certificate verify failed: unable to get local issuer certificate

SIAESDSI · September 1

In my Dataiku UI, I created two Python environments under Code Envs:

One for Python 3.12
One for Python 3.9

Each environment installs the Python libraries listed in “packages to install” by retrieving them from repositories hosted on an Artifactory.

I imported the Artifactory certificate into the keystore of my Dataiku VM to allow communication.

In the extra options field, I specified --index-url along with the Artifactory token created for Dataiku and the repository name: one for Python 3.9, one for Python 3.12.

With the Python 3.12 environment, everything works correctly: I can rebuild the environment and it retrieves and installs the Python libraries as expected.

However, with the Python 3.9 environment I get a certificate error:

WARNING: Retrying (Retry(total=1, connect=None, read=None, redirect=None, status=None)) after connection broken by 'SSLError(SSLCertVerificationError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: unable to get local issuer certificate (_ssl.c:1129)'))': /artifactory/api/pypi/python-libraries-dataiku-3.9/simple/pip/

If I add --trusted-host <my-artifactory-address> in the extra options, it works.
However, I would like to avoid relying on this approach and instead configure the Python 3.9 environment in a secure way, similar to the Python 3.12 environment that works correctly.