I followed your post and error is gone. Did you find the cause of the error and is it possible to prevent it in the future releases?
Win Conda nested asn1 error
- mpetrasinovic
- Posts: 106
- Joined: Sat Feb 22, 2020 10:19 am
- Location: Belgrade, Serbia
- Contact:
Re: Win Conda nested asn1 error
Yes I now know what the root cause is, any or some certificates that are loaded from the windows store that contain 'MUP Republike Srbije' will cause the failure. The file I attached is not the finished version but I am putting that together with the appropriate comments referring back to this thread.mpetrasinovic wrote: ↑Tue Jun 02, 2020 8:21 am I followed your post and error is gone. Did you find the cause of the error and is it possible to prevent it in the future releases?
I will propose that @sgrogan can add a line towards the end of the large batch file used to make the Conda build to replace the standard ssl.py with the one I produce. It may be rejected on the basis that the file is not part of FreeCAD core but I can only ask.
- mpetrasinovic
- Posts: 106
- Joined: Sat Feb 22, 2020 10:19 am
- Location: Belgrade, Serbia
- Contact:
Re: Win Conda nested asn1 error
I can confirm that this 'MUP Republike Srbije' certificates are the cause of this. I just found it in multiple places. It would be great if we can add this to the core, thank you!
Re: Win Conda nested asn1 error
I've updated the ssl.py in the post from 08:19 BST with one that's more polished, proper comments and a list that can be easily updated if needed in the future. This is Windows Conda specific so if it can only be added to your batch file that produces the Conda build towards the end so it doesn't get overwritten but rename the existing one first so if/when openssl gets upgraded and it's not immediately apparent then the user can put the default version back relatively easily. It is definitely the src\bin\Lib\ssl.py as there's another one in capital letters in another folder but I verified which one was actually in use. Now whether this is going to raise it's head in the AppImage or Mac at a future date I'm not sure but at least we have an idea how to workaround it.
edit: Added rename existing file
Last edited by Syres on Tue Jun 02, 2020 9:25 am, edited 1 time in total.
Re: Win Conda nested asn1 error
I just tried to look for a "SSL_CERT_FILE" variable on a windows conda environment, and this variable is not set. So we cannot use the same approach as we did for appimage and osx to solve this issue. But I guess you already came to the same conclusion.Syres wrote: ↑Tue Jun 02, 2020 8:34 amYes I now know what the root cause is, any or some certificates that are loaded from the windows store that contain 'MUP Republike Srbije' will cause the failure. The file I attached is not the finished version but I am putting that together with the appropriate comments referring back to this thread.mpetrasinovic wrote: ↑Tue Jun 02, 2020 8:21 am I followed your post and error is gone. Did you find the cause of the error and is it possible to prevent it in the future releases?
I will propose that @sgrogan can add a line towards the end of the large batch file used to make the Conda build to replace the standard ssl.py with the one I produce. It may be rejected on the basis that the file is not part of FreeCAD core but I can only ask.
Re: Win Conda nested asn1 error
Certificates on Windows aren't my specialist subject let alone other platforms so all a learning curve, thanks.
Re: Win Conda nested asn1 error
Just to sign in as another one with this problem.
As sugested here, I replaced SERVER_AUTH with CLIENT_AUTH and it fixed it.
As sugested here, I replaced SERVER_AUTH with CLIENT_AUTH and it fixed it.
Re: Win Conda nested asn1 error
I found this here:
https://github.com/jupyter/notebook/issues/4245
edit: I didn't see that this was already mentioned in this topic, sry.
https://github.com/jupyter/notebook/issues/4245
edit: I didn't see that this was already mentioned in this topic, sry.
Last edited by looo on Thu Jun 04, 2020 10:18 am, edited 1 time in total.
- mpetrasinovic
- Posts: 106
- Joined: Sat Feb 22, 2020 10:19 am
- Location: Belgrade, Serbia
- Contact:
Re: Win Conda nested asn1 error
Can we make some warning for these certificates? I am sure that this will happen again and I just want to save time to those facing the same issue.
Re: Win Conda nested asn1 error
For medium to longterm issues, we would require a moderator to update Known Issues https://forum.freecadweb.org/viewtopic.php?f=3&t=30573 topic but let's get some feedback positive or negative as to whether the solution/workaround can be implemented.mpetrasinovic wrote: ↑Thu Jun 04, 2020 7:31 am Can we make some warning for these certificates? I am sure that this will happen again and I just want to save time to those facing the same issue.