title: Using Client SSL in a Ruby on Rails App
body: <p>I'm working on an app for a client that requires an SSL connection with an API. I've been provided with three files; a trust root certificate (.cer) file, an intermediate certificate (.cer) file and a signed response file. The instructions I've been given to install this relate to either IIS or the Java keytool program; I'm building the app in Ruby on Rails so neither is an option (as far as I am aware). </p>
  
  <p>The certificates are self-signed by the organisation who runs the API service and it appears I get given client certificates to mutually authenticate an https connection. I'm unsure how to </p>
  
  <ol>
  <li>use the certificates in my application to connect and use the API</li>
  <li>what the signed response file does</li>
  </ol>
  
  <p>I've read <a href="https://stackoverflow.com/questions/2123362/using-a-self-signed-certificate">"Using a self-signed certificate"</a> and <a href="http://mathish.com/2011/01/14/openssl-in-ruby.html" rel="nofollow noreferrer">this article on OpenSSL in Ruby</a> but neither seems to quite hit the spot (and both have some reliance on Java/JRuby which confuses things). </p>
  
  <p>Any pointers would be greatly appreciated.</p>