Hi, I'm having a certificate problem with "youtube-dl" no matter what url I want to retrieve, I don't know where to look, so I'm talking to you because I'm not used to KaOS that I've only been experimenting with for a week.

here's the message:
"youtube-dl https://www.youtube.com/watch?v=kXYZup_mY-w
[youtube] kXYZup_mY-w: Downloading webpage
ERROR: Unable to download webpage: <urlopen error [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (ssl.c:726)> (caused by URLError(SSLError(1, u'[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (ssl.c:726)'),))"

If someone could enlighten me, thank him.

I don't know what is causing it, but I have had the same problem for a while.
Adding the --no-check-certificate option to your command circumvents it,
but I would really like to know if it's a problem with youtube-dl or the certificates on KaOS.

It seems that it comes from KaOS because I don't have this problem with Manjaro, thanks for the answer, I'll try your solution until better.

Not clear if this is a python only issue.
Using curl, ca-certificates shows no error for the above url, you can check yourself:

curl -v "https://www.youtube.com/watch?v=kXYZup_mY-w" > /dev/null

When doing the same with python, ca-certificate error shows, you can test with this script (to run it, save it as test.py and make it executable with `chmod +x')

#!/usr/bin/env python3
# -*- coding: utf-8 -*-

import urllib.request

url = "https://www.youtube.com/watch?v=kXYZup_mY-w"
urllib.request.urlopen(url)

(for the record, KaOS has nothing in common with Arch based distros, so this issue cannot be compared, toolchain, filesystem have a complete different setup, all is build here with openssl 1.0, ca-certificates are Debian based and so on).

    demm Thanks, but I don't really understand what you mean. I'm not very comfortable with the command line, and besides, English and me bah... :-(

      Looks like it is ca-certificates, please test with the previous version:

      sudo pacman -U https://sourceforge.net/projects/kaosx/files/packages/ca-certificates-20170717-1-x86_64.pkg.tar.xz

      Downgrading seems to fix an error message regarding the validation of servers in SABnzbd (which is written in Python) too.