Disabling SSL verification — conda 24.7.2.dev83 documentation (2024)

Using conda with SSL is strongly recommended, but it is possible to disable SSLand it may be necessary to disable SSL in certain cases.

Some corporate environments use proxy services that use Man-In-The-Middle(MITM) attacks to sniff encrypted traffic. These services can interfere withSSL connections such as those used by conda and pip to download packages fromrepositories such as PyPI.

If you encounter this interference, you should set up the proxy service'scertificates so that the requests package used by conda can recognize anduse the certificates.

For cases where this is not possible, conda-build versions 3.0.31 and higherhave an option that disables SSL certificate verification and allows thistraffic to continue.

conda skeleton pypi can disable SSL verification when pulling packagesfrom a PyPI server over HTTPS.

To disable SSL verification when using conda skeleton pypi, set theSSL_NO_VERIFY environment variable to either 1 or True (caseinsensitive).

On *nix systems:

SSL_NO_VERIFY=1 conda skeleton pypi a_package

And on Windows systems:

set SSL_NO_VERIFY=1conda skeleton pypi a_packageset SSL_NO_VERIFY=

We recommend that you unset this environment variable immediately after use.If it is not unset, some other tools may recognize it and incorrectly useunverified SSL connections.

Using this option will cause requests to emit warnings to STDERR aboutinsecure settings. If you know that what you're doing is safe, or have beenadvised by your IT department that what you're doing is safe, you may ignorethese warnings.

In addition to disabling SSL via environment variables, you can disable it by setting ssl_verify to false in your config files. To do so, run the following commands to disable and enable it:

conda config --set ssl_verify False# Run conda commands with SSL disabledconda config --set ssl_verify True