[BUG] 1.2.0 Pool SSL Certificate Failed to verify #7273

Biggers78 · 2021-07-09T08:01:19Z

Describe the bug

Cannot connect to host xch.spacefarmers.io:443 ssl:True [SSLCertVerificationError: (1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: unable to get local issuer certificate (_ssl.c:1129)')]

Certificate validity appears correct at both ends.

Result: Pool creates, Contract and ID. However not connected to pool, unable to get plot points

To Reproduce

chia.net download
Installed
Synced then pool added. Thats it.

From my basic understanding it appears to be a Python issue, but I'm far from an expert.

Tested on two different machines / MAC OS Big Sur 11.4 & Catalina 10.15.7

Expected behavior
To work...

Screenshots
N/A

Desktop

OS: MAC OSX
OS Version/Flavor: 1. Bur Sur 11.4 - 2. Catalina 10.15.7
CPU: 1. Inel i7 - 2. Intel i5

Additional context

loppefaaret · 2021-07-09T08:28:38Z

could you try a fresh reinstall, we had a PR submitted on our CA cert yesterday that should fix this

yshklarov · 2021-07-09T09:50:11Z

could you try a fresh reinstall, we had a PR submitted on our CA cert yesterday that should fix this

The fresh CA cert didn't make it into the 1.2.0 package. But in any case, replacing it with the newer file doesn't resolve the issue (I tested this). The problem is that the cert isn't being used. See my notes in the duplicate bug report.

Biggers78 · 2021-07-09T10:38:48Z

I Stopped the GUI and and reinstalled. This did not fix the issue. I will uninstall, delete all files and resync. Will report again later. EDIT: Just saw the above update, noted new install will not fix it. Investigate further.

…

On 9 Jul 2021, at 10:50, yshklarov ***@***.***> wrote: could you try a fresh reinstall, we had a PR submitted on our CA cert yesterday that should fix this The fresh CA cert didn't make it into the 1.2.0 package. But in any case, replacing it with the newer file doesn't resolve the issue (I tested this). The problem is that the cert isn't being used. See my notes in the duplicate bug report. — You are receiving this because you authored the thread. Reply to this email directly, view it on GitHub <#7273 (comment)>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/AUZCIW3BNJP7QR7ZQERMTFTTW3A53ANCNFSM5ACIHDRQ>.

loppefaaret · 2021-07-09T12:01:59Z

yes, my bad, i guess that fix above does not work for using the installers - you need to await a 1.2.1

roxleopardo · 2021-07-09T14:09:36Z

I'm having the same issue. I'm using Manjaro Linux distro (Arch Linux based) and Python 3.9.5.
I was using Ubuntu DEB package this issue happens. But when I build from source I got this working with no SSL issue.

loppefaaret · 2021-07-09T14:42:31Z

@roxleopardo thank you very much for the report.
on that node, im closing this issue, and participants should await a 1.2.1 release for a fix for installer users

youngfong13 · 2021-07-09T18:49:26Z

yes, my bad, i guess that fix above does not work for using the installers - you need to await a 1.2.1

Would 1.2.1.dev0 or later have this fixed?

loppefaaret · 2021-07-10T11:04:21Z

please don't run dev releases on mainnet, without express direction from a developer - it can cause unexpected results!

Biggers78 · 2021-07-10T11:57:21Z

I will wait for 1.2.1. Hopefully early next week so I can then connect to the pool correctly.

…

On Sat, 10 Jul 2021 at 12:04, loppefaaret ***@***.***> wrote: please don't run dev releases on mainnet, without express direction from a developer - it can cause unexpected results! — You are receiving this because you authored the thread. Reply to this email directly, view it on GitHub <#7273 (comment)>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/AUZCIW46NW4D2T54ZXOR6ETTXASL7ANCNFSM5ACIHDRQ> .

youngfong13 · 2021-07-10T17:01:35Z

please don't run dev releases on mainnet, without express direction from a developer - it can cause unexpected results!

