[lsst-dm-stack-users] wget error with certificates [solved]

[Simon Krughoff]

I ran into this too when installing on edison at NERSC.  The more secure
way to fix this is to get a CA certificate bundle from a trusted source,
e.g.:
https://raw.githubusercontent.com/bagder/ca-bundle/master/ca-bundle.crt

Then you can tell curl where to find it:
$> setenv CURL_CA_BUNDLE $PWD/ca-bundle.crt

Simon


On Fri, Jun 13, 2014 at 7:06 AM, Dustin Lang <dstndstn at gmail.com> wrote:

>
> Hi,
>
> One for the archives...
>
> While running "newinstall.sh" (as per the Summer 2013 install
> instructions), installing python, I got:
>
> Downloading
> https://pypi.python.org/packages/source/s/setuptools/setuptools-1.4.tar.gz
> Traceback (most recent call last):
>   File "ez_setup.py", line 382, in <module>
>     sys.exit(main())
>   File "ez_setup.py", line 378, in main
>     downloader_factory=options.downloader_factory)
>   File "ez_setup.py", line 290, in download_setuptools
>     downloader(url, saveto)
>   File "ez_setup.py", line 215, in download_file_wget
>     _clean_check(cmd, target)
>   File "ez_setup.py", line 160, in _clean_check
>     subprocess.check_call(cmd)
>   File
>
> "/home/dstn/lsst/Linux/external/python/2.7.6+1/lib/python2.7/subprocess.py",
> line 540, in check_call
>     raise CalledProcessError(retcode, cmd)
> subprocess.CalledProcessError: Command '['wget',
> '
> https://pypi.python.org/packages/source/s/setuptools/setuptools-1.4.tar.gz
> ',
> '--quiet', '--output-document',
>
> '/clusterfs/riemann/raid000/dstn/lsst/EupsBuildDir/Linux/python-2.7.6+1/Python-2.7.6/setuptools-1.4.tar.gz']'
> returned non-zero exit status 1
>
>
> This turned out to be a problem with certificates:
>
> > wget
> https://pypi.python.org/packages/source/s/setuptools/setuptools-1.4.tar.gz
> --output-document
>
> /clusterfs/riemann/raid000/dstn/lsst/EupsBuildDir/Linux/python-2.7.6+1/Python-2.7.6/setuptools-1.4.tar.gz
> --2014-06-13 07:05:21--
> https://pypi.python.org/packages/source/s/setuptools/setuptools-1.4.tar.gz
> Resolving pypi.python.org... 199.27.79.175
> Connecting to pypi.python.org|199.27.79.175|:443... connected.
> ERROR: certificate common name `*.c.ssl.fastly.net' doesn't match
> requested host name `pypi.python.org'.
> To connect to pypi.python.org insecurely, use `--no-check-certificate'.
> Unable to establish SSL connection.
>
> This can be "solved" by adding to the user's ~/.wgetrc:
>
> check_certificate = off
>
>
> cheers,
> --dustin
>
> _______________________________________________
> lsst-dm-stack-users mailing list
> lsst-dm-stack-users at lsstcorp.org
> http://listserv.lsstcorp.org/mailman/listinfo/lsst-dm-stack-users
>



-- 
K. Simon Krughoff
University of Washington
Department of Astronomy

Physics-Astronomy Bldg.
3910 15th Ave NE
Room C319
Seattle WA 98195-0002
USA

(206)543-9487
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://listserv.lsstcorp.org/pipermail/dm-users/attachments/20140613/95c2ece9/attachment.html>