Bug 935433 – dev-python/pip-24.1.1 fails tests on ppc, loong: SSLError(SSLCertVerificationError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: self-signed certificate (_ssl.c:1004)'))

• Product: Gentoo Linux
• Status: CONFIRMED ---

[Description matoro 2024-07-03 23:03:13 UTC]

Really weird, this fails identically on these two arches, and no other tested, despite them having nothing in common with each other.  Possibly affected by some other sort of system configuration.

FAILED tests/functional/test_install.py::test_install_sends_client_cert[install_args0] - AssertionError: Script returned code: 1
FAILED tests/functional/test_install_config.py::test_prompt_for_authentication - AssertionError: Script result: python -m pip install --index-url https://localhost:45875/simple --cert /var/tmp/portage/dev-python/pip-24.1.1/temp/pytest-of-portage/pytest-0/popen-gw3/certs2/cert.pem --client-cert /var/tmp/portage/dev-python/pip-24.1.1/temp/pytest-of-portage/pytest-0/popen-gw3/certs2/cert.pem simple
    return code: 1
  -- stderr: --------------------
  WARNING: Retrying (Retry(total=4, connect=None, read=None, redirect=None, status=None)) after connection broken by 'SSLError(SSLCertVerificationError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: self-signed certificate (_ssl.c:1004)'))': /simple/simple/
  WARNING: Retrying (Retry(total=3, connect=None, read=None, redirect=None, status=None)) after connection broken by 'SSLError(SSLCertVerificationError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: self-signed certificate (_ssl.c:1004)'))': /simple/simple/
  WARNING: Retrying (Retry(total=2, connect=None, read=None, redirect=None, status=None)) after connection broken by 'SSLError(SSLCertVerificationError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: self-signed certificate (_ssl.c:1004)'))': /simple/simple/
  WARNING: Retrying (Retry(total=1, connect=None, read=None, redirect=None, status=None)) after connection broken by 'SSLError(SSLCertVerificationError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: self-signed certificate (_ssl.c:1004)'))': /simple/simple/
  WARNING: Retrying (Retry(total=0, connect=None, read=None, redirect=None, status=None)) after connection broken by 'SSLError(SSLCertVerificationError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: self-signed certificate (_ssl.c:1004)'))': /simple/simple/
  ERROR: Could not find a version that satisfies the requirement simple (from versions: none)
  ERROR: No matching distribution found for simple
  
  -- stdout: --------------------
  Looking in indexes: https://localhost:45875/simple
  Could not fetch URL https://localhost:45875/simple/simple/: There was a problem confirming the ssl certificate: HTTPSConnectionPool(host='localhost', port=45875): Max retries exceeded with url: /simple/simple/ (Caused by SSLError(SSLCertVerificationError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: self-signed certificate (_ssl.c:1004)'))) - skipping
  