Okay, just looking for solutions. so far 1.2.0 doesn't work for pool plots on linux/Mac OS for me and my non-pool plots aren't recognized in CLI.

ukrainets · 2021-07-12T02:39:40Z

I'm also having this issue, (Mac OS 11.4 ) and according to messages in the Space pool discord, a lot of people have it.
@loppefaaret can you share any gestimation on when we can expect a v1.2.1 ?

loppefaaret · 2021-07-12T09:24:48Z

I'm sorry, but all i can say is soon, hopefully very soon

griffithJ · 2021-07-12T21:43:07Z

Still broken on Mac in release 1.2.1

% chia version
1.2.1
% grep "GET /pool_info" debug.log | tail -1                                             
2021-07-12T14:40:18.381 farmer chia.farmer.farmer         : ERROR    Exception in GET /pool_info https://chia.futurepool.io, Cannot connect to host chia.futurepool.io:443 ssl:True [SSLCertVerificationError: (1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: unable to get local issuer certificate (_ssl.c:1129)')]

loppefaaret · 2021-07-12T21:47:58Z

@griffithJ is that installer ? m1(arm) or intel based ?

griffithJ · 2021-07-12T21:50:08Z

@griffithJ is that installer ? m1(arm) or intel based ?

That was the .app copied from the .dmg. Intel. Is there a better way I should be installing updates?

loppefaaret · 2021-07-12T21:50:43Z

that is perfect, just wanted to make sure the error was in the installer!

StonedStudio · 2021-07-12T22:49:47Z

I have the issue as well still on 1.2.1 using the m1 installer.

ukrainets · 2021-07-12T23:02:53Z

Yes me too. I just installed 1.2.1 and still see the same issue
2021-07-12T17:58:06.798 farmer chia.farmer.farmer : ERROR Exception in GET /pool_info https://na1.pool.space, Cannot connect to host na1.pool.space:443 ssl:True [SSLCertVerificationError: (1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: unable to get local issuer certificate (_ssl.c:1129)')]

Mac OS 11.4 (20F71) Intel, GUI installer

loppefaaret · 2021-07-13T06:36:28Z

could you try a fresh reinstall, we had a PR submitted on our CA cert yesterday that should fix this

The fresh CA cert didn't make it into the 1.2.0 package. But in any case, replacing it with the newer file doesn't resolve the issue (I tested this). The problem is that the cert isn't being used. See my notes in the duplicate bug report.

i think yshklarov might have something here from his dupe #7278 I'm escalating this up the chain to get some 👀 on it

Biggers78 · 2021-07-13T07:46:51Z

I got a fix yesterday You need to upgrade the python version, I suspect it is still 2.7. Install brew https://brew.sh/ <https://brew.sh/> Upgrade to 3.9.5 see here https://opensource.com/article/19/5/python-3-default-mac <https://opensource.com/article/19/5/python-3-default-mac> (note: change 3.7.3 to 3.9.5) Then run pip3 install --upgrade certifi This will fix it :-) Fix worked on both intel and M1

…

On 13 Jul 2021, at 07:36, loppefaaret ***@***.***> wrote: could you try a fresh reinstall, we had a PR submitted on our CA cert yesterday that should fix this The fresh CA cert didn't make it into the 1.2.0 package. But in any case, replacing it with the newer file doesn't resolve the issue (I tested this). The problem is that the cert isn't being used. See my notes in the duplicate bug report. i think yshklarov might have something here from his dupe #7278 <#7278> I'm escalating this up the chain to get some 👀 on it — You are receiving this because you authored the thread. Reply to this email directly, view it on GitHub <#7273 (comment)>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/AUZCIW6ND32USLBJYEZZUWLTXPNHPANCNFSM5ACIHDRQ>.

andrewsno1 · 2021-07-13T09:29:18Z

I am getting the same error when trying to create a plotnft:

Exception from 'wallet' Error connecting to pool https://pool.chiahub.io: Cannot connect to host pool.chiahub.io:443 ssl:True [SSLCertVerificationError: (1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: unable to get local issuer certificate (_ssl.c:1131)')]

I am running version 1.2.1 on Manjaro Linux. I had the issue with version 1.2.0. I tried to connect to https://pool.chiahub.io

ukrainets · 2021-07-13T15:11:30Z

@loppefaaret Yesterday I tried a clean install with the intel Mac GUI installer and it didn't work, still have the same issue.
Doing clean install via CLI was my last hope that what I'll try to do today and will use @Biggers78 suggestion.

