On Tue, Feb 25, 2025 at 9:52 AM Dima Pasechnik <dimp...@gmail.com> wrote:
> > this is precisely due to the cert failures caused by the broken macOS's > python. > > Does not happen with a good Python install. > I am sorry, but that statement is false. See the example below where an SSL Certification error occurs with Python 3.13.1 from python.org running in a venv with certifi-2025.1.31 installed in the venv. The Apple /usr/binpython3 was not involved and the python.org installation of python is a "good python install". - Marc [patch-2.7.6] Attempting to download from https://ftp.gnu.org/gnu/patch/patch-2.7.6.tar.gz [patch-2.7.6] [xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx] [patch-2.7.6] ERROR [transfer|run:135]: [Errno socket error] [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: unable to get local issuer certificate (_ssl.c:1018) [patch-2.7.6] Traceback (most recent call last): [patch-2.7.6] File "/Library/Frameworks/Python.framework/Versions/3.13/lib/python3.13/urllib/request.py", line 1778, in open [patch-2.7.6] return getattr(self, name)(url) [patch-2.7.6] ~~~~~~~~~~~~~~~~~~~^^^^^ [patch-2.7.6] File "/Library/Frameworks/Python.framework/Versions/3.13/lib/python3.13/urllib/request.py", line 1992, in open_https [patch-2.7.6] return self._open_generic_http(self._https_connection, url, data) [patch-2.7.6] ~~~~~~~~~~~~~~~~~~~~~~~^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ [patch-2.7.6] File "/Library/Frameworks/Python.framework/Versions/3.13/lib/python3.13/urllib/request.py", line 1933, in _open_generic_http [patch-2.7.6] http_conn.request("GET", selector, headers=headers) [patch-2.7.6] ~~~~~~~~~~~~~~~~~^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ [patch-2.7.6] File "/Library/Frameworks/Python.framework/Versions/3.13/lib/python3.13/http/client.py", line 1336, in request [patch-2.7.6] self._send_request(method, url, body, headers, encode_chunked) [patch-2.7.6] ~~~~~~~~~~~~~~~~~~^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ [patch-2.7.6] File "/Library/Frameworks/Python.framework/Versions/3.13/lib/python3.13/http/client.py", line 1382, in _send_request [patch-2.7.6] self.endheaders(body, encode_chunked=encode_chunked) [patch-2.7.6] ~~~~~~~~~~~~~~~^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ [patch-2.7.6] File "/Library/Frameworks/Python.framework/Versions/3.13/lib/python3.13/http/client.py", line 1331, in endheaders [patch-2.7.6] self._send_output(message_body, encode_chunked=encode_chunked) [patch-2.7.6] ~~~~~~~~~~~~~~~~~^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ [patch-2.7.6] File "/Library/Frameworks/Python.framework/Versions/3.13/lib/python3.13/http/client.py", line 1091, in _send_output [patch-2.7.6] self.send(msg) [patch-2.7.6] ~~~~~~~~~^^^^^ [patch-2.7.6] File "/Library/Frameworks/Python.framework/Versions/3.13/lib/python3.13/http/client.py", line 1035, in send [patch-2.7.6] self.connect() [patch-2.7.6] ~~~~~~~~~~~~^^ [patch-2.7.6] File "/Library/Frameworks/Python.framework/Versions/3.13/lib/python3.13/http/client.py", line 1477, in connect [patch-2.7.6] self.sock = self._context.wrap_socket(self.sock, [patch-2.7.6] ~~~~~~~~~~~~~~~~~~~~~~~~~^^^^^^^^^^^ [patch-2.7.6] server_hostname=server_hostname) [patch-2.7.6] ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ [patch-2.7.6] File "/Library/Frameworks/Python.framework/Versions/3.13/lib/python3.13/ssl.py", line 455, in wrap_socket [patch-2.7.6] return self.sslsocket_class._create( [patch-2.7.6] ~~~~~~~~~~~~~~~~~~~~~~~~~~~~^ [patch-2.7.6] sock=sock, [patch-2.7.6] ^^^^^^^^^^ [patch-2.7.6] ...<5 lines>... [patch-2.7.6] session=session [patch-2.7.6] ^^^^^^^^^^^^^^^ [patch-2.7.6] ) [patch-2.7.6] ^ [patch-2.7.6] File "/Library/Frameworks/Python.framework/Versions/3.13/lib/python3.13/ssl.py", line 1076, in _create [patch-2.7.6] self.do_handshake() [patch-2.7.6] ~~~~~~~~~~~~~~~~~^^ [patch-2.7.6] File "/Library/Frameworks/Python.framework/Versions/3.13/lib/python3.13/ssl.py", line 1372, in do_handshake [patch-2.7.6] self._sslobj.do_handshake() [patch-2.7.6] ~~~~~~~~~~~~~~~~~~~~~~~~~^^ [patch-2.7.6] ssl.SSLCertVerificationError: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: unable to get local issuer certificate (_ssl.c:1018) -- You received this message because you are subscribed to the Google Groups "sage-devel" group. To unsubscribe from this group and stop receiving emails from it, send an email to sage-devel+unsubscr...@googlegroups.com. To view this discussion visit https://groups.google.com/d/msgid/sage-devel/CALcZXRECZmpHnZwffJzs%2BTYrD_uR3uRMYyPBVkQgBPOha7dGNQ%40mail.gmail.com.