Develop Reference

SSL certificate issues preventing pip package installs on windows

I installed Python 3.8 from the python.org downloads site onto my 64-bit Windows machine today. Shortly thereafter, I attempted to install the pyodbc package using pip from a command console opened as an administrator:
pip install pyodbc
The following error broke my connection on several attempts:
'SSLError(SSLCertVerificationError(1, '[SSL: CERTIFICATE_VERIFY_FAILED]
certificate verify failed: unable to get local issuer certificate
(_ssl.c:1108)')': /simple/pyodbc/
(I don't believe these issues are specific to the pyodbc package, but that just happens to be the package I've been trying to install). After some googling I tried
pip install --trusted-host pypi.org --trusted-host files.pythonhosted.org pyodbc
after which I received the error
ERROR: Could not find a version that satisfies the requirement pyodbc (from versions: none)
ERROR: No matching distribution found for pyodbc
Based on this SO answer, I decided to execute
curl https://bootstrap.pypa.io/get-pip.py | python
after which I received the error
next InitializeSecurityContext failed: SEC_E_UNTRUSTED_ROOT (0x80090325) - The certificate chain was issued by an authority that is not trusted.
I'm not sure where to go from here. Python 3.8 is a fresh install, as is pip (which shows as version 19.2.3). Nevertheless there seems to be a problem confirming SSL certificates. How can I get pip installs working?

You have two separate issues:
You are behind a proxy/firewall or using an endpoint antivirus that messes with your CA cert store. Your --trusted-host is a workaround for that
pyodbc doesn't support Python 3.8 yet.

issue with emsdk on mac

I am trying to setup emsdk on mac with the following command:
./emsdk install latest
I cloned the repo from git. However, I get the following error upon running the command mentioned above:
** NOTICE **: The default SDK changed from `fastcomp` to `upstream`.
If you have problems, or wish to revert back to fastcomp for some other reason
you can add `-fastcomp` to explicitly install that fastcomp-based
SDK, .e.g ./emsdk install latest-fastcomp.
Installing SDK 'sdk-releases-upstream-b024b71038d1291ed7ec23ecd553bf2c0c8d6da6-64bit'..
Installing tool 'releases-upstream-b024b71038d1291ed7ec23ecd553bf2c0c8d6da6-64bit'..
Error: Downloading URL 'https://storage.googleapis.com/webassembly/emscripten-releases-builds/mac/b024b71038d1291ed7ec23ecd553bf2c0c8d6da6/wasm-binaries.tbz2': <urlopen error [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:726)>
Warning: Possibly SSL/TLS issue. Update or install Python SSL root certificates (2048-bit or greater) supplied in Python folder or https://pypi.org/project/certifi/ and try again.
Installation failed!
I have tried running the following to fix this but it did not solve the issue.
pip install certifi
Any other suggestions to fix the issue would be quite welcome.

I was able to upgrade the python version to 3.8.0 using pyenv. The upgrade helped me with the certificate issue.
brew install pyenv
pyenv install 3.8.0
pyenv global 3.8.0
or if inside the emsdk directory:
pyenv local 3.8.0
The command ./emsdk install latest ran successfully after the python upgrade.

Python - Enable TLS1.2 on OSX

I have a virtualenv environment running python 3.5
Today, when I booted up my MacBook, I found myself unable to install python packages for my Django project. I get the following error:
Could not fetch URL <package URL>: There was a problem confirming the ssl certificate: [SSL: TLSV1_ALERT_PROTOCOL_VERSION] tlsv1 alert protocol version (_ssl.c:646) - skipping
I gather that TLS 1.0 has been discontinued, but from what I understand, newer versions of Python should be using TLS1.2, correct? Even outside of my environment, running pip3 trips the same error. I've updated to the latest version of Sierra and have updated Xcode as well. Does anyone know how to resolve this?

Here is the fix:
curl https://bootstrap.pypa.io/get-pip.py | python
Execute from within the appropriate virtual environment.

Python pip install error [SSL: CERTIFICATE_VERIFY_FAILED]

I have been trying to figure this out for a while now and for some reason I get stuck with an ssl issue and have no idea what is going on.
Problem:
I have installed python2.7 and easy_install2.7, but when trying to install pip with easy_install2.7 I get the following error.
[root#cops-wc-01]# /usr/local/bin/easy_install-2.7 pip
Searching for pip
Reading https://pypi.python.org/simple/pip/
Download error on https://pypi.python.org/simple/pip/: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:590) -- Some packages may not be found!
Couldn't find index page for 'pip' (maybe misspelled?)
Scanning index of all packages (this may take a while)
Reading https://pypi.python.org/simple/
Download error on https://pypi.python.org/simple/: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:590) -- Some packages may not be found!
No local packages or download links found for pip
error: Could not find suitable distribution for Requirement.parse('pip')
It is trying to download, but this SSL cert verification failure is preventing it.
Does anyone know a way around this, or a way to resolve it?
Sorry if it is a noob question :)
[root#cops-wc-01]# uname -a
Linux 2.6.32-504.30.3.el6.x86_64 #1 SMP Wed Jul 15 10:13:09 UTC 2015 x86_64 x86_64 x86_64 GNU/Linux
[root#cops-wc-01]#
Centos 6

apt-get install ca-certificates
If you missed this package.

On my device (that runs nix),
$ date showed ...1969
so I had to set the date to a more recent time :
$ date -s "26 MAR 2017 13:16:00"
Then the SSL error was gone.