StonedStudio · 2021-07-13T16:47:19Z

I also no longer have an issue once Python was adjusted to 3.#. It appears to have defaulted to use 2.7

bernharl · 2021-07-13T17:28:22Z

Still have the issue on Arch Linux. python-certifi installed.

ukrainets · 2021-07-14T00:13:38Z

I fixed this issue on my farmer machine by updating python.

sdbarrish · 2021-07-14T20:00:01Z

2021-07-14T15:59:28.653 full_node asyncio : ERROR SSL error in data received
protocol: <asyncio.sslproto.SSLProtocol object at 0x7f9a2425c0>
transport: <_SelectorSocketTransport fd=104 read=polling write=<idle, bufsize=0>>
Traceback (most recent call last):
File "/usr/lib/python3.7/asyncio/sslproto.py", line 526, in data_received
ssldata, appdata = self._sslpipe.feed_ssldata(data)
File "/usr/lib/python3.7/asyncio/sslproto.py", line 207, in feed_ssldata
self._sslobj.unwrap()
File "/usr/lib/python3.7/ssl.py", line 767, in unwrap
return self._sslobj.shutdown()
ssl.SSLError: [SSL: KRB5_S_INIT] application data after close notify (_ssl.c:2609)

yshklarov · 2021-07-14T21:03:58Z

Release 1.2.2 fully resolves the issue on my system (arch linux). Thanks @loppefaaret @emlowe @wjblanke!

emlowe · 2021-07-14T21:06:48Z

Fixed in 1.2.2

Manintorn · 2021-07-15T02:55:04Z

I fixed this problem by update Python 3.9.5 and Chia 1.2.2

KmBooy · 2021-07-15T03:05:00Z

Does Windows 10 have this problem

Manintorn · 2021-07-15T03:06:35Z

Does Windows 10 have this problem

My PC with Windows10 works just fine.

njtnestor · 2021-07-15T07:11:00Z

I have the same problem in 1.2.2 - ubuntu

andrewsno1 · 2021-07-15T07:44:48Z

I am getting the same error when trying to create a plotnft:

Exception from 'wallet' Error connecting to pool https://pool.chiahub.io: Cannot connect to host pool.chiahub.io:443 ssl:True [SSLCertVerificationError: (1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: unable to get local issuer certificate (_ssl.c:1131)')]

I am running version 1.2.1 on Manjaro Linux. I had the issue with version 1.2.0. I tried to connect to https://pool.chiahub.io

Fixed for me in 1.2.2
I am plotting for the pool now.

hlung · 2021-08-08T11:51:26Z

For me, something was messing my DNS. I go to System Preferences > Network > select my wifi > DNS tab > add 8.8.8.8 to my DNS servers list. This solves the issue for me.

