Skip to content

Conversation

@akrherz
Copy link
Contributor

@akrherz akrherz commented Oct 12, 2021

Checklist

  • Used a personal fork of the feedstock to propose changes
  • Bumped the build number (if the version is unchanged)
  • Reset the build number to 0 (if the version changed)
  • Re-rendered with the latest conda-smithy (Use the phrase @conda-forge-admin, please rerender in a comment in this PR for automated rerendering)
  • Ensured the license file is being packaged.

I am not at all against what @xylar did in #125, but would like to play with this some more and isolate why CI fails on python 3.7, openssl 3 and windows. Pardon the thrashing and noise.

@conda-forge-linter
Copy link

Hi! This is the friendly automated conda-forge-linting service.

I just wanted to let you know that I linted all conda-recipes in your PR (recipe) and found it was in an excellent condition.

@akrherz akrherz marked this pull request as draft October 12, 2021 19:05
@xylar
Copy link
Contributor

xylar commented Oct 12, 2021

@akrherz, please play away! This problem is likely not isolated to this feedstock to that would be a great community service.

@xylar xylar mentioned this pull request Oct 12, 2021
3 tasks
@akrherz
Copy link
Contributor Author

akrherz commented Oct 12, 2021

👀 https://bugs.python.org/msg403595 , which is using the same conda-forge builds it appears.

@akrherz
Copy link
Contributor Author

akrherz commented Oct 12, 2021

👀 conda/conda#10975

@akrherz
Copy link
Contributor Author

akrherz commented Oct 12, 2021

Another python report https://bugs.python.org/issue45424 with a responder saying

The error means that something went wrong while loading certificates, but OpenSSL didn't give us more information about what went wrong.

trying a openssl connect test now.

@dopplershift
Copy link
Member

FYI, those two bugs.python.org links are the same issue.

@akrherz
Copy link
Contributor Author

akrherz commented Oct 12, 2021

I'm now at this comment on conda-forge/python-feedstock#508 that links to a number of other things that sort of imply python 3.7 does not support openssl 3. I'm just logging stuff as I find it :)

@akrherz
Copy link
Contributor Author

akrherz commented Oct 12, 2021

Okay, goodie, I can easily reproduce this locally on a windows install

>>> import urllib.request
>>> urllib.request.urlopen("https://naturalearth.s3.amazonaws.com/110m_physical/ne_110m_coastline.zip")
Traceback (most recent call last):
  File "<stdin>", line 1, in <module>
  File "C:\Users\akrherz\Miniconda3\envs\py37\lib\urllib\request.py", line 222, in urlopen
    return opener.open(url, data, timeout)
  File "C:\Users\akrherz\Miniconda3\envs\py37\lib\urllib\request.py", line 525, in open
    response = self._open(req, data)
  File "C:\Users\akrherz\Miniconda3\envs\py37\lib\urllib\request.py", line 543, in _open
    '_open', req)
  File "C:\Users\akrherz\Miniconda3\envs\py37\lib\urllib\request.py", line 503, in _call_chain
    result = func(*args)
  File "C:\Users\akrherz\Miniconda3\envs\py37\lib\urllib\request.py", line 1393, in https_open
    context=self._context, check_hostname=self._check_hostname)
  File "C:\Users\akrherz\Miniconda3\envs\py37\lib\urllib\request.py", line 1318, in do_open
    h = http_class(host, timeout=req.timeout, **http_conn_args)
  File "C:\Users\akrherz\Miniconda3\envs\py37\lib\http\client.py", line 1416, in __init__
    context = ssl._create_default_https_context()
  File "C:\Users\akrherz\Miniconda3\envs\py37\lib\ssl.py", line 589, in create_default_context
    context.load_default_certs(purpose)
  File "C:\Users\akrherz\Miniconda3\envs\py37\lib\ssl.py", line 490, in load_default_certs
    self._load_windows_store_certs(storename, purpose)
  File "C:\Users\akrherz\Miniconda3\envs\py37\lib\ssl.py", line 482, in _load_windows_store_certs
    self.load_verify_locations(cadata=certs)
ssl.SSLError: unknown error (_ssl.c:4034)

@xylar
Copy link
Contributor

xylar commented Oct 12, 2021

Glad to hear it. I didn't have much luck but that's due to my poor windows-and-conda skills.

@akrherz
Copy link
Contributor Author

akrherz commented Oct 12, 2021

So the history of _ssl.c for python 3.7 is concerning. No openssl 3 patches, unlike history of _ssl.c for python 3.8

@akrherz
Copy link
Contributor Author

akrherz commented Oct 12, 2021

I don't think this is fixable from cartopy's end and python 3.7 + openssl 3 should be reverted upstream in conda-forge :)

@akrherz
Copy link
Contributor Author

akrherz commented Oct 13, 2021

complained upstream to conda-forge/python-feedstock#516

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants