search cancel

Python library installation command 'pip' is not working with WSS

book

Article ID: 229183

calendar_today

Updated On:

Products

Web Security Service - WSS

Issue/Introduction

Python library installation command 'pip' is not working with WSS

OR

pip.exe install <package name>   is failing with WSS.

Cause

Package Installer for Python(PIP) checks certificate for "pypi.python.org" and "files.pythonhosted.org".

With WSS intercepting those destinations the certificate check done by pip will fail.

Environment

WSS TLS interception

Package Installer for Python(PIP)

Resolution

In order to not use certificate pinning you can use the command instead of the default pip command:

pip.exe install --trusted-host pypi.org --trusted-host pypi.python.org --trusted-host files.pythonhosted.org   <package name>

Alternatively, you can add these domains in SSL/TLS interception bypass:

  • pypi.python.org
  • files.pythonhosted.org