[GRASS-user] Addons - r.surf.nnbathy

[Markus Neteler]

Hi Jon,

On Sat, Nov 25, 2017 at 6:48 PM, Jon <jeir at hi.is> wrote:
> Dear user list.
>
> Having installed GRASS 7.2.2 via MacPorts (MacOSX 10.11.6), as well as
> nnbathy, I wanted to use the Addons r.surf.nnbathy/v.surf.nnbathy. I have
> successfully installed these Addons with g.extension on other machines,
> where I have Michael Barton’s binary working, as well as on an Ubuntu
> machine. No luck with the MacPorts installation. The session with Error
> Messages is listed below. Anyone have a clue?
>
> GRASS 7.2.2 (nc_spm_08_grass7):~ > g.extension extension=r.surf.nnbathy
> Fetching <r.surf.nnbathy> from GRASS GIS Addons repository (be patient)...
> Traceback (most recent call last):
> File "/opt/local/share/grass-7.2.2/scripts/g.extension", line 1733, in
> <module>
> sys.exit(main())
> File "/opt/local/share/grass-7.2.2/scripts/g.extension", line 1712, in main
> install_extension(source=source, url=url, xmlurl=xmlurl)
> File "/opt/local/share/grass-7.2.2/scripts/g.extension", line 683, in
> install_extension
> source=source, url=url)
> File "/opt/local/share/grass-7.2.2/scripts/g.extension", line 1146, in
> install_extension_std_platforms
> outdev=outdev, directory=srcdir, tmpdir=TMPDIR)
> File "/opt/local/share/grass-7.2.2/scripts/g.extension", line 1094, in
> download_source_code
> f, h = urlretrieve(url, zip_name)
> File
> "/opt/local/Library/Frameworks/Python.framework/Versions/2.7/lib/python2.7/urllib.py",
> line 98, in urlretrieve
> return opener.retrieve(url, filename, reporthook, data)
[...]
> "/opt/local/Library/Frameworks/Python.framework/Versions/2.7/lib/python2.7/ssl.py",
> line 611, in __init_
> self.do_handshake()
> File
> "/opt/local/Library/Frameworks/Python.framework/Versions/2.7/lib/python2.7/ssl.py",
> line 840, in do_handshake
> self._sslobj.do_handshake()
> IOError: [Errno socket error] [SSL: CERTIFICATE_VERIFY_FAILED] certificate
> verify failed (_ssl.c:661)

g.extension fetches source code from trac.osgeo.org.

Making a test:
https://www.ssllabs.com/ssltest/analyze.html?d=trac.osgeo.org&latest

"The server supports only older protocols, but not the current best
TLS 1.2. Grade capped to C."

This is a known issue. Being in OSGeo-SAC I'll try to increase the
priority to get that updated.
A related ticket is in the works for a while at
https://trac.osgeo.org/osgeo/ticket/1633

I'm not sure how you could tell your ssl version to accept the current
certificate, anyone else in the list?

Markus