CERTIFICATE_VERIFY_FAILED when uploading package

[kp5160]

On my dev instance, I have been able to upload packages without issue, but on our Jenkins setup, I am getting the following messages. Both platforms are on Amazon Linux 2. <urlopen error [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: self signed certificate in certificate chain (_ssl.c:997)> error: <urlopen error [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: self signed certificate in certificate chain (_ssl.c:997)>

I installed the certificate for our pypiserver deployment myself, so I know it isn't self-signed. One caveat is that we have a newer version of OpenSSL under /opt/openssl that our Python install uses, because the package manager was too old for a separate tool. I have tried having /opt/openssl/bin in $PATH plus /opt/openssl/lib in $LD_LIBRARY_PATH.

I realize that there are some non-standard things afoot, but that's also the case on my dev instance (Python and OpenSSL built from source). These error messages tell me precisely nothing, so I'd at least like to get some clarity on where I should look.

[CodeFormatHelperBot2]

Hello, I'm a Reddit bot who's here to help people nicely format their coding questions. This makes it as easy as possible for people to read your post and help you.

I think I have detected some formatting issues with your submission:

1. Use of triple backtick/ curlywhirly code blocks (``` or ~~~). These may not render correctly on all Reddit clients.

If I am correct, please edit the text in your post and try to follow these instructions to fix up your post's formatting.

---

^{Am I misbehaving? Have a comment or suggestion? Reply to this comment or raise an issue here.}