pip install throws SSL certificate error

Version: Not specific to Domino version

Issue

A pip install fails with: connection error: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed

Root cause

By default, pip doesn’t use system certificates. For details, see the pip HTTPS certificates documentation. This error can occur when you’re behind a firewall or proxy that strips the SSL certificate.

Resolution

Use the --trusted-host flag to bypass certificate verification for the affected hosts. Option 1 — CLI flag Pass --trusted-host directly to the install command. Replace <package> with your package name: pip install --trusted-host pypi.org --trusted-host pypi.python.org --trusted-host files.pythonhosted.org <package> Option 2 — pip.conf (persistent) Add the following to your pip.conf file to apply the setting to all pip commands. The location of pip.conf varies by environment:

Linux/macOS (user-level): ~/.config/pip/pip.conf
Linux/macOS (virtual environment): <venv>/pip.conf
Windows (user-level): %APPDATA%\pip\pip.ini

[global]
trusted-host = pypi.python.org
               pypi.org
               files.pythonhosted.org

Notes

This error can also appear in Dockerfile instructions used in Domino Compute Environments. The same --trusted-host workaround applies. Add --trusted-host for each host your RUN pip install command accesses. For example:

USER root
RUN pip install --trusted-host <hostname> --trusted-host <cdn-hostname> <package-or-url>

​pip install throws SSL certificate error

​Issue

​Root cause

​Resolution

​Notes

pip install throws SSL certificate error

Issue

Root cause

Resolution

Notes