WARNING: making https request to https://www.google.com/accounts/o8/.well-known/host-meta?hd=www.google.com without verifying server certificate; no CA path was specified.
Solution:
1) in config/environment.rb
# Load certificate bundler
OpenID.fetcher.ca_file = "#{Rails.root}/config/ca-bundle.crt"
2) put ruby-openid-apps-discovery into config
$ cd config
$ wget https://github.com/skrat/ruby-openid-apps-discovery/raw/master/lib/ca-bundle.crt
http://toddsedano.blogspot.com/2010/05/integrating-openid-google-apps-and-ruby.html