I see the alien.py fails. The operating system is MAC MONTEREY, M1-chip. Any help is appreciated.
Thanks in advance.
Enter PEM pass phrase:
Could NOT establish connection (WebSocket) to ::ffff:137.138.99.139:8097
SSLCertVerificationError(1, ‘[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: self signed certificate in certificate chain (_ssl.c:997)’)
Check the logfile: /Users/arvindkhuntia/alien_py.log
Enter PEM pass phrase:
Could NOT establish connection (WebSocket) to ::ffff:137.138.99.140:8097
SSLCertVerificationError(1, ‘[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: self signed certificate in certificate chain (_ssl.c:997)’)
@akhuntia could you check if CA CERN certs are present: ls -1 /Users/arvindkhuntia/alice/alisw/sw/osx_arm64/AliEn-Runtime/v2-19-le-local1/globus/share/certificates/CERN-GridCA*
@akhuntia so, at this point i suspect that you have a network related problem…
if on lxplus with the same user certificates you can do: /cvmfs/alice.cern.ch/bin/alienv enter xjalienfs
then alien.py pwd
then both your user certificates and alien.py are ok
and the problem is with your local connection … i suspect that a transparent proxy or vpn interfere with your connection towards CERN…
Could you please confirm that on lxplus things work?
Thanks a lot!
then compare the hash of CERN-GridCA.pem, in both environments (on your O2/latest on mac and in xjalienfs on lxplus) check: sha256sum $X509_CERT_DIR/CERN-GridCA.pem
other than this i ran out of ideas… but it’s clear that something is corrupted on your laptop,
and it might be a solution to delete everything under $ALIBUILD_WORK_DIR (except MIRROR) and try again the build
the most basic test for cert verification should work (within the respective environment where X509_CERT_DIR is defined and have the collection of CA certificates): openssl verify -CApath $X509_CERT_DIR $HOME/.globus/usercert.pem
this assumes that the involved files (both user{cert,key}.pem and CERN-GridCA.pem) are valid, the the hash shown that the files are the same
the basic validation tests on lxplus were successful
so, given that the files are the same, everything works on lxplus, but not on the laptop, i can only blame the network somehow… is the network CERN? if yes, then it cannot be the network (unless is an un-registered device), if no, then try to have the network access through another ISP and see if this change anything
Does anyone know what could be causing the following error while trying to do alien.py?
[AliPhysics/latest-master-o2] ~ %> alien.py
/Users/anjaly/alice/sw/osx_x86-64/xjalienfs/1.5.7-local1/lib/python/site-packages/urllib3/__init__.py:34: NotOpenSSLWarning: urllib3 v2 only supports OpenSSL 1.1.1+, currently the 'ssl' module is compiled with 'LibreSSL 2.8.3'. See: https://github.com/urllib3/urllib3/issues/3020
warnings.warn(
ModuleNotFoundError: No module named '_cffi_backend'
thread '<unnamed>' panicked at /Users/runner/.cargo/registry/src/index.crates.io-6f17d22bba15001f/pyo3-0.18.3/src/err/mod.rs:790:5:
Python API call failed
note: run with `RUST_BACKTRACE=1` environment variable to display a backtrace
Traceback (most recent call last):
File "/Users/anjaly/alice/sw/osx_x86-64/xjalienfs/1.5.7-local1/bin/alien.py", line 5, in <module>
from alienpy.alien import main
File "/Users/anjaly/alice/sw/osx_x86-64/xjalienfs/1.5.7-local1/lib/python/site-packages/alienpy/alien.py", line 53, in <module>
from .wb_api import InitConnection, SendMsg, cd, get_help_srv, retf_print, token_regen, wb_ping
File "/Users/anjaly/alice/sw/osx_x86-64/xjalienfs/1.5.7-local1/lib/python/site-packages/alienpy/wb_api.py", line 25, in <module>
from .wb_async import IsWbConnected, wb_close, wb_create, wb_sendmsg, wb_sendmsg_multi
File "/Users/anjaly/alice/sw/osx_x86-64/xjalienfs/1.5.7-local1/lib/python/site-packages/alienpy/wb_async.py", line 31, in <module>
from .connect_ssl import create_ssl_context, renewCredFilesInfo
File "/Users/anjaly/alice/sw/osx_x86-64/xjalienfs/1.5.7-local1/lib/python/site-packages/alienpy/connect_ssl.py", line 24, in <module>
import OpenSSL
File "/Users/anjaly/alice/sw/osx_x86-64/xjalienfs/1.5.7-local1/lib/python/site-packages/OpenSSL/__init__.py", line 8, in <module>
from OpenSSL import SSL, crypto
File "/Users/anjaly/alice/sw/osx_x86-64/xjalienfs/1.5.7-local1/lib/python/site-packages/OpenSSL/SSL.py", line 10, in <module>
from OpenSSL._util import (
File "/Users/anjaly/alice/sw/osx_x86-64/xjalienfs/1.5.7-local1/lib/python/site-packages/OpenSSL/_util.py", line 6, in <module>
from cryptography.hazmat.bindings.openssl.binding import Binding
File "/Users/anjaly/alice/sw/osx_x86-64/xjalienfs/1.5.7-local1/lib/python/site-packages/cryptography/hazmat/bindings/openssl/binding.py", line 15, in <module>
from cryptography.exceptions import InternalError
File "/Users/anjaly/alice/sw/osx_x86-64/xjalienfs/1.5.7-local1/lib/python/site-packages/cryptography/exceptions.py", line 9, in <module>
from cryptography.hazmat.bindings._rust import exceptions as rust_exceptions
pyo3_runtime.PanicException: Python API call failed
[AliPhysics/latest-master-o2] ~ %>