SSL problem when installing apps

I can’t install my tutorial app of the instructions (Getting Started - Demo app | VIKTOR Documentation) due to an issue with an SSLerror.

Could not fetch URL https://k.hiemstra%40fugro.com:****@developers.viktor.ai/api/v1/packages/viktor/: There was a problem confirming the ssl certificate: HTTPSConnectionPool(host='developers.viktor.ai', port=443): Max retries exceeded with url: /api/v1/packages/viktor/ (Caused by SSLError(SSLCertVerificationError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: unable to get local issuer certificate (_ssl.c:1091)'))) - skipping

Also when I perform system check after installation I receive a SSL error.

* SSL certificate problem: unable to get local issuer certificate
  0     0    0     0    0     0      0      0 --:--:-- --:--:-- --:--:--     0
* Closing connection 0
curl: (60) SSL certificate problem: unable to get local issuer certificate
More details here: https://curl.haxx.se/docs/sslcerts.html

curl failed to verify the legitimacy of the server and therefore could not
establish a secure connection to it. To learn more about this situation and
how to fix it, please visit the web page mentioned above.

Any suggestions how to fix this?

1 Like

Can you check if using a different network, e.g. using a hotspot, solves the problem?

I got the same error when I am using my hotspot…

Hi Koen, could you check if the β€œAmazon_Root_CA_1.pem” certificate is present?

docker run python:3.7-buster ls /etc/ssl/certs | grep Amazon
PS C:\Users\K.hiemstra\viktor-apps> docker run python:3.7-buster ls /etc/ssl/certs | Select-String Amazon

Amazon_Root_CA_1.pem
Amazon_Root_CA_2.pem
Amazon_Root_CA_3.pem
Amazon_Root_CA_4.pem

Hi,

I’m having a similiar issue here. I’m also having an SSL ceritifiate error when installing. I wondered if there was a fix. btw: viktor-cli check-system is not complaining.

Specifically in our company the problem is due to ZScaler. A possible fix could be to add the ZScaler certificate to the ca-bundles that are used. Now the question is where is the correct ca-bundle when using the β€˜venv’ isolation mode?

Whitelisting the *.viktor.ai domain in the ZScaler policy fixed the problem.

1 Like

I also experience a SSL problem when trying to install the tutorial app.
β€’ System check was successful
β€’ I made a new conda environment for developting things for VIKTOR platform and added the path of the python.exe (version 3.7) from this environment to the system path (since I had not yet a python path in there)
β€’ I downloaded the example Logo app to a created viktor_app folder as described in the documentation
β€’ I tried to install this app from its folder but got the following error:

Hi Dorien,

I think your problem is caused by the fact that you are using the Anaconda distribution and not all required directories have been added to the PATH variable. When you choose to add Anaconda to the PATH during installation the following directories are added:

  • C:\path\to\anaconda3
  • C:\path\to\anaconda3\Library\mingw-w64\bin
  • C:\path\to\anaconda3\Library\usr\bin
  • C:\path\to\anaconda3\Library\bin
  • C:\path\to\anaconda3\Scripts

We recommend using a stand-alone Python installation and not a third-party distribution. Although development might work, there can be some unexpected errors as we do not officially support Anaconda/miniconda.

Regards,

Raoul

@dorienlutgendorf did you manage to get up and running?

Hi Raoul,

Did not yet find time to work on it (no deadline involved;)) but I believe I understand your advice. I will try the stand-alone python approach but will first, to be sure, make backups of my current conda environments. Will get back to you when I tried and have know the outcome!

Regards,
Dorien

I have installed the application and recieved the following problem. check-system says that everything is okay. Seems to be SSL related. Any advice or ideas would be very helpful, thanks :slight_smile:

SDK version: 13.0.0 Connector version: 5.12.1
Creating app specific install dir viktor-docs
Creating app specific install dir viktor-stubs
Creating app specific install dir signals
Creating virtual environment
Looking in indexes: https://erica.samuelsson%40sweco.se:****@developers.viktor.ai/api/v1/packages/
Collecting viktor==13.0.0
Downloading https://viktor-system.s3.amazonaws.com/packages/viktor/viktor-13.0.0-cp37-cp37m-win_amd64.whl?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIA53GKZRCUJDCQYXIU%2F20220425%2Feu-central-1%2Fs3%2Faws4_request&X-Amz-Date=20220425T105625Z&X-Amz-Expires=300&X-Amz-SignedHeaders=host&X-Amz-Signature=2705cd105b2195cd087e22a44da097bd1821f3b85d79fd7b782538aa39b76bf5 (7.7 MB)
|β–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆ| 7.7 MB 1.1 MB/s
Collecting viktor-connector==5.12.1
Downloading https://viktor-system.s3.amazonaws.com/packages/viktor-connector/viktor_connector-5.12.1-cp37-cp37m-win_amd64.whl?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIA53GKZRCUJDCQYXIU%2F20220425%2Feu-central-1%2Fs3%2Faws4_request&X-Amz-Date=20220425T105629Z&X-Amz-Expires=300&X-Amz-SignedHeaders=host&X-Amz-Signature=39d4977db3d2b4ee5fd79b4394c1998fd44fba3fe935688fb529dca09e62770a (453 kB)
|β–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆ| 453 kB …
Collecting matplotlib<4.0.0,>=2.2.2
WARNING: Retrying (Retry(total=4, connect=None, read=None, redirect=None, status=None)) after connection broken by β€˜SSLError(SSLCertVerificationError(1, β€˜[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: unable to get local issuer certificate (_ssl.c:1091)’))’: /packages/71/97/b93e7edcdf5f0321bef2c8404ca8e8401e7f1f869ba8ee986f71514ca1b3/matplotlib-3.5.1-cp37-cp37m-win_amd64.whl
WARNING: Retrying (Retry(total=3, connect=None, read=None, redirect=None, status=None)) after connection broken by β€˜SSLError(SSLCertVerificationError(1, β€˜[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: unable to get local issuer certificate (_ssl.c:1091)’))’: /packages/71/97/b93e7edcdf5f0321bef2c8404ca8e8401e7f1f869ba8ee986f71514ca1b3/matplotlib-3.5.1-cp37-cp37m-win_amd64.whl
WARNING: Retrying (Retry(total=2, connect=None, read=None, redirect=None, status=None)) after connection broken by β€˜SSLError(SSLCertVerificationError(1, β€˜[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: unable to get local issuer certificate (_ssl.c:1091)’))’: /packages/71/97/b93e7edcdf5f0321bef2c8404ca8e8401e7f1f869ba8ee986f71514ca1b3/matplotlib-3.5.1-cp37-cp37m-win_amd64.whl
WARNING: Retrying (Retry(total=1, connect=None, read=None, redirect=None, status=None)) after connection broken by β€˜SSLError(SSLCertVerificationError(1, β€˜[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: unable to get local issuer certificate (_ssl.c:1091)’))’: /packages/71/97/b93e7edcdf5f0321bef2c8404ca8e8401e7f1f869ba8ee986f71514ca1b3/matplotlib-3.5.1-cp37-cp37m-win_amd64.whl
WARNING: Retrying (Retry(total=0, connect=None, read=None, redirect=None, status=None)) after connection broken by β€˜SSLError(SSLCertVerificationError(1, β€˜[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: unable to get local issuer certificate (_ssl.c:1091)’))’: /packages/71/97/b93e7edcdf5f0321bef2c8404ca8e8401e7f1f869ba8ee986f71514ca1b3/matplotlib-3.5.1-cp37-cp37m-win_amd64.whl
ERROR: Could not install packages due to an EnvironmentError: HTTPSConnectionPool(host=β€˜files.pythonhosted.org’, port=443): Max retries exceeded with url: /packages/71/97/b93e7edcdf5f0321bef2c8404ca8e8401e7f1f869ba8ee986f71514ca1b3/matplotlib-3.5.1-cp37-cp37m-win_amd64.whl (Caused by SSLError(SSLCertVerificationError(1, β€˜[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: unable to get local issuer certificate (_ssl.c:1091)’)))

Hi erica,

Looks like pip install from pythonhosted.org is blocked by your firewall. Did you try pip installing matplotlib manually, just as a check? If the same error occurs: whitelisting *.pythonhosted.org could work.

Regards,
Wichard

Hi Wichard, thank you for the reply. It might be that type of error. I’m not really sure but the IT-department in my organisation unblocked it somehow so now it works.

Best regards,
Erica

@rdejonge Succeeded in running the first app! Thanks.

1 Like