Install problem - python pmdarima ssl zscaler

[TH]

My best assessment is that the issue lies with Alteryx's python SSL certificate and/or my company's ZScaler security software.

Whatever the exact reason is, I do know that I am getting this error at the top of the error stack.

Could not fetch URL https://pypi.org/simple/pip/: There was a problem confirming the ssl certificate: HTTPSConnectionPool(host='pypi.org', port=443): Max retries exceeded with url: /simple/pip/ (Caused by SSLError(SSLError(136, '[X509: NO_CERTIFICATE_OR_CRL_FOUND] no certificate or crl found (_ssl.c:4263)'))) - skipping

Then this a bit further down.

Could not fetch URL https://pypi.org/simple/pmdarima/: There was a problem confirming the ssl certificate: HTTPSConnectionPool(host='pypi.org', port=443): Max retries exceeded with url: /simple/pmdarima/ (Caused by SSLError(SSLError(136, '[X509: NO_CERTIFICATE_OR_CRL_FOUND] no certificate or crl found (_ssl.c:4263)'))) - skipping

 And then this error at the bottom

CalledProcessError: Command '['c:\\program files\\alteryx\\bin\\miniconda3\\envs\\designerbasetools_venv\\python.exe', '-I', '-m', 'pip', 'install', 'pmdarima']' returned non-zero exit status 1.

Has anyone seen anything like this?

Do you have any ideas on how to address it?

[apathetichell]

which alteryx are you installing. Looks like it's realted to https://pypi.org/simple/pmdarima/

[TH]

I'm not *installing* Alteryx.

I'm *already using* Alteryx. (Version: 2023.1.1.247 Patch: 2, Running Non-Elevated, Engine Version: 2023.1.1.123)

The python installing, importing, and scripting worked fine before the Windows 11 update.

I had no issue with this before the windows 11 update (which, apparently, needed a reinstall of ZScaler security software)

That URL is just a location for any python to pick up libraries for use in python code.

There's nothing wrong with the URL.

The issue is that Alteryx doesn't believe its python module is allowed to run the command in that third code snippet.

And ***THAT*** is what I'm trying to get help with.

[apathetichell]

zscaler is now looking for a x509 (or a jwt kid bsaed off of it). It's not finding it. you have an error. what do you see if you run that command in a python terminal outside of Alteryx. I'm not a windows 11 or zscaler expert - and they can do some weird things. I do not necessarily belive this is an Alteryx issue. The last command is that the pip install cannot successfully run. what happens when you run your workflow in elevated mode? If this is not a standard Alteryx python package - try running it in elevated mode first.

[TH]

Running in elevated mode makes no difference. It's the same set of errors.

And I don't have Python installed on the computer. I'm only using it at work through Alteryx's Python module.

Hence I don't have any idea whether a regular python installation would have the same issue

[apathetichell]

My hunch is it relates to this: https://community.zscaler.com/s/question/0D54u00009evmyYCAQ/zscaler-is-not-allowing-pip-to-download-...

reasoning 1) this is not a new version of Alteryx. 2) this package was previously installed. 3) Zscaler is providing a cert error. Issue would appear to be either don't use this python package - or use the workaround above to force Zscaler to let you install the package.

[TH]

l give it a look over. Thank you for posting the link.

[mcha54]

@TH Were you able to get this resolved? My company upgraded our laptops to Windows 11 this past week and now none of my Python Scripts in Alteryx work due to this SSL CERTIFICATE error. My error message is slightly different from yours, but I think it's the same issue.

requests.exceptions.SSLError: HTTPSConnectionPool(host='api.smartsheet.com', port=443): Max retries exceeded with url: /2.0/sheets/8830978831110020 (Caused by SSLError(SSLCertVerificationError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: unable to get local issuer certificate (_ssl.c:1131)')))

[TH]

What you have does look very similar to what I had.

My python scripts do work now.

It wasn't anything I did though. Unfortunately.

I had to get a higher-level security guy involved. He had to take control of my computer, and eventually (after two or three sessions over a couple of days of trying) figured out where to place some certification files and how/whether to add or subtract certain lines to/from them.

I tried to follow what he was doing; that sort of thing really isn't my forte.

Hence the best advice I can give you is to try to find a person at your company who know(s) the intricacies of the ZScaler certifications so that that person can figure out what needs to happen and can then do those things.