[ferret_users] TLS SSL Error

To: ferret_users@xxxxxxxx

Subject: [ferret_users] TLS SSL Error

From: Russell Price - NOAA Federal <russell.price@xxxxxxxx>

Date: Wed, 23 Feb 2022 10:49:42 -1000

Arc-authentication-results: i=2; mx.google.com; dkim=pass header.i=@noaa.gov header.s=google header.b=HfXyVqxD; spf=pass (google.com: domain of russell.price@xxxxxxxx designates 209.85.220.41 as permitted sender) smtp.mailfrom=russell.price@xxxxxxxx; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=noaa.gov

Arc-authentication-results: i=1; mx.google.com; dkim=pass header.i=@noaa.gov header.s=google header.b=HfXyVqxD; spf=pass (google.com: domain of russell.price@xxxxxxxx designates 209.85.220.41 as permitted sender) smtp.mailfrom=russell.price@xxxxxxxx; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=noaa.gov

Arc-message-signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=list-archive:list-help:list-post:list-id:mailing-list:precedence:to :subject:message-id:date:from:mime-version:dkim-signature; bh=vDLnlK5s3x4uNEcOwfBR1u+t7b6X5Zwh7I2Z0hdG4uM=; b=Gs0dRCq0UqyIYgj8ismb2vwy7K1EU1ooCa4luxX4NTRrVmmijsm706UsURKklww3tA ymZMNx0OJF9Fms15e8AQSw4nK1RU4QRyhT5hh4CH2nj57szE2yAqHhXgeIVreAJOa5pG 0/cIKSeVVa3COgU3G/v6xnzX3mbeup3VkZi6HyNOSKIIJyi3GRdvUUt6UMc3eunadYhE Uhb7WhgaZ7Ya/U5A4tGtpm6CqRcYALYEyYkxlqxPSIn/bm0jPJwUv1f4fH1x2e3ofq2V ulh/svrfXBGNotAJbFjYjV7u9eaWlZgp3W66ev0mKviWVNRmMwBvJOfrq3M39hIhtaFt 4gAw==

Arc-message-signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=to:subject:message-id:date:from:mime-version:dkim-signature; bh=vDLnlK5s3x4uNEcOwfBR1u+t7b6X5Zwh7I2Z0hdG4uM=; b=XSu0DDz19LZWOoVjqpdkb3c2Pys3an50dP2tWvUNPBGSUgSYDdpzGluY8wDQGREGVR jVXyT1ICd9d9wi7XfKvu58BCBSjfQxeR4nhx6iewXtmw81qYtdpnEOafT+EPOQFeqd2h hkhB3MN++IlbKaeHoMzrOIR4UrU6SbLkvjjRz2X0le5UKpcHS+HBOmNml3wE+V6KD7gd nZTThA3Vq+3G3gzTCMVZcBBAMOcGYgEDEMVrGbyM9VDD7y6xdsjgDiFh5jsjajmf07no NqusBEISYBcttXVyEj5+NFhGtl+us5Xo0cOkQdV7iqEgx2F7xEOnrKdNmtnyqgwyXMB5 YZVw==

Arc-seal: i=2; a=rsa-sha256; t=1645649399; cv=pass; d=google.com; s=arc-20160816; b=tZ6d38YIfRPRXnLQ+HBX2ZGUtPsRelh4ZMvSUFe3j/dCA53chk4wPHcH/JuhbLfyde C8fDVudjfrdsMowtLAcTwsQVq8uJ0jEKw/anAgQuDsf5Uy0AUpQK1c7T3ehiURB/n530 DpKHJAPGar5Cp3Xy6+RWATehI9BGranq0siMbs/3Ms0VURDvAa+L9Gw0g4YtCoVzWTXD EvPQAFW/ZdPZXOH4zxWqD8M+rCePk4F2NdbBU2Olv1/yp/9rOOo0+xn6pl+ou7MfOCW+ MvjdqnAlteV4eh3TrrEibRWe/vFnMn8q4wJW0TE+37vFCmcOsjEe7ATXgXGnN3LiKS2F X40g==

