使用pip安装python软件包时出错（TLSV1_ALERT_PROTOCOL_VERSION）

Question

我在Suse Linux Enterprise 11 SP4上，并尝试使用pip安装python软件包，但失败并出现以下错误：

信封：

$ python --version
Python 3.6.6

$ pip --version
pip 10.0.1 from /home/<<user>>/.pyenv/versions/3.6.6/lib/python3.6/site-packages/pip (python 3.6)

命令：

$ pip install sendgrid

错误：

Collecting sendgrid
  Retrying (Retry(total=4, connect=None, read=None, redirect=None, status=None)) after connection broken by 'SSLError(SSLError(1, '[SSL: TLSV1_ALERT_PROTOCOL_VERSION] tlsv1 alert protocol version (_ssl.c:841)'),)': /simple/sendgrid/
...
...
  Could not fetch URL https://pypi.org/simple/sendgrid/: There was a problem confirming the ssl certificate: HTTPSConnectionPool(host='pypi.org', port=443): Max retries exceeded with url: /simple/sendgrid/ (Caused by SSLError(SSLError(1, '[SSL: TLSV1_ALERT_PROTOCOL_VERSION] tlsv1 alert protocol version (_ssl.c:841)'),)) - skipping
  Could not find a version that satisfies the requirement sendgrid (from versions: )
No matching distribution found for sendgrid
Could not fetch URL https://pypi.org/simple/pip/: There was a problem confirming the ssl certificate: HTTPSConnectionPool(host='pypi.org', port=443): Max retries exceeded with url: /simple/pip/ (Caused by SSLError(SSLError(1, '[SSL: TLSV1_ALERT_PROTOCOL_VERSION] tlsv1 alert protocol version (_ssl.c:841)'),)) - skipping

我已经尝试了所有这些解决方案，但是没有一个在SLES上起作用。

有任何想法吗？

提前致谢

Answer 1

您可以通过将pypi.org和files.pythonhosted.org设置为可信主机来忽略SSL错误。

pip install --trusted-host pypi.org --trusted-host files.pythonhosted.org <package_name>

要么：

尝试使用包装箱的轮子进行安装

Answer 2

终于，我开始工作了！

似乎默认在SLES 11 SP4上安装的openssl库（ libopenssl-devel ）确实过时了（ OpenSSL 0.9.8 ）

要验证这一点，您可以运行：

$ python -c "import ssl; print(ssl.OPENSSL_VERSION)"
OpenSSL 0.9.8j-fips 07 Jan 2009

诀窍是卸载 libopenssl-devel并安装 libopenssl1-devel如下所示：

重要提示：请注意，系统会要求您选择一个选项，请选择卸载libopenssl-devel-0.9.xx.xxx.xxx

$ sudo zypper install libopenssl1-devel

Loading repository data...
Reading installed packages...
Resolving package dependencies...

Problem: libopenssl1-devel-1.0.1g-0.58.9.1.x86_64 conflicts with libopenssl-devel < 1.0.1 provided by libopenssl-devel-0.9.8j-0.106.9.1.x86_64
 Solution 1: deinstallation of libopenssl-devel-0.9.8j-0.106.9.1.x86_64
 Solution 2: do not install libopenssl1-devel-1.0.1g-0.58.9.1.x86_64

Choose from above solutions by number or cancel [1/2/c] (c): 1
Resolving dependencies...
Resolving package dependencies...

The following NEW package is going to be installed:
  libopenssl1-devel 

The following package is going to be REMOVED:
  libopenssl-devel 

1 new package to install, 1 to remove.
Overall download size: 3.3 MiB. After the operation, 698.0 KiB will be freed.
Continue? [y/n/? shows all options] (y): 
Retrieving package libopenssl1-devel-1.0.1g-0.58.9.1.x86_64 (1/1), 3.3 MiB (19.6 MiB unpacked)
Retrieving: libopenssl1-devel-1.0.1g-0.58.9.1.x86_64.rpm [done]
Removing libopenssl-devel-0.9.8j-0.106.9.1 [done]
Installing: libopenssl1-devel-1.0.1g-0.58.9.1 [done]

现在继续使用以下命令重新编译/重新安装您的python env：

$ CFLAGS=-I/usr/include/openssl1 LDFLAGS=-L/usr/lib64 pyenv install 3.6.6

最后，确认您的OpenSSL版本是新版本，然后继续使用pip安装软件包：

$ python -c "import ssl; print(ssl.OPENSSL_VERSION)"
OpenSSL 1.0.1g 7 Apr 2014

$ pip install sendgrid

希望对您有帮助！

有关更多信息，请参见“ SUSE Linux Enterprise 11中的安全模块” 。