`make dependencies` fails with Python `SSL: CERTIFICATE_VERIFY_FAILED` error

[sharplet]

• I have searched open and closed issues for duplicates
• I am submitting a bug report for existing functionality that does not work as intended
• This isn't a feature request or a discussion topic

---

Bug description

After cloning the repository and following the steps in BUILDING.md, I encounted the Python error SSL: CERTIFICATE_VERIFY_FAILED when running the make dependencies step.

I've opened a PR with a proposed fix here: signalapp/Signal-Pods#9

Steps to reproduce

• Open a shell environment where only the system python3 is available
• Clone the repository following the steps in BUILDING.md
• Run make dependencies

Actual result: Setting up dependencies fails with a Python 3 exception.

Expected result: Expected dependencies to be set up.

Screenshots

N/A

Device info

macOS version: 14.3.1
Python version: 3.11.4
Signal version: Signal-iOS @ 75b1b04

Link to debug log

N/A

[Fireroman]

Same here

[igormagurean]

As easy as that

[stale]

This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Thank you for your contributions.

[stale]

This issue has been closed due to inactivity.

[jaycex]

Encounter this problem again. While running make dependencies after clone the repo, got following error.
downloading webrtc-7204a-ios-release.tar.bz2...
...
...
urllib.error.URLError: <urlopen error [SSL] record layer failure (_ssl.c:1028)>

And I tried to visit https://build-artifacts.signal.org/libraries/webrtc-7204a-ios-release.tar.bz2 in chrome, got this error:

Is there something wrong with the build-artifacts.signal.org server ?

[max-signal]

I think this is happening because Python can’t find any certificates to validate the connection. These StackOverflow posts have some more details and potential mitigation steps:

• https://stackoverflow.com/questions/77442172/ssl-certificate-verify-failed-certificate-verify-failed-unable-to-get-local-is
• https://stackoverflow.com/questions/27835619/urllib-and-ssl-certificate-verify-failed-error

[jaycex]

But I can not download it(https://build-artifacts.signal.org/libraries/webrtc-7204a-ios-release.tar.bz2) via my browser.
And there is someone else facing the same problem as I do.
https://community.signalusers.org/t/signal-ios-download-webrtc-failed/70496