SSLError(SSLCertVerificationError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: self-signed certificate in certificate chain (_ssl.c:1033)')

[wikijm]

Issue:

When clicking on "Help > About" men (https://deephunter.domain.tld/qm/about/), error message below appears:

Django: HTTPSConnectionPool(host='api.github.com', port=443): Max retries exceeded with url: /repos/sebastiendamaye/deephunter/commits?sha=main&per_page=100 (Caused by SSLError(SSLCertVerificationError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: self-signed certificate in certificate chain (_ssl.c:1033)')))

Explanation:

It looks like your Django code (ultimately requests/urllib3) is calling https://api.github.com/ and the TLS handshake is being intercepted by a proxy that re‑signs the certificate with a corporate (self-signed/private) root CA that Python doesn’t trust.
Python’s ssl + requests trust the Certifi CA bundle by default (not your OS store on most platforms).
Your network proxy presents a certificate chain that includes a corporate root/intermediate CA not in Certifi.
Verification fails because that CA is untrusted in the Python trust store.

[wikijm]

Potential solution:

Use the OS trust store from Python (truststore)
If your OS already trusts the corporate CA (Windows cert store / macOS Keychain / Linux system store), let Python/requests use it:
pip install truststore

Then, at app startup (wsgi.py and asgi.py):

# Inject OS trust store into Python's ssl before any HTTPS connections
try:
    import truststore
    truststore.inject_into_ssl()
except Exception:
    # Optionally log; don’t fail startup just for this
    pass

[wikijm]

To verify the fix:

python - <<'PY'
import requests
u="https://api.github.com/repos/sebastiendamaye/deephunter/commits"
print(requests.get(u, params={"sha":"main","per_page":"100"}, timeout=30).json()[:1])
PY

You should get HTTP 200 and valid JSON.