Update: It only helps for a few hours. Now the error comes back again :(

Biggers78 added the bug Something isn't working label Jul 9, 2021

yshklarov mentioned this issue Jul 9, 2021

[BUG] CERTIFICATE_VERIFY_FAILED for GET /pool_info #7278

Closed

loppefaaret closed this as completed Jul 9, 2021

loppefaaret reopened this Jul 12, 2021

hoffmang9 mentioned this issue Jul 13, 2021

Chlg1.2.2 #7468

Closed

emlowe mentioned this issue Jul 14, 2021

[BUG] SSL Error continues on Chia 1.2.1 #7444

Closed

emlowe linked a pull request Jul 14, 2021 that will close this issue

Use bundled CA store for pool https #7461

Merged

emlowe closed this as completed Jul 14, 2021

smiletracer mentioned this issue Jul 16, 2021

[BUG] launchd on Mac #4396

Closed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

[BUG] 1.2.0 Pool SSL Certificate Failed to verify #7273

[BUG] 1.2.0 Pool SSL Certificate Failed to verify #7273

Biggers78 commented Jul 9, 2021

loppefaaret commented Jul 9, 2021

yshklarov commented Jul 9, 2021

Biggers78 commented Jul 9, 2021 via email •

edited

Loading

loppefaaret commented Jul 9, 2021

roxleopardo commented Jul 9, 2021 •

edited

Loading

loppefaaret commented Jul 9, 2021

youngfong13 commented Jul 9, 2021

loppefaaret commented Jul 10, 2021

Biggers78 commented Jul 10, 2021 via email

youngfong13 commented Jul 10, 2021

ukrainets commented Jul 12, 2021

loppefaaret commented Jul 12, 2021

griffithJ commented Jul 12, 2021

loppefaaret commented Jul 12, 2021

griffithJ commented Jul 12, 2021

loppefaaret commented Jul 12, 2021

StonedStudio commented Jul 12, 2021

ukrainets commented Jul 12, 2021 •

edited

Loading

loppefaaret commented Jul 13, 2021

Biggers78 commented Jul 13, 2021 via email •

edited

Loading

andrewsno1 commented Jul 13, 2021

ukrainets commented Jul 13, 2021

StonedStudio commented Jul 13, 2021

bernharl commented Jul 13, 2021

ukrainets commented Jul 14, 2021

sdbarrish commented Jul 14, 2021

yshklarov commented Jul 14, 2021

emlowe commented Jul 14, 2021

Manintorn commented Jul 15, 2021

KmBooy commented Jul 15, 2021

Manintorn commented Jul 15, 2021

njtnestor commented Jul 15, 2021 •

edited

Loading

andrewsno1 commented Jul 15, 2021

hlung commented Aug 8, 2021 •

edited

Loading

[BUG] 1.2.0 Pool SSL Certificate Failed to verify #7273

[BUG] 1.2.0 Pool SSL Certificate Failed to verify #7273

Comments

Biggers78 commented Jul 9, 2021

loppefaaret commented Jul 9, 2021

yshklarov commented Jul 9, 2021

Biggers78 commented Jul 9, 2021 via email • edited Loading

loppefaaret commented Jul 9, 2021

roxleopardo commented Jul 9, 2021 • edited Loading

loppefaaret commented Jul 9, 2021

youngfong13 commented Jul 9, 2021

loppefaaret commented Jul 10, 2021

Biggers78 commented Jul 10, 2021 via email

youngfong13 commented Jul 10, 2021

ukrainets commented Jul 12, 2021

loppefaaret commented Jul 12, 2021

griffithJ commented Jul 12, 2021

loppefaaret commented Jul 12, 2021

griffithJ commented Jul 12, 2021

loppefaaret commented Jul 12, 2021

StonedStudio commented Jul 12, 2021

ukrainets commented Jul 12, 2021 • edited Loading

loppefaaret commented Jul 13, 2021

Biggers78 commented Jul 13, 2021 via email • edited Loading

andrewsno1 commented Jul 13, 2021

ukrainets commented Jul 13, 2021

StonedStudio commented Jul 13, 2021

bernharl commented Jul 13, 2021

ukrainets commented Jul 14, 2021

sdbarrish commented Jul 14, 2021

yshklarov commented Jul 14, 2021

emlowe commented Jul 14, 2021

Manintorn commented Jul 15, 2021

KmBooy commented Jul 15, 2021

Manintorn commented Jul 15, 2021

njtnestor commented Jul 15, 2021 • edited Loading

andrewsno1 commented Jul 15, 2021

hlung commented Aug 8, 2021 • edited Loading

Biggers78 commented Jul 9, 2021 via email •

edited

Loading

roxleopardo commented Jul 9, 2021 •

edited

Loading

ukrainets commented Jul 12, 2021 •

edited

Loading

Biggers78 commented Jul 13, 2021 via email •

edited

Loading

njtnestor commented Jul 15, 2021 •

edited

Loading

hlung commented Aug 8, 2021 •

edited

Loading