Unable to create/update goodware db on windows (SSL verify fail)

[5kuby]

Expected Behavior

Successful build of local goodware database.

Current Behavior

Script fails with error SSLCertVerificationError: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: unable to get local issuer certificate (_ssl.c:1123)
It's caused by the rootCA management mechanism ( https://bugs.python.org/issue36011 )

Solution

install certifi (mozilla rootCA project https://github.com/certifi/python-certifi ) with pip ( python -m pip install certifi ) or include certifi in the requirements.txt file

Context (Environment)

Windows 10

[whichbuffer]

You may need to add Certificate from https://www.bsk-consulting.de web page into your Trusted Root certs. This helped me.

[JoeDibley]

Editing the urllib.request.urlopen(repo_url) to include the CA from certifi did the trick.

The line with this on then looked like this
with urllib.request.urlopen(repo_url, cafile='C:\Users\Administrator\yara\lib\site-packages\certifi\cacert.pem') as response, open("./dbs/%s" % filename, 'wb') as out_file: