Astro CLI Error: [SSL: CERTFICATE_VERIFY_FAILED] certificate verify failed: unable to get local issuer certificate

Problem Statement: When I restart my Airflow environment with the Astro CLI locally or deploy to Astro I get an SSL error from pip basically saying it doesn’t trust the host it’s trying to find the required package in. This might even happen with pypi.org.

ERROR: Could not install packages due to an OSError: HTTPSConnectionPool(host= 'w0cvsblobprodsu6weus7.blob.core.windows.net.... [SSL:CERTFICATE_VERIFY_FAILED] certificate verify failed: unable to get local issuer certificate (_ssl.c:1129)')))

When does this happen: Some environments, especially Windows have stricter rules for which SSL certificates it trusts.

Solution:

  • To avoid this you may need configure your firewall to allow SSL/TLS traffic.
  • OR you can add the host as trusted-host to your pip.conf file manually as shown below:
[global]
extra-index-url = 
trusted-host = pypi.org
                       pypi.python.org
                       pip.astronomer.io
                       w0csvblobdevrt9weru8.blob.core.windows.net