How to avoid certificate verification issues? - ssl

I'm trying to push to a Bitbucket Mercurial repository but I keep hitting the same problem:
ruihpacheco at descartes in ~/chi/aaa/cpp/ninja (default)
$ hg push
pushing to https://rhpacheco#bitbucket.org/rhpacheco/databaseclient
abort: error: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:661)
I've already tried what's on the website but it doesn't seem to work. Any suggestions?

With this in your .hgrc file:
[hostsecurity]
bitbucket.org:fingerprints = sha1:3F:D3:C5:17:23:3C:CD:F5:2D:17:76:06:93:7E:EE:97:42:21:14:AA
Do you get the same error?

Related

Using pygbag to package PyGame for web results in SSL error

Instead of packaging my PyGame game into an .exe using PyInstaller, I am attempting to use the new Python library pygbag to package the game using web assembly to share on a site like itch.io.
I followed a tutorial to try to get a local test in my browser on port 8000... 1) inserted the asyncio code into my game code 2) ran pygbag from the terminal on the specified directory.
Pygbag does some of the build, but then it hits this SSL error. Any thoughts? Thanks.
WARNING: web.get(https://pygame-web.github.io/archives/0.5/default.tmpl) : <urlopen error [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: unable to get local issuer certificate (_ssl.c:997)>
retrying in 5 seconds
On MacOS 11.6.7; Python 3.10.8; pygbag 0.5.0; pygame 2.1.2
ctrl-c quitting, I see another SSL error:
WARNING: web.get(https://pygame-web.github.io/archives/0.5/favicon.png) : <urlopen error [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: unable to get local issuer certificate (_ssl.c:997)>
retrying in 5 seconds
crtl-c quitting again gets it to stop completely.
There was an "Install Certificates.command" file in Applications/Python 3.10/. I double clicked to run it and that solved my problem.
certificate verify failed: unable to get local issuer certificate

How to disable SSL certificate verification in Twine?

When I tried to push a new package to my company's artifactory :
python -m twine upload --repository-url https:///artifactory/api/pypi/gdp_pypi dist/*
I got an error on SSL.
ssl.SSLError: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:841)
Any way to disable the SSL verification?
I just tried the solution by another post:
Disable Python requests SSL validation for an imported module
Simply setting environment variable CURL_CA_BUNDLE to an empty string did the job!
$ export CURL_CA_BUNDLE=""

git get error: "Peer's Certificate issuer is not recognized"

When I run something like:
git clone https://gitlab.mydoman.com/test.git
from part of the clients, I get the error:
Peer's Certificate issuer is not recognized
I saw 2 main solution:
1. User can set
export GIT_SSL_NO_VERIFY=true
2. to install root certificates
I would like to solve the problem to all the users.
I did not understood how to install the root certificate and where I configure Gitlab to use it. Is there url to clear instruction?
Thanks.

Client unable to verify SSL certificate even when verification is disabled

I am disabling certificate verification using the following command:
getsessionkey = requests.post(AUTH_URL, headers=headers, data=data, verify=False)
I use above command in a script that calls an API to retrieve data from it. When I run my script, I have the following error:
SSLError: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:727)
I understand from that error that the script could not verify the distant's API certificate. But I am explicitely disabling the verification, I am at loss as to how to interpret this.
If the problem cannot be resolved, how can I add my certificate to the certificate truststore?
P.S: Disabling certificate verification has always worked for me so far. I started to have the error above since a recent security update.
Thanks for helping.

svn: E230001: Server SSL certificate verification failed: issuer is not trusted

I am using the svnX Version 2.0 (2.0.017068) and I can't connect. We already have a certificate for it, but it is giving me these errors:
svn: E170013: Unable to connect to a repository at URL 'https://svn.sample.com/svn/web'
svn: E230001: Server SSL certificate verification failed: issuer is not trusted
It suddenly happened to me today. I followed the steps from Rick: https://community.smartbear.com/t5/Collaborator/Server-SSL-Certificate-verification-failed-issues-is-not-trusted/td-p/96838
Please try running an "svn ls" or something similar from inside your working/checkout directory. You should be prompted to accept the certificate, make sure that you accept it permanently.
I did an svn update on the working directory.
Automatically, it asked me to accept the certificate.
Just accept it.