question-mark
Stuck on an issue?

Lightrun Answers was designed to reduce the constant googling that comes with debugging 3rd party libraries. It collects links to all the places you might be looking at while hunting down a tough bug.

And, if you’re still stuck at the end, we’re happy to hop on a call to see how we can help out.

Installing openssl-1.1.1q: "certificate verify failed: unable to get local issuer certificate"

See original GitHub issue

Hello conan client 1.50.2 OS: Ubuntu 22.04.1 WSL

When trying to install openssl-1.1.1q i get this error:

openssl/1.1.1q: ERROR: Error downloading file https://www.openssl.org/source/openssl-1.1.1q.tar.gz: 'HTTPSConnectionPool(host='www.openssl.org', port=443): Max retries exceeded with url: /source/openssl-1.1.1q.tar.gz (Caused by SSLError(SSLCertVerificationError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: unable to get local issuer certificate (_ssl.c:1131)')))'
openssl/1.1.1q: Waiting 5 seconds to retry...
openssl/1.1.1q: WARN: Could not download from the URL https://www.openssl.org/source/openssl-1.1.1q.tar.gz: Error downloading file https://www.openssl.org/source/openssl-1.1.1q.tar.gz: 'HTTPSConnectionPool(host='www.openssl.org', port=443): Max retries exceeded with url: /source/openssl-1.1.1q.tar.gz (Caused by SSLError(SSLCertVerificationError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: unable to get local issuer certificate (_ssl.c:1131)')))'. Trying another mirror.
openssl/1.1.1q: ERROR: Error downloading file https://www.openssl.org/source/old/openssl-1.1.1q.tar.gz: 'HTTPSConnectionPool(host='www.openssl.org', port=443): Max retries exceeded with url: /source/old/openssl-1.1.1q.tar.gz (Caused by SSLError(SSLCertVerificationError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: unable to get local issuer certificate (_ssl.c:1131)')))'
openssl/1.1.1q: Waiting 5 seconds to retry...
wopenssl/1.1.1q: WARN: Could not download from the URL https://www.openssl.org/source/old/openssl-1.1.1q.tar.gz: Error downloading file https://www.openssl.org/source/old/openssl-1.1.1q.tar.gz: 'HTTPSConnectionPool(host='www.openssl.org', port=443): Max retries exceeded with url: /source/old/openssl-1.1.1q.tar.gz (Caused by SSLError(SSLCertVerificationError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: unable to get local issuer certificate (_ssl.c:1131)')))'. Trying another mirror.
ERROR: openssl/1.1.1q: Error in source() method, line 248
        get(self, **self.conan_data["sources"][self.version],
        ConanException: All downloads from (2) URLs have failed.

When trying wget https://www.openssl.org/source/openssl-1.1.1q.tar.gz the file is received as expected. I am on a coorporate network behind zscaler, but as wget works I expect that is not the problem here.

What could be wrong?

Rgds Klaus

Issue Analytics

  • State:closed
  • Created a year ago
  • Comments:8 (4 by maintainers)

github_iconTop GitHub Comments

1reaction
klausholstjacobsencommented, Aug 26, 2022

Yes, I have custom certificates installed. I will stick with the symlink approach for now.

Thx!

0reactions
memshardedcommented, Aug 26, 2022

Excellent!!! 👏

Is this symlink the way forward or is there a better way to get conan to use certificates installed on the system?

I think it is in your case and while in Conan 1.X. Maybe you have some custom certificates installed in your machine?

Conan 2.0 has already removed this file, so the system ones should automatically work without issues.

Read more comments on GitHub >

github_iconTop Results From Across the Web

Fix OpenSSL Error: Unable To Get Local Issuer Certificate
Fix Openssl Error Unable To Get Local Issuer Certificate. The aim of this how-to is fixing unable to get local issuer...
Read more >
certificate verify failed: unable to get local issuer certificate
For anyone who still wonders on how to fix this, i got mine by installing the " Install Certificates.command ". Here is how...
Read more >
upgrading from 1.1.1.e and 1.1.1.f causes openvpn ... - GitHub
It is really bad when the only message you get from the verify command is that seemingly the issuer certificate cannot be obtained,...
Read more >
'openssl verify' outputs 'unable to get local issuer certificate'
Having problems with that and I think it's (at least partially) because the ssl certificates somehow aren't installed correctly, as indicated by ...
Read more >
OpenSSL 1.1.1q
It attempts to create a unique hash value based on the issuer and serial number data contained within an X509 certificate. However it...
Read more >

github_iconTop Related Medium Post

No results found

github_iconTop Related StackOverflow Question

No results found

github_iconTroubleshoot Live Code

Lightrun enables developers to add logs, metrics and snapshots to live code - no restarts or redeploys required.
Start Free

github_iconTop Related Reddit Thread

No results found

github_iconTop Related Hackernoon Post

No results found

github_iconTop Related Tweet

No results found

github_iconTop Related Dev.to Post

No results found

github_iconTop Related Hashnode Post

No results found