-
Notifications
You must be signed in to change notification settings - Fork 542
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
SSL root certificates missing on GHA/macOS/Python 3.11 #512
Comments
Hi @amotl, thank you for your report, we will take a look at this. |
I opened actions/python-versions#189 to fix this issue. |
actions/setup-python#512 has been fixed by actions/python-versions#189, so the workaround is no longer necessary.
Hi again, we can confirm the test run of crate/crate-python#450 just succeeded 1 without errors after reverting the temporary workaround. Thanks a stack for the super-quick fix, @mayeut. 💯 With kind regards, Footnotes |
Can also confirm it works here in a non-cibuildwheel context: scikit-hep/uproot5#743 :) |
Hi there,
first things first: Thanks a stack for conceiving and maintaining this excellent GHA recipe. It always worked flawlessly for us, but we just ran into a little issue we wanted to share with you. Thank you already for looking into it.
With kind regards,
Andreas.
Description:
We started observing a problem, which is apparently caused by a missing root certificate bundle on GHA/
macos-latest
, when adding Python 3.11 (3.11-dev
) to the test matrix. It still works on any other operating system or Python version. @andyfaff also observed probably the same issue when trying to build wheels forcp311-macosx_x86_64
on GHA, and reported it at pypa/cibuildwheel#1277 the other day. /cc @joerick, @henryiii, @mayeutSpecifically, it looks like the
install_certificates.command
provisioning program did not get invoked or failed within the installation process. Based on suggestions from others, we have been able to work around the problem by vendoring the program into the repository and running it before anything else, see crate/crate-python@243820d1.Might actions/python-versions#184 be related?
References
cp311-macosx_x86_64
pypa/cibuildwheel#1277Action version:
actions/setup-python@v4
Platform:
Runner type:
Tools version:
Repro steps:
crate/crate-python#450 (already includes a workaround to install the root certificates manually)
Expected behavior:
When downloading resources from https:// URLs using the
urllib.request
module, Python should not croak.Actual behavior:
Python croaks like:
-- https://github.com/crate/crate-python/actions/runs/3152435065/jobs/5127728530#step:4:240
The text was updated successfully, but these errors were encountered: