-
Notifications
You must be signed in to change notification settings - Fork 237
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Unable to verify SSL certificate when trying to build cp311-macosx_x86_64
#1277
Comments
Hm. Interesting. We do test SSL support for each version in our test suite, but this might be an unusual case. Could you post the URL that it's trying to download? |
That URL uses a cloudflare-issued cert.
I can't seem to test that in Python though, I suppose the CDN isn't letting it through.
Other cloudflare-hosted sites like https://cloudflare.com use TLSv1.3 and a different cipher, but I guess the cert verification is the same? I'll try adding |
Not getting anywhere with this... I can't find a Cloudflare URL works, every one that I've tried responds to urllib.request.urlopen with a 403 Forbidden error - I suppose we're being treated as a bot. I don't much want to fiddle with user-agent etc as we'd be fighting cloudflare at their own game. I can tell you that even on Python 3.11, we do run |
The download script we use specifies user agents, etc |
Oh, that's been working reliably for you? I'll try it. |
It's called as |
I found the issue. #1279 shows this is not normally an issue in cibuildwheel. Your Github action requests setup-python to install 3.11-dev. That GHA install script uses a Python.org In your case, a quick fix would be
However, it's probably worth sending a issue/PR to actions/setup-python since I'd consider this an incomplete install of Python, and this will affect many others too. |
(An alternative fix would be what I suggested earlier in that PR, to not install python first, as it's unneeded for the cibuildwheel action, and in this case actually breaks it!) |
Well, this would be a short-term fix/workaround, as @joerick mentioned, setup-python is moving to using Python.org
I'll do that over the week-end. |
Hi there, we probably just observed the same issue on crate/crate-python#450, so we submitted a report at actions/setup-python#512. In the meanwhile, we are using crate/crate-python@243820d1 as a workaround. With kind regards, |
I opened actions/python-versions#189 to fix this issue. |
Hi again, your fix works like a charm, @mayeut. Thank you very much for submitting it so quickly. With kind regards, |
This ended up being an issue with actions/setup-python: actions/setup-python#512 - now fixed. |
This is still pretty painful for me locally--I have quite a mix of brew-based I suppose this doesn't have much to do with |
For the record, no
|
Description
I'm trying to build a wheel for
cp311-macosx_x86_64
. Part of theCIBW_BEFORE_BUILD
retrieves a pre-built OpenBLAS library using theurllib
module.We're experiencing issues retrieving that library with the Python install that cibuildwheel provides for that target, SSL verification is failing. We don't have the issue on any other target.
Build log
https://github.com/scipy/scipy/actions/runs/3083178264/jobs/4983796179
CI config
https://github.com/scipy/scipy/blob/main/.github/workflows/wheels.yml
The text was updated successfully, but these errors were encountered: