruby/stdlib/bundler/vendor/connection_pool/lib/connection_pool.rb
  /opt/local/rvm/rubies/jruby-9.2.20.1/lib/ruby/gems/shared/gems/jruby-openssl-0.12.1-java/lib/jopenssl/version.rb
  /opt/local/rvm/rubies/jruby-9.2.20.1/lib/ruby/stdlib/jar_dependencies.rb
  /opt/local/rvm/rubies/jruby-9.2.20.1/lib/ruby/stdlib/jar-dependencies.rb
  /opt/local/rvm/rubies/jruby-9.2.20.1/lib/ruby/stdlib/rubygems/uri_formatter.rb
  /opt/local/rvm/rubies/jruby-9.2.20.1/lib/ruby/stdlib/jars/maven_settings.rb
  /opt/local/maven-repo/org/bouncycastle/bcprov-jdk15on/1.68/bcprov-jdk15on-1.68.jar
  /opt/local/maven-repo/org/bouncycastle/bcpkix-jdk15on/1.68/bcpkix-jdk15on-1.68.jar
  /opt/local/maven-repo/org/bouncycastle/bctls-jdk15on/1.68/bctls-jdk15on-1.68.jar
  /opt/local/rvm/rubies/jruby-9.2.20.1/lib/ruby/gems/shared/gems/jruby-openssl-0.12.1-java/lib/jopenssl.jar
  /opt/local/rvm/rubies/jruby-9.2.20.1/lib/ruby/stdlib/digest.rb
  /opt/local/rvm/rubies/jruby-9.2.20.1/lib/ruby/gems/shared/gems/jruby-openssl-0.12.1-java/lib/jopenssl/load.rb
  /opt/local/rvm/rubies/jruby-9.2.20.1/lib/ruby/stdlib/openssl.rb
  # ...

there's a lot missing from the above $LOADED_FEATURES but essentially:

• rubygems.rb is being loaded
• than bundler.rb is being loaded
• eventually openssl.rb starts to get loaded but notice:
  • /opt/local/rvm/rubies/jruby-9.2.20.1/lib/ruby/stdlib/openssl.rb (from jossl 0.11.0)
  • got mixed with ruby/gems/shared/gems/jruby-openssl-0.12.1-java/lib/jopenssl/load.rb (from jossl 0.12.1)
    the attempt is clearly to load latest installed jruby-openssl version but things get mixed up

The loading issue could have existed for a long time unnoticed, not sure, it's just that lately in jruby-openssl the openssl .rb bits got simplified - obviously using the openssl.rb from the older version won't load OpenSSL bits correctly 😿

[kares]

need to figure out how RGs' get activation happens, clearly it happened at some point:

  /opt/local/rvm/rubies/jruby-9.2.20.1/lib/ruby/gems/shared/gems/jruby-openssl-0.12.1-java/lib
  /opt/local/rvm/rubies/jruby-9.2.20.1/lib/ruby/2.5/site_ruby
  /opt/local/rvm/rubies/jruby-9.2.20.1/lib/ruby/stdlib

... but I think the $LOAD_PATH looked like this (right before require 'openssl') :

  /opt/local/rvm/rubies/jruby-9.2.20.1/lib/ruby/2.5/site_ruby
  /opt/local/rvm/rubies/jruby-9.2.20.1/lib/ruby/stdlib

[kares]

Updated previous comment - the issue only affects JRuby 9.2, JRuby 9.3 is unaffected.
9.3 rewrote the loading service and this is likely coming from autoload :OpenSSL bits setup by rubygems/bundler.
in 9.2 such auto-load would not trigger the require re-defined by RubyGems, in 9.3 this is expected to work correctly.

knowing that a viable work-around for the issue on 9.2 is to force openssl to load via en explicit require early e.g.

• jruby -ropenssl -S bundle (instead of bundle ...)
• export RUBYOPT="-ropenssl" will work as well than bundle update as usual, however this assumes:
  • gem 'jruby-openssl' is not part of the Gemfile (directly or indirectly)
  • if it's part of the Bundle than the latest version installed locally needs to match the Gemfile.lock version

[kares]

pushed jruby-openssl 0.12.2 and I can confirm the work-around in how .rb files are loaded works.