👋 Hi everyone! Our development machines are having some issues with SSL verification of endpoints when running pants. I have passed in command line args on other tools to ignore the ssl certs (again just for a local dev sandbox). Does

pants

have an equivalent workaround? I could not find anything in the docs. (machine is a relatively new macbook pro with m1 chip)

base) ck185129@WUSCK185129-RH6 ~ % ./pants --version
Bootstrapping Pants using /Users/ck185129/miniforge3/bin/python3.9
Creating the virtualenv PEX.
WARNING: Retrying (Retry(total=4, connect=None, read=None, redirect=None, status=None)) after connection broken by 'SSLError(SSLCertVerificationError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: unable to get local issuer certificate (_ssl.c:1129)'))': /simple/virtualenv/
WARNING: Retrying (Retry(total=3, connect=None, read=None, redirect=None, status=None)) after connection broken by 'SSLError(SSLCertVerificationError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: unable to get local issuer certificate (_ssl.c:1129)'))': /simple/virtualenv/
WARNING: Retrying (Retry(total=2, connect=None, read=None, redirect=None, status=None)) after connection broken by 'SSLError(SSLCertVerificationError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: unable to get local issuer certificate (_ssl.c:1129)'))': /simple/virtualenv/
WARNING: Retrying (Retry(total=1, connect=None, read=None, redirect=None, status=None)) after connection broken by 'SSLError(SSLCertVerificationError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: unable to get local issuer certificate (_ssl.c:1129)'))': /simple/virtualenv/
WARNING: Retrying (Retry(total=0, connect=None, read=None, redirect=None, status=None)) after connection broken by 'SSLError(SSLCertVerificationError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: unable to get local issuer certificate (_ssl.c:1129)'))': /simple/virtualenv/

Hmm.. for downloads post bootstrap, there is the ca_certs_path option https://www.pantsbuild.org/docs/reference-global#section-ca-certs-path Have your tried with

REQUESTS_CA_BUNDLE=/path/to/ca/bundle

?

To elaborate, your error is happening during bootstrapping, in the

pants

script, before pants itself actually runs.

Thanks. Will take a stab again. I had tried the BUNDLE env but maybe I need to try again. Let me do that and repost if it still occurs