omniauth: Server certificate verification

WARNING: making https request to https://www.google.com/accounts/o8/.well-known/host-meta?hd=www.google.com without verifying server certificate; no CA path was specified.

 

Solution:

1) in config/environment.rb

# Load certificate bundler
OpenID.fetcher.ca_file = "#{Rails.root}/config/ca-bundle.crt"

2) put ruby-openid-apps-discovery into config
$ cd config
$ wget https://github.com/skrat/ruby-openid-apps-discovery/raw/master/lib/ca-bundle.crt

 

http://toddsedano.blogspot.com/2010/05/integrating-openid-google-apps-and-ruby.html