assert 'User for localhost:45875' in "Looking in indexes: https://localhost:45875/simple\nCould not fetch URL https://localhost:45875/simple/simple/: There was a problem confirming the ssl certificate: HTTPSConnectionPool(host='localhost', port=45875): Max retries exceeded with url: /simple/simple/ (Caused by SSLError(SSLCertVerificationError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: self-signed certificate (_ssl.c:1004)'))) - skipping\n"
 +  where "Looking in indexes: https://localhost:45875/simple\nCould not fetch URL https://localhost:45875/simple/simple/: There was a problem confirming the ssl certificate: HTTPSConnectionPool(host='localhost', port=45875): Max retries exceeded with url: /simple/simple/ (Caused by SSLError(SSLCertVerificationError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: self-signed certificate (_ssl.c:1004)'))) - skipping\n" = <tests.lib.TestPipResult object at 0x7fffed0ba9f0>.stdout
FAILED tests/functional/test_install_config.py::test_do_not_prompt_for_authentication - assert 'ERROR: HTTP error 401' in "WARNING: Retrying (Retry(total=4, connect=None, read=None, redirect=None, status=None)) after connection broken by 'SSLError(SSLCertVerificationError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: self-signed certificate (_ssl.c:1004)'))': /simple/simple/\nWARNING: Retrying (Retry(total=3, connect=None, read=None, redirect=None, status=None)) after connection broken by 'SSLError(SSLCertVerificationError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: self-signed certificate (_ssl.c:1004)'))': /simple/simple/\nWARNING: Retrying (Retry(total=2, connect=None, read=None, redirect=None, status=None)) after connection broken by 'SSLError(SSLCertVerificationError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: self-signed certificate (_ssl.c:1004)'))': /simple/simple/\nWARNING: Retrying (Retry(total=1, connect=None, read=None, redirect=None, status=None)) after connection broken by 'SSLError(SSLCertVerificationError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: self-signed certificate (_ssl.c:1004)'))': /simple/simple/\nWARNING: Retrying (Retry(total=0, connect=None, read=None, redirect=None, status=None)) after connection broken by 'SSLError(SSLCertVerificationError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: self-signed certificate (_ssl.c:1004)'))': /simple/simple/\nERROR: Could not find a version that satisfies the requirement simple (from versions: none)\nERROR: No matching distribution found for simple\n"
 +  where "WARNING: Retrying (Retry(total=4, connect=None, read=None, redirect=None, status=None)) after connection broken by 'SSLError(SSLCertVerificationError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: self-signed certificate (_ssl.c:1004)'))': /simple/simple/\nWARNING: Retrying (Retry(total=3, connect=None, read=None, redirect=None, status=None)) after connection broken by 'SSLError(SSLCertVerificationError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: self-signed certificate (_ssl.c:1004)'))': /simple/simple/\nWARNING: Retrying (Retry(total=2, connect=None, read=None, redirect=None, status=None)) after connection broken by 'SSLError(SSLCertVerificationError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: self-signed certificate (_ssl.c:1004)'))': /simple/simple/\nWARNING: Retrying (Retry(total=1, connect=None, read=None, redirect=None, status=None)) after connection broken by 'SSLError(SSLCertVerificationError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: self-signed certificate (_ssl.c:1004)'))': /simple/simple/\nWARNING: Retrying (Retry(total=0, connect=None, read=None, redirect=None, status=None)) after connection broken by 'SSLError(SSLCertVerificationError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: self-signed certificate (_ssl.c:1004)'))': /simple/simple/\nERROR: Could not find a version that satisfies the requirement simple (from versions: none)\nERROR: No matching distribution found for simple\n" = <tests.lib.TestPipResult object at 0x7fffec7bc7a0>.stderr
============= 3 failed, 2288 passed, 51 skipped, 14 xfailed, 2 xpassed, 56 warnings in 675.89s (0:11:15) ==============

[Comment 1 matoro 2024-07-03 23:03:30 UTC]

Created attachment 896920 [details]
build.log and emerge --info (ppc)

[Comment 2 matoro 2024-07-03 23:03:43 UTC]

Created attachment 896921 [details]
build.log and emerge --info (loong)

[Comment 3 WANG Xuerui 2025-01-24 11:01:13 UTC]

Sorry for the late triage, but this no longer reproduces on loong with dev-python/pip-24.3.1-r2 with python3.{11,12}. Is the bug still present on ppc though?

[Comment 4 matoro 2025-01-25 03:47:39 UTC]

(In reply to WANG Xuerui from comment #3)
> Sorry for the late triage, but this no longer reproduces on loong with
> dev-python/pip-24.3.1-r2 with python3.{11,12}. Is the bug still present on
> ppc though?

I just tried this and still getting the same error with that pip version and python3.12, on loong.  Really not sure what could cause this?

[Comment 5 matoro 2025-01-25 19:48:58 UTC]

I also tried this on alpha, which is another unstable-only arch, and it does not reproduce there.  Only loong and ppc.