YAS (Yet Another Solution)
I had the same issue.
Tried everything above.
My issue was fixed by upgrading pip and setuptools:
$ pip install -U pip setuptools
I also tried to add an entry in my ~/.pip/pip.conf file:
[global]
trusted=https://pypi.your.domain

Most likely pip does not have the required CA certificates to validate that.
You can force pip to use openssl's CAs to see if it helps.

The easiest solution that worked for me:
From https://pypi.python.org/pypi/pip, download 'pip-8.1.2.tar.gz'
Install it with pip, "pip install ./pip-8.1.2.tar.gz"
On the ubuntu server, the new version pip may be installed in a different location. If checking version with 'pip --version', it's still an older version one, like pip 1.5.6. To install a package with the new version pip, straightforwardly use the absolute path for convenience:
/home/tom/.local/bin/pip install ./gensim-0.13.1.tar.gz
Install dependencies one by one, errors like this below can be bypassed.
Download error on https://pypi.python.org/simple/pip/: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:590) -- Some packages may not be found!"

On macbook put this line in ~/.bash_profile:
export SSL_CERT_FILE=/usr/local/etc/openssl/cert.pem
And forget about this error.
Of course, if you don't have openssl - run brew install openssl. And don't forget to do . .bash_profile after first edit of .bash_profile.

I ran the following commands to resolve the issue:
$ curl https://bootstrap.pypa.io/get-pip.py >> get-pip.py
$ python get-pip.py
This upgraded pip to v9.0.3, and this version has no issues.

Since this is currently the top hit on Google for this issue I thought I would share my solution. As weird as it is. I'm on CentOS 7, Python3.6 although I believe it doesn't matter which Python version.
The SSLError / CERTIFICATE_VERIFY_FAILED was also happening for me when I ran a fresh copy of get-pip.py.
The solution was to run the install command with output piped to a file, so python get-pip.py &> output. I haven't had the time to find out why not having a TTY affects the environment for the script.

If you are running behind a web filter or firewall, please ensure SSL inspection/decryption is disabled or bypassed for the domain *.pythonhosted.org (or more specifically, files.pythonhosted.org). May also need to include pypi.org.
I'm running Python on an enterprise workstation and this has been the culprit in our environment across Windows and Linux hosts. Confirmed with our older system, a Broadcom ProxySG on prem web filter appliance, and later through Cisco's Umbrella Cloud Gateway/SIG product.
Cheers

I didn't realize that there is a command "python -M ensurepip after 7.9. This fixed my issue.

Error importing NLTK on PyCharm

I'm trying to import NLTK in PyCharm, and get the following error. I'm on Mac OS 10.5.8 with Python 2.7.6. What could be going on? I'm completely new to programming, so sorry if there's something basic that I'm missing.
Install packages failed: Error occurred when installing package nltk.
The following command was executed:
packaging_tool.py install --build-dir /private/var/folders/NG/NGoQZknvH94yHKezwiiT+k+++TI/-Tmp-/pycharm-packaging3166068946358630595.tmp nltk
The error output of the command:
Downloading/unpacking nltk
Could not fetch URL https://pypi.python.org/simple/nltk/: There was a problem confirming the ssl certificate: <urlopen error [Errno 1] _ssl.c:507: error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed>
Will skip URL https://pypi.python.org/simple/nltk/ when looking for download links for nltk
Could not fetch URL https://pypi.python.org/simple/: There was a problem confirming the ssl certificate: <urlopen error [Errno 1] _ssl.c:507: error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed>
Will skip URL https://pypi.python.org/simple/ when looking for download links for nltk
Cannot fetch index base URL https://pypi.python.org/simple/
Could not fetch URL https://pypi.python.org/simple/nltk/: There was a problem confirming the ssl certificate: <urlopen error [Errno 1] _ssl.c:507: error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed>
Will skip URL https://pypi.python.org/simple/nltk/ when looking for download links for nltk
Could not find any downloads that satisfy the requirement nltk
Cleaning up...
No distributions at all found for nltk
Storing complete log in /Users/Tom/.pip/pip.log
ETA: OK, now I've successfully installed NLTK from the command line, and then was able to install it in PyCharm -- but only for the Python 2.5.1 interpreter. If I try it with Python 2.7.6, I still get the error above. Does this matter, or should I not worry about it and just use it with 2.5.1?

You'd be much better off sticking with the latest version of pip (1.5.6) and just telling it that you don't care about the security of your python packages:
pip install --allow-all-external --allow-unverified ntlk nltk
If you really want to be sure an install runs without complaint, you can also tell it not to overwrite any existing installations:
pip install --upgrade --force-reinstall --allow-all-external --allow-unverified ntlk nltk
And sudo if you get file write permission errors.

I use PyCharm but never install packages through PyCharm, I always use Terminal and install them with mostly pip or easy_install (in my virtual environment). Maybe you can just install the package from terminal..
sudo pip install nltk (https://pypi.python.org/pypi/nltk)
or
sudo easy_install nltk (if you don't have pip installed)
And then in PyCharm, make sure in preferences you set your Project Interpreter to the python path with your installed packages.

I have run into this (and just did again), I don't remember exactly where I found the answer, but it's an openssl version + local certificate issue (spoken like someone who's only vaguely familiar with the concepts). The way I have worked around this is to downgrade pip:
easy_install pip==1.2.1
After that you should be able to pip install again.

hi import like this in pycharm :
Open File > Settings > Project from the PyCharm menu.
Select your current project.
Click the Python Interpreter tab within your project tab.
Click the small + symbol to add a new library to the project.
Now type in the library to be installed, in your example "nltk" without quotes, and click Install Package.
Wait for the installation to terminate and close all popup windows.