SSL: CERTIFICATE_VERIFY_FAILED

[deryck1031]

The certification works with wget:
wget --ca-certificate=./python-base64.cer https://pypi.python.org/simple/numpy/

but it failed when trying to get numpy package using rules_python (with same certification file):

pip_import failed: Collecting numpy (from -r /home/user/work/third_party/requirements.txt (line 2))
Could not fetch URL https://pypi.python.org/simple/numpy/: There was a problem confirming the ssl certificate: HTTPSConnectionPool(host='pypi.python.org', port=443): Max retries exceeded with url: /simple/numpy/ (Caused by SSLError(SSLError(1, u'[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:661)'),)) - skipping
( Retrying (Retry(total=4, connect=None, read=None, redirect=None, status=None)) after connection broken by 'SSLError(SSLError(1, u'[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:661)'),)': /simple/numpy/
Retrying (Retry(total=3, connect=None, read=None, redirect=None, status=None)) after connection broken by 'SSLError(SSLError(1, u'[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:661)'),)': /simple/numpy/
Retrying (Retry(total=2, connect=None, read=None, redirect=None, status=None)) after connection broken by 'SSLError(SSLError(1, u'[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:661)'),)': /simple/numpy/
Retrying (Retry(total=1, connect=None, read=None, redirect=None, status=None)) after connection broken by 'SSLError(SSLError(1, u'[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:661)'),)': /simple/numpy/
Retrying (Retry(total=0, connect=None, read=None, redirect=None, status=None)) after connection broken by 'SSLError(SSLError(1, u'[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:661)'),)': /simple/numpy/

[deryck1031]

Below are in my WORKSPACE:

http_archive(
name = "rules_python",
strip_prefix = "rules_python-master",
url = "https://github.com/bazelbuild/rules_python/archive/master.zip",
)

load("@rules_python//python:repositories.bzl", "py_repositories")
py_repositories()

load("@rules_python//python:pip.bzl", "pip_import")
pip_import(
name = "my_deps",
requirements = "//third_party:requirements.txt",
)

load("@my_deps//third_party:requirements.bzl", "pip_install")

pip_install()

[brandjon]

I'm not able to reproduce, I can build a hello world package that imports numpy. Possibly a transient problem with pypi?

[deryck1031]

The error msg mentioned port 443, but my proxy port is 8080. I have http proxy set, so shouldn't it use port 8080?

[deryck1031]

what certification file does it use? Can I overwrite it?

[github-actions]

This issue has been automatically marked as stale because it has not had any activity for 180 days. It will be closed if no further activity occurs in 30 days.
Collaborators can add an assignee to keep this open indefinitely. Thanks for your contributions to rules_python!