Opened 6 years ago

Closed 3 years ago

#2750 closed defect (fixed)

Certificate error fetching EDS map on some platforms

Reported by: goddard@… Owned by: Greg Couch
Priority: normal Milestone:
Component: Input/Output Version:
Keywords: Cc: Conrad Huang
Blocked By: Blocking:
Notify when closed: Platform: all
Project: ChimeraX

Description

The following bug report has been submitted:
Platform:        Windows-10-10.0.18362
ChimeraX Version: 0.92 (2020-01-15)
Description
Get certificate error trying open 6pt2 from eds on Windows laptop but not on Mac laptop (with Jan 14 2020 ChimeraX).


Log:
Startup Messages  
---  
note | available bundle cache has not been initialized yet  
  
UCSF ChimeraX version: 0.92 (2020-01-15)  
© 2016-2020 Regents of the University of California. All rights reserved.  
How to cite UCSF ChimeraX  

> open 6pt2 fromDatabase eds

Fetching url http://www.ebi.ac.uk/pdbe/coordinates/files/6pt2.ccp4 failed:
<urlopen error [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed:
self signed certificate in certificate chain (_ssl.c:1076)>  

> open 6pt2 fromDatabase eds

Fetching url http://www.ebi.ac.uk/pdbe/coordinates/files/6pt2.ccp4 failed:
<urlopen error [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed:
self signed certificate in certificate chain (_ssl.c:1076)>  




OpenGL version: 3.3.0 NVIDIA 398.35
OpenGL renderer: GeForce GTX 1070 with Max-Q Design/PCIe/SSE2
OpenGL vendor: NVIDIA Corporation

Change History (4)

comment:1 by Eric Pettersen, 6 years ago

Component: UnassignedInput/Output
Owner: set to Tom Goddard
Platform: all
Project: ChimeraX
Status: newassigned
Summary: ChimeraX bug report submissionCertificate error fetching EDS map on some platforms

comment:2 by Tom Goddard, 6 years ago

Cc: Conrad Huang added
Owner: changed from Tom Goddard to Greg Couch

This fetch fails on two different Windows 10 machines and works on a Mac.

The failed URL works in FireFox on the same Windows machine without errors. So this looks like a ChimeraX Windows SSL problem.

comment:3 by Conrad Huang, 6 years ago

Should be fixed by a6b7088ef.

It looks like Windows is no longer updating whatever root certificate file that openssl uses. We already had a fix in place for darwin for the same problem, so we now use "certifi" root certificates on all platforms rather than a native certificate file.

Not closing yet because Linux still needs to be tested.

comment:4 by Greg Couch, 3 years ago

Resolution: fixed
Status: assignedclosed

Linux works.

Note: See TracTickets for help on using tickets.