[Question]: ssl.SSLCertVerificationError: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: unable to get local issuer certificate

[btdan]

Self Checks

• I have searched for existing issues search for existing issues, including closed ones.
• I confirm that I am using English to submit this report (Language Policy).
• Non-english title submitions will be closed directly ( 非英文标题的提交将会被直接关闭 ) (Language Policy).
• Please do not modify this template :) and fill in all the required fields.

Describe your problem

When I install ragflow from building source code on arm64 openEuler system.
I run the command uv sync --python 3.10 --all-extras and get the tips about errors just as follows:
---------------------- tips begin ------------------------------
Built google-search-results==2.4.2
Built warc3-wet-clueweb09==0.2.5
Built wikipedia==1.4.0
× Failed to build pystemmer==2.2.0.3
├─▶ The build backend returned an error
╰─▶ Call to setuptools.build_meta:__legacy__.build_wheel failed (exit status: 1)

  [stdout]
  Downloading https://snowballstem.org/dist/libstemmer_c-2.2.0.tar.gz...

  [stderr]
  Traceback (most recent call last):
    File "/root/.local/share/uv/python/cpython-3.10.18-linux-aarch64-gnu/lib/python3.10/urllib/request.py", line 1348, in do_open
      h.request(req.get_method(), req.selector, req.data, headers,
    File "/root/.local/share/uv/python/cpython-3.10.18-linux-aarch64-gnu/lib/python3.10/http/client.py", line 1283, in request
      self._send_request(method, url, body, headers, encode_chunked)
    File "/root/.local/share/uv/python/cpython-3.10.18-linux-aarch64-gnu/lib/python3.10/http/client.py", line 1329, in _send_request
      self.endheaders(body, encode_chunked=encode_chunked)
    File "/root/.local/share/uv/python/cpython-3.10.18-linux-aarch64-gnu/lib/python3.10/http/client.py", line 1278, in endheaders
      self._send_output(message_body, encode_chunked=encode_chunked)
    File "/root/.local/share/uv/python/cpython-3.10.18-linux-aarch64-gnu/lib/python3.10/http/client.py", line 1038, in _send_output
      self.send(msg)
    File "/root/.local/share/uv/python/cpython-3.10.18-linux-aarch64-gnu/lib/python3.10/http/client.py", line 976, in send
      self.connect()
    File "/root/.local/share/uv/python/cpython-3.10.18-linux-aarch64-gnu/lib/python3.10/http/client.py", line 1455, in connect
      self.sock = self._context.wrap_socket(self.sock,
    File "/root/.local/share/uv/python/cpython-3.10.18-linux-aarch64-gnu/lib/python3.10/ssl.py", line 513, in wrap_socket
      return self.sslsocket_class._create(
    File "/root/.local/share/uv/python/cpython-3.10.18-linux-aarch64-gnu/lib/python3.10/ssl.py", line 1104, in _create
      self.do_handshake()
    File "/root/.local/share/uv/python/cpython-3.10.18-linux-aarch64-gnu/lib/python3.10/ssl.py", line 1375, in do_handshake
      self._sslobj.do_handshake()
  ssl.SSLCertVerificationError: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: unable to get local issuer certificate
  (_ssl.c:1017)

  During handling of the above exception, another exception occurred:

  Traceback (most recent call last):
    File "<string>", line 14, in <module>
    File "/root/.cache/uv/builds-v0/.tmpImDJRC/lib/python3.10/site-packages/setuptools/build_meta.py", line 331, in
  get_requires_for_build_wheel
      return self._get_build_requires(config_settings, requirements=[])
    File "/root/.cache/uv/builds-v0/.tmpImDJRC/lib/python3.10/site-packages/setuptools/build_meta.py", line 301, in _get_build_requires
      self.run_setup()
    File "/root/.cache/uv/builds-v0/.tmpImDJRC/lib/python3.10/site-packages/setuptools/build_meta.py", line 512, in run_setup
      super().run_setup(setup_script=setup_script)
    File "/root/.cache/uv/builds-v0/.tmpImDJRC/lib/python3.10/site-packages/setuptools/build_meta.py", line 317, in run_setup
      exec(code, locals())
    File "<string>", line 126, in <module>
    File "<string>", line 110, in download
    File "/root/.cache/uv/sdists-v9/index/3ba65c4f41aac3a1/pystemmer/2.2.0.3/OeFr0yHyyD_YciX6rIlm9/src/tarballfetcher.py", line 40, in
  download_and_extract_tarball
      download_file(tarball_url, tarball_filename)
    File "/root/.cache/uv/sdists-v9/index/3ba65c4f41aac3a1/pystemmer/2.2.0.3/OeFr0yHyyD_YciX6rIlm9/src/tarballfetcher.py", line 17, in
  download_file
      urlretrieve(url, filename)
    File "/root/.local/share/uv/python/cpython-3.10.18-linux-aarch64-gnu/lib/python3.10/urllib/request.py", line 241, in urlretrieve
      with contextlib.closing(urlopen(url, data)) as fp:
    File "/root/.local/share/uv/python/cpython-3.10.18-linux-aarch64-gnu/lib/python3.10/urllib/request.py", line 216, in urlopen
      return opener.open(url, data, timeout)
    File "/root/.local/share/uv/python/cpython-3.10.18-linux-aarch64-gnu/lib/python3.10/urllib/request.py", line 519, in open
      response = self._open(req, data)
    File "/root/.local/share/uv/python/cpython-3.10.18-linux-aarch64-gnu/lib/python3.10/urllib/request.py", line 536, in _open
      result = self._call_chain(self.handle_open, protocol, protocol +
    File "/root/.local/share/uv/python/cpython-3.10.18-linux-aarch64-gnu/lib/python3.10/urllib/request.py", line 496, in _call_chain
      result = func(*args)
    File "/root/.local/share/uv/python/cpython-3.10.18-linux-aarch64-gnu/lib/python3.10/urllib/request.py", line 1391, in https_open
      return self.do_open(http.client.HTTPSConnection, req,
    File "/root/.local/share/uv/python/cpython-3.10.18-linux-aarch64-gnu/lib/python3.10/urllib/request.py", line 1351, in do_open
      raise URLError(err)
  urllib.error.URLError: <urlopen error [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: unable to get local issuer
  certificate (_ssl.c:1017)>

  hint: This usually indicates a problem with the package or the build environment.

help: pystemmer (v2.2.0.3) was included because ragflow[full] (v0.19.0) depends on fastembed (v0.3.6) which depends on pystemmer
-------------------tips end --------------------
Can you tell me how to solve this problem?
Thanks very much.

[dosubot]

This error usually means your system is missing the necessary root CA certificates to verify SSL connections. On openEuler, you can often fix this by installing or updating the ca-certificates package:

sudo dnf install ca-certificates
sudo update-ca-trust

After updating, try your install command again.

If you still see the error, you can explicitly tell Python where to find your CA certificates by setting the SSL_CERT_FILE environment variable. On most Linux systems, the CA bundle is at /etc/ssl/certs/ca-certificates.crt:

export SSL_CERT_FILE=/etc/ssl/certs/ca-certificates.crt
uv sync --python 3.10 --all-extras

If you are running inside a container or custom environment, make sure the CA certificates file is present and mounted, and set SSL_CERT_FILE accordingly. This approach has resolved similar issues for other users in the RAGFlow community [source] [source].

If the problem persists, check that your system clock is correct and that you can access the download URL in your browser. If you are behind a proxy or using a custom CA, ensure that CA is included in your trusted store.

To reply, just mention @dosu.

---

^{How did I do? Good | Irrelevant | Incorrect | Verbose | Hallucination | Report 🐛 | Other}   

[btdan]

Thanks very much for your help.
I just follow your advice and run the commands:

sudo dnf install ca-certificates
sudo update-ca-trust

And nothing is changed because I have do this before.
and I find that there is no /etc/ssl/certs/ca-certificates.crt.
I run the command to search:
find / -name ca-certificates.crt
But there is nothing returned at all. That means there is no file named ca-certificates.crt in this os?
Can you tell me how to solve this promblem?
My os is OpenEuler with arm64 architecture.
Thanks very much.