Suppose you are running a data pipeline on Linux/Ubuntu that consumes data from the web. You get a RuntimeError: "SSL certificate verification failed". What do you investigate?
Verifying the ca-certificates package and updating /etc/ssl/certs
sudo apt-get install -y ca-certificates
installs the ca-certificates package (the -y means "say yes to all prompts").
This software processes certificates in PEM format.
With this installed, new certificates can be added to /usr/local/share/ca-certificates.
The trust store can then be updated with:
sudo update-ca-certificates
You can then check if the certificate has been added.
ls /etc/ssl/certs | grep local-ca
No comments:
Post a Comment