Arc-seal: i=1; a=rsa-sha256; t=1645649395; cv=none; d=google.com; s=arc-20160816; b=ncaXBUUDixBK8Yd3grSjaV0fXot11yI6+29C6c8d18EQcuaCc0dnaxr/rAu3uWnmkx GqPWwJfDbqiYNFo6J3ONKE4mury4ZnI4CKOZzo+3hLirkyg4+24jDWi1kYzpgOhwx4jM IpDaz2zSOjMZ+QLO8o1va2QetDJMwwbpoE7jeCOJONzsEZI5J8ro3Q2GusvZ3ShXjR4a dUTiW/fcga1QA7ShTX8EMWTCGDTVeCmByIjo4mm4jC+hxgr4NyGDX0K3sum7tb0nKJld dwjiJxBuoL7D6oMeX9Rixv4dMF7OF2NtAtTAELn9DiFPOsYz24MoF/5z9GG2Px5bF3tT A1Ng==

Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=noaa.gov; s=google; h=mime-version:from:date:message-id:subject:to:x-original-sender :x-original-authentication-results:precedence:mailing-list:list-id :list-post:list-help:list-archive; bh=vDLnlK5s3x4uNEcOwfBR1u+t7b6X5Zwh7I2Z0hdG4uM=; b=lHgFLsO8Yh+Ce/a6TNElVxenqm0k9G8yaPEhhEGYkQHbHuvF0w5Y2OXjIAn0OS2L3L 03AwHf7uDtswJPP78Gr1hCV+pDRF8Sof1zdxCepHhmiMihNayxZll4fWHK4rmXKSQXXs 23MQHpgJGkXgtNug5akWSK8mvU8dqSOthRv/Mp0CkCHTjOyTl3QOWMu0rJB7oUfEzY03 PGD8U35lx6riAblOQEfGbQE9vdfwN6TK5+OSy7oC191ZTAsdfJjc60uIzADjyporzNSD mgG5DSsSN/nl3sCgMQQ4pm60i/CMaHT3muLYyQQDs8Ye9l3iRTwyOFgFnG0dH1pTU7KK z9Vw==

List-archive: <https://groups.google.com/a/noaa.gov/group/ferret_users/>

List-help: <https://support.google.com/a/noaa.gov/bin/topic.py?topic=25838>, <mailto:ferret_users+help@noaa.gov>

List-id: <ferret_users.noaa.gov>

List-post: <https://groups.google.com/a/noaa.gov/group/ferret_users/post>, <mailto:ferret_users@noaa.gov>

Mailing-list: list ferret_users@xxxxxxxx; contact ferret_users+owners@xxxxxxxx

Sender: owner-ferret_users@xxxxxxxx

Hello,

Workstation system details: Redhat Linux 8.5 / kernel 4.18.0-348.12.2.el8_5.x86_64 / Python 3.9 / PyFerret 7.6.4

In attempting to access the following data set:

https://oceanwatch.pifsc.noaa.gov/erddap/griddap/CRW_sst_v3_1_monthly

I get the following error:

Error:curl error: SSL peer certificate or SSH remote key was not OK
curl error details:
Warning:oc_open: Could not read url
**netCDF error
NetCDF: I/O failure (OPeNDAP/netCDF Error code -68)
Data set: https://oceanwatch.pifsc.noaa.gov/erddap/griddap/CRW_sst_v3_1_monthly

I've verified that the host site has the certificate and certificate chain installed correctly, and the cert is not out-of-date or blacklisted.

I can access the site fine with FireFox, Google Chrome, and Microsoft Explorer and Edge.

An older version of Ferret (7.5, running on CentOS 7.9 kernel 3.10.0-1160.53.1.el7.x86_64). doesn't have any issues with the site.

Can anyone provide guidance on what is going wrong here, and how to fix it? Or get around it....

Thank you,

Russell

Russell Price, UNIX Systems Administrator

Pacific Islands Fisheries Science Center

Information Technology Services, 3rd Floor, IRC

6AM-3:30PM M-Th; 6AM-2:30PM Fri / Out on Alt. Fri.

808-725-5312