Problem with SSL authentication

[daudi-msafiri]

Hello,
I am on a Mac OS Sequoia 15.1 currently using 3.40.4 of QGIS and have been using QGIS Resource Sharing for about 3 years to get access to R scripts. I am currently using version 1.2 of the plug-in, but updated to 1.3 when I experienced a problem, but it did not change the error message. When trying to install resources, I get the following message:

Error: HTTPSConnectionPool(host='github.com', port=443): Max retries exceeded with url: /qgis/QGIS-Resources.git/info/refs?service=git-upload-pack (Caused by SSLError(SSLError("bad handshake: Error([('SSL routines', 'tls_process_server_certificate', 'certificate verify failed')])")))

I tested this on another Mac and it is having the same issue. However, I switched to a PC that is managed by my university, and it is not having an authentication issue. I have manually updated the Python security certificates in QGIS, so I do not think the problem is on my end, but is something specific with the way QGIS Resource Sharing is interacting with Mac OSs. Is anyone else having this issue?

[daudi-msafiri]

One of my students seems to have found a work-around that doesn't work for me, but is working on some of my students' Macs. In Terminal, you can enter:
git config --global http.sslVerify false

That ended the "handshake" error for me, but I got another error only for the QGIS R Script collections (my student did not have this error message):

Regardless, if this hack works for some users, you will probably want to reset your security settings after downloading the scripts:
git config --global http.sslVerify true

Then, to check if the security settings are active:
git config --global --get http.sslVerify

This is not a solution, though, and if anyone has a more permanent solution to the issue, I would greatly appreciate the insight!

[HamishB]

Hi, same problem here on a Mac. The work-around works, but isn't very satisfactory.

see also
https://stackoverflow.com/questions/75913891/httpsconnectionpool-max-retries-exceeded-with-url-caused-by-sslerror

"If you add verify=False to your requests.get() call and the error went away, it is likely that the SSL certificate issued by the server is not trusted on your client. To fix this, you can either use a trusted certificate from a recognized certificate authority on the API end, or add the certificate authority from your API to your client. if the error stay, try these commands to update your certifi libs"

Updating Xcode (and so /usr/bin/git) to the latest version did not help.

.
greets from FOSS4G 2025.