{"record":{"id":"33351aebfcbf4e74","repo":"ruby/rubygems","slug":"invalid-signature","errorCode":null,"errorMessage":"invalid signature","messagePattern":"invalid signature","errorType":"exception","errorClass":"Gem::Security::Exception","httpStatus":null,"severity":"error","filePath":"lib/rubygems/security/policy.rb","lineNumber":76,"sourceCode":"    raise Gem::Security::Exception, \"empty signing chain\" if chain.empty?\n\n    begin\n      chain.each_cons 2 do |issuer, cert|\n        check_cert cert, issuer, time\n      end\n\n      true\n    rescue Gem::Security::Exception => e\n      raise Gem::Security::Exception, \"invalid signing chain: #{e.message}\"\n    end\n  end\n\n  ##\n  # Verifies that +data+ matches the +signature+ created by +public_key+ and\n  # the +digest+ algorithm.\n\n  def check_data(public_key, digest, signature, data)\n    raise Gem::Security::Exception, \"invalid signature\" unless\n      public_key.verify digest, signature, data.digest\n\n    true\n  end\n\n  ##\n  # Ensures that +signer+ is valid for +time+ and was signed by the +issuer+.\n  # If the +issuer+ is +nil+ no verification is performed.\n\n  def check_cert(signer, issuer, time)\n    raise Gem::Security::Exception, \"missing signing certificate\" unless\n      signer\n\n    message = \"certificate #{signer.subject}\"\n\n    if (not_before = signer.not_before) && not_before > time\n      raise Gem::Security::Exception,\n            \"#{message} not valid before #{not_before}\"","sourceCodeStart":58,"sourceCodeEnd":94,"githubUrl":"https://github.com/ruby/rubygems/blob/86cbb817a38ce8477b181c17467a703ded3f2be8/lib/rubygems/security/policy.rb#L58-L94","documentation":"Error \"invalid signature\" thrown in ruby/rubygems.","triggerScenarios":"Thrown at lib/rubygems/security/policy.rb:76 when the library encounters an invalid state.","commonSituations":"See trigger scenarios.","solutions":["The gem signature does not verify; re-download the gem from the official source","If you maintain the gem, re-sign it and republish"],"exampleFix":null,"handlingStrategy":null,"validationCode":null,"typeGuard":null,"tryCatchPattern":null,"preventionTips":[],"tags":[],"backgroundTag":null,"analyzedSha":"86cbb817a38ce8477b181c17467a703ded3f2be8","analyzedAt":"2026-08-23T06:27:48.159Z","schemaVersion":2},"datasetVersion":"2026-08-23T08:06:27.607Z"}