Anaconda Prompt is having an issue with SSL certificates

Feedback
1

I wanted to create a virtual environment in conda prompt:

conda create --name name_of_venv

I am getting error:

Collecting package metadata (current_repodata.json): done Solving environment: done

CondaSSLError: Encountered an SSL error. Most likely a certificate verification issue.

Exception: HTTPSConnectionPool(host=‘repo.anaconda.com’, port=443): Max retries exceeded with url: /pkgs/main/win-64/current_repodata.json (Caused by SSLError(SSLCertVerificationError(1, ‘[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: self signed certificate in certificate chain (_ssl.c:1129)’)))

The same error I get with anaconda navigator too.

2 Likes
2

I’m getting the same error for a fresh Anaconda 2023.03-1 install on Windows x86_64.
I’ve tried copying the openssl and crypto dlls from Library/bin to DLLs with no success.

conda search conda

yields

CondaSSLError: Encountered an SSL error. Most likely a certificate verification issue.

Exception: HTTPSConnectionPool(host='repo.anaconda.com', port=443): Max retries exceeded with url: /pkgs/main/win-64/current_repodata.json (Caused by SSLError(SSLCertVerificationError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: self signed certificate in certificate chain (_ssl.c:997)')))
1 Like
3

I got this issue without any changes to my conda installation. I’m on 24.7.1.

I don’t even understand: Is the self-signed certificate supposed to be on my side (I didn’t install any) or on the remote end (then why doesn’t everybody have this problem?)?

4

The problem was that our company injects a certificate into the chain. The fix looks like this:

  1. open Windows control panel > Manage user certificates
  2. open “Trusted Root Certification Authorities > Certificates”
  3. identify and double click on company-specific CA
  4. open “Details” tab
  5. click “Copy to File”
    6. select Base-64 encoded X.509 (.CER), then click Next
    7. export file as “-ca.crt” to %USERPROFILE%
    8. edit %USERPROFILE%.condarc, add line:
    ssl_verify: %USERPROFILE%<company-name>-ca.crt