huschplay Comments

huschplay

Posts Comments

WWindmill

•Created by huschplay on 1/24/2025 in #help

Can't get Python to work with TLS Interception, always UnknownIssuer

@Pyra let me know If I can test something for you

28 replies

WWindmill

•Created by huschplay on 1/24/2025 in #help

Can't get Python to work with TLS Interception, always UnknownIssuer

We have a firewall doing TLS interception with a custom CA, which is enrolled on all devices. So not self signed in the usal way

28 replies

WWindmill

•Created by huschplay on 1/24/2025 in #help

Can't get Python to work with TLS Interception, always UnknownIssuer

I mount the folder /usr/local/share/ca-certificates:ro from the host system and use a init_script to update the certs on the worker

28 replies

WWindmill

•Created by huschplay on 1/24/2025 in #help

Can't get Python to work with TLS Interception, always UnknownIssuer

hi yes, that is correct

28 replies

WWindmill

•Created by huschplay on 1/24/2025 in #help

Can't get Python to work with TLS Interception, always UnknownIssuer

I will update the issue "feature: add support for custom/corporate certificate authorities #1564", so people are aware

28 replies

WWindmill

•Created by huschplay on 1/24/2025 in #help

Can't get Python to work with TLS Interception, always UnknownIssuer

I can confirm this is working, thank you very much. I would suggest updating the documentation at https://www.windmill.dev/docs/advanced/self_host#configure-python-requests--httpx-trust

28 replies

WWindmill

•Created by huschplay on 1/24/2025 in #help

Can't get Python to work with TLS Interception, always UnknownIssuer

thx, for letting me know. I will check next week and get back to you

28 replies

WWindmill

•Created by huschplay on 1/24/2025 in #help

Can't get Python to work with TLS Interception, always UnknownIssuer

thx, I will do that. Could you mention that as breaking change, once you remove it?

28 replies

WWindmill

•Created by huschplay on 1/24/2025 in #help

Can't get Python to work with TLS Interception, always UnknownIssuer

got it, I also had to add USE_PIP_INSTALL

28 replies

WWindmill

•Created by huschplay on 1/24/2025 in #help

Can't get Python to work with TLS Interception, always UnknownIssuer

resolving dependencies...
content of requirements:
wmill

Fallback to pip-compile (Deprecated!)

--- UV PIP INSTALL ---

To be installed: 

anyio==4.8.0 
certifi==2024.12.14 
h11==0.14.0 
httpcore==1.0.7 
httpx==0.28.1 
idna==3.10 
sniffio==1.3.1 
typing-extensions==4.12.2 
wmill==1.448.1 

Starting installation... (20 tasks in parallel) 

Error while installing wmill==1.448.1:
Using CPython 3.11.10 interpreter at: /usr/local/bin/python
error: Failed to fetch: `https://pypi.org/simple/wmill/`
  Caused by: Request failed after 3 retries
  Caused by: error sending request for url (https://pypi.org/simple/wmill/)
  Caused by: client error (Connect)
  Caused by: invalid peer certificate: UnknownIssuer

resolving dependencies...
content of requirements:
wmill

Fallback to pip-compile (Deprecated!)

--- UV PIP INSTALL ---

To be installed: 

anyio==4.8.0 
certifi==2024.12.14 
h11==0.14.0 
httpcore==1.0.7 
httpx==0.28.1 
idna==3.10 
sniffio==1.3.1 
typing-extensions==4.12.2 
wmill==1.448.1 

Starting installation... (20 tasks in parallel) 

Error while installing wmill==1.448.1:
Using CPython 3.11.10 interpreter at: /usr/local/bin/python
error: Failed to fetch: `https://pypi.org/simple/wmill/`
  Caused by: Request failed after 3 retries
  Caused by: error sending request for url (https://pypi.org/simple/wmill/)
  Caused by: client error (Connect)
  Caused by: invalid peer certificate: UnknownIssuer

for new scripts it does attempt to fallback to pip but looks like it is still using uv anyway

28 replies

WWindmill

•Created by huschplay on 1/24/2025 in #help

Can't get Python to work with TLS Interception, always UnknownIssuer

I can understand that, but still, that would be rather unfortunate for ce users without any other workaround. Should USE_PIP_COMPILE be set as env and than just work? Or is there some clean up todo as the uv lock file is already present in the PostgreSQL (that is how I understand it from a brief look at the code)

28 replies

WWindmill

•Created by huschplay on 1/24/2025 in #help

Can't get Python to work with TLS Interception, always UnknownIssuer

is USE_PIP_COMPILE=true available for ce users? https://github.com/windmill-labs/windmill/blob/e47dd697f96883f8f97bf469e69d3344f12d9633/backend/windmill-worker/src/python_executor.rs#L469 and whould it help in this case?

28 replies

WWindmill

•Created by huschplay on 1/24/2025 in #help

Can't get Python to work with TLS Interception, always UnknownIssuer

all right, the confirmation that this is releated to the update is already some kind of help, thx.

28 replies

WWindmill

•Created by huschplay on 1/24/2025 in #help

Can't get Python to work with TLS Interception, always UnknownIssuer

I am not 😦

28 replies