Installing openssl-1.1.1q: "certificate verify failed: unable to get local issuer certificate"
See original GitHub issueHello conan client 1.50.2 OS: Ubuntu 22.04.1 WSL
When trying to install openssl-1.1.1q i get this error:
openssl/1.1.1q: ERROR: Error downloading file https://www.openssl.org/source/openssl-1.1.1q.tar.gz: 'HTTPSConnectionPool(host='www.openssl.org', port=443): Max retries exceeded with url: /source/openssl-1.1.1q.tar.gz (Caused by SSLError(SSLCertVerificationError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: unable to get local issuer certificate (_ssl.c:1131)')))'
openssl/1.1.1q: Waiting 5 seconds to retry...
openssl/1.1.1q: WARN: Could not download from the URL https://www.openssl.org/source/openssl-1.1.1q.tar.gz: Error downloading file https://www.openssl.org/source/openssl-1.1.1q.tar.gz: 'HTTPSConnectionPool(host='www.openssl.org', port=443): Max retries exceeded with url: /source/openssl-1.1.1q.tar.gz (Caused by SSLError(SSLCertVerificationError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: unable to get local issuer certificate (_ssl.c:1131)')))'. Trying another mirror.
openssl/1.1.1q: ERROR: Error downloading file https://www.openssl.org/source/old/openssl-1.1.1q.tar.gz: 'HTTPSConnectionPool(host='www.openssl.org', port=443): Max retries exceeded with url: /source/old/openssl-1.1.1q.tar.gz (Caused by SSLError(SSLCertVerificationError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: unable to get local issuer certificate (_ssl.c:1131)')))'
openssl/1.1.1q: Waiting 5 seconds to retry...
wopenssl/1.1.1q: WARN: Could not download from the URL https://www.openssl.org/source/old/openssl-1.1.1q.tar.gz: Error downloading file https://www.openssl.org/source/old/openssl-1.1.1q.tar.gz: 'HTTPSConnectionPool(host='www.openssl.org', port=443): Max retries exceeded with url: /source/old/openssl-1.1.1q.tar.gz (Caused by SSLError(SSLCertVerificationError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: unable to get local issuer certificate (_ssl.c:1131)')))'. Trying another mirror.
ERROR: openssl/1.1.1q: Error in source() method, line 248
get(self, **self.conan_data["sources"][self.version],
ConanException: All downloads from (2) URLs have failed.
When trying wget https://www.openssl.org/source/openssl-1.1.1q.tar.gz
the file is received as expected.
I am on a coorporate network behind zscaler, but as wget works I expect that is not the problem here.
What could be wrong?
Rgds Klaus
Issue Analytics
- State:
- Created a year ago
- Comments:8 (4 by maintainers)
Top Results From Across the Web
Fix OpenSSL Error: Unable To Get Local Issuer Certificate
Fix Openssl Error Unable To Get Local Issuer Certificate. The aim of this how-to is fixing unable to get local issuer...
Read more >certificate verify failed: unable to get local issuer certificate
For anyone who still wonders on how to fix this, i got mine by installing the " Install Certificates.command ". Here is how...
Read more >upgrading from 1.1.1.e and 1.1.1.f causes openvpn ... - GitHub
It is really bad when the only message you get from the verify command is that seemingly the issuer certificate cannot be obtained,...
Read more >'openssl verify' outputs 'unable to get local issuer certificate'
Having problems with that and I think it's (at least partially) because the ssl certificates somehow aren't installed correctly, as indicated by ...
Read more >OpenSSL 1.1.1q
It attempts to create a unique hash value based on the issuer and serial number data contained within an X509 certificate. However it...
Read more >Top Related Medium Post
No results found
Top Related StackOverflow Question
No results found
Troubleshoot Live Code
Lightrun enables developers to add logs, metrics and snapshots to live code - no restarts or redeploys required.
Start FreeTop Related Reddit Thread
No results found
Top Related Hackernoon Post
No results found
Top Related Tweet
No results found
Top Related Dev.to Post
No results found
Top Related Hashnode Post
No results found
Top GitHub Comments
Yes, I have custom certificates installed. I will stick with the symlink approach for now.
Thx!
Excellent!!! 👏
I think it is in your case and while in Conan 1.X. Maybe you have some custom certificates installed in your machine?
Conan 2.0 has already removed this file, so the system ones should automatically work without issues.