ruby/rubygems · error · Gem::Security::Exception

invalid signing chain: #{e.message}

Error message

invalid signing chain: #{e.message}

What it means

Error "invalid signing chain: #{e.message}" thrown in ruby/rubygems.

Source

Thrown at lib/rubygems/security/policy.rb:67

    end
  end

  ##
  # Verifies each certificate in +chain+ has signed the following certificate
  # and is valid for the given +time+.

  def check_chain(chain, time)
    raise Gem::Security::Exception, "missing signing chain" unless chain
    raise Gem::Security::Exception, "empty signing chain" if chain.empty?

    begin
      chain.each_cons 2 do |issuer, cert|
        check_cert cert, issuer, time
      end

      true
    rescue Gem::Security::Exception => e
      raise Gem::Security::Exception, "invalid signing chain: #{e.message}"
    end
  end

  ##
  # Verifies that +data+ matches the +signature+ created by +public_key+ and
  # the +digest+ algorithm.

  def check_data(public_key, digest, signature, data)
    raise Gem::Security::Exception, "invalid signature" unless
      public_key.verify digest, signature, data.digest

    true
  end

  ##
  # Ensures that +signer+ is valid for +time+ and was signed by the +issuer+.
  # If the +issuer+ is +nil+ no verification is performed.

View on GitHub (pinned to 86cbb817a3)

Solutions

1. Fix the certificate chain (see the wrapped error) and re-sign the gem

When it happens

Trigger: Thrown at lib/rubygems/security/policy.rb:67 when the library encounters an invalid state.

Common situations: See trigger scenarios.

AI-assisted analysis of ruby/rubygems@86cbb817a3 (2026-08-23). Data as JSON: /api/errors/44b95b41372429e2. Report an issue: GitHub.