ssl problem

[Martin R]

I have a problem on a Ubuntu 22.04.4 LTS server (likely independent of the precise release of sage, I tried a fresh build).

I don't know where to start.  If I understand the logs correctly, it build openssl-3.2.2.

Thanks in advance!

Martin

mrubey@ubuntu:~/sage$ ./sage  

┌────────────────────────────────────────────────────────────────────┐
│ SageMath version 10.5.beta0, Release Date: 2024-07-24              │
│ Using Python 3.12.4. Type "help()" for help.                       │
└────────────────────────────────────────────────────────────────────┘
┏━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━┓
┃ Warning: this is a prerelease version, and it may be unstable.     ┃
┗━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━┛
sage: oeis(1)
<repr(<sage.databases.oeis.OEISSequence at 0x7f23139289b0>) failed: OSError: <urlopen error [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: unable to get local issuer certificate (_ssl.c:1000)>

error fetching https://oeis.org/search?q=A000001&n=1&fmt=text>

[Eric Gourgoulhon]

FWIW, I don't have this issue on my computer running the same version of Ubuntu as you (22.04.4). SageMath 10.4 has been built from source here, without the need for Sage to build openssl (the system openssl is 3.0.2): in config.log, there is

## -------------------------------------------------------- ##
## Checking whether SageMath should install SPKG openssl... ##
## -------------------------------------------------------- ##
configure:42035: SPKG openssl is not required on this system
...

configure:143560: result: openssl:                        not required on your platform; SPKG will not be installed

Best wishes,

Eric. 

[Martin R]

Yes,

configure:42296: no suitable system package found for SPKG openssl

and I don't think I can change that.  logs/pkgs/openssl-3.2.2.log doesn't mention any errors.

Martin

[Dima Pasechnik]

On 31 July 2024 14:19:36 BST, 'Martin R' via sage-devel <sage-...@googlegroups.com> wrote:
>Yes,
>
>configure:42296: no suitable system package found for SPKG openssl
>
>and I don't think I can change that.

are you trying to build Python?
You should not.

I suppose your system Python does come with ssl etc.

Dima

>--
>You received this message because you are subscribed to the Google Groups "sage-devel" group.
>To unsubscribe from this group and stop receiving emails from it, send an email to sage-devel+...@googlegroups.com.
>To view this discussion on the web visit https://groups.google.com/d/msgid/sage-devel/18680b06-cffd-4d8c-8d22-9b2279f9765an%40googlegroups.com.

[Martin R]

Is this the relevant bit?

If so, what's the cure?

# Checking whether SageMath should install SPKG python3... ##

## -------------------------------------------------------- ##
configure:39889: checking whether any of bzip2 liblzma libffi zlib is installed as or will be installed as SPKG
configure:39894: result: yes; install python3 as well
configure:41398: no suitable system package found for SPKG python3

[John H Palmieri]

That means that at least one of bzip2, liblzma, libffi, zlib are being built by Sage. Can you install system versions of these instead? What does the message say at the end of running `./configure`?

  John

[Martin R]

Thank you!  It seems that this worked (final confirmation still outstanding).

It would be nice to have a warning in configure, saying that, if it needs to build python, ssl probably doesn't work.

Martin

[Dima Pasechnik]

I might sound like a broken record, but this is yet another proof that the "ability" of Sage to build its own copy of Python is useless and a  waste of  everyone's time.

Dima

[Matthias Koeppe]

Our oeis client code should be updated to use the certificates from the standard "certifi" package.

See example here https://github.com/beeware/Python-Apple-support/issues/119#issuecomment-890281213 (random search result).