SSL certificates error on CNES server

Hello,

I'm trying to use simplestac on CNES HPC TREX but I got this following SSL certificate error while trying to build a local stac collection.

pystac.validation.stac_validator.GetSchemaError: Error when fetching schema https://stac-extensions.github.io/eo/v1.1.0/schema.json: <urlopen error [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: unable to get local issuer certificate (_ssl.c:1028)>

Full Traceback

` Traceback (most recent call last): File "/home/eh/guebing/Documents/old_stac/gpt_pystac_simpletac.py", line 170, in main() ~~~~^^ File "/home/eh/guebing/Documents/old_stac/gpt_pystac_simpletac.py", line 122, in main coll = build_local_stac(data_dir / "s2_scenes", collection_path) File "/home/eh/guebing/Documents/old_stac/gpt_pystac_simpletac.py", line 52, in build_local_stac coll = build_item_collection(image_dir, collection_format("S2_L2A_THEIA")) File "/work/scratch/env/guebing/.conda/envs/simplestac/lib/python3.13/site-packages/simplestac/local.py", line 729, in build_item_collection item_creator.create_item(item, validate=validate) ~~~~~~~~~~~~~~~~~~~~~~~~^^^^^^^^^^^^^^^^^^^^^^^^^ File "/work/scratch/env/guebing/.conda/envs/simplestac/lib/python3.13/site-packages/simplestac/local.py", line 644, in create_item item.validate() ~~~~~~~~~~~~~^^ File "/work/scratch/env/guebing/.conda/envs/simplestac/lib/python3.13/site-packages/pystac/stac_object.py", line 83, in validate return pystac.validation.validate(self, validator=validator) ~~~~~~~~~~~~~~~~~~~~~~~~~~^^^^^^^^^^^^^^^^^^^^^^^^^^^ File "/work/scratch/env/guebing/.conda/envs/simplestac/lib/python3.13/site-packages/pystac/validation/__init__.py", line 43, in validate return validate_dict( stac_dict=stac_object.to_dict(), ...<4 lines>... validator=validator, ) File "/work/scratch/env/guebing/.conda/envs/simplestac/lib/python3.13/site-packages/pystac/validation/__init__.py", line 121, in validate_dict return validator.validate( ~~~~~~~~~~~~~~~~~~^ stac_dict, stac_object_type, stac_version, extensions, href ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ ) ^ File "/work/scratch/env/guebing/.conda/envs/simplestac/lib/python3.13/site-packages/pystac/validation/stac_validator.py", line 123, in validate ext_result = self.validate_extension( json_dict, stac_object_type, stac_version, extension_id, href ) File "/work/scratch/env/guebing/.conda/envs/simplestac/lib/python3.13/site-packages/pystac/validation/stac_validator.py", line 301, in validate_extension self._validate_from_uri(stac_dict, stac_object_type, schema_uri, href) ~~~~~~~~~~~~~~~~~~~~~~~^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ File "/work/scratch/env/guebing/.conda/envs/simplestac/lib/python3.13/site-packages/pystac/validation/stac_validator.py", line 200, in _validate_from_uri schema = self._get_schema(schema_uri) File "/work/scratch/env/guebing/.conda/envs/simplestac/lib/python3.13/site-packages/pystac/validation/stac_validator.py", line 168, in _get_schema raise GetSchemaError(schema_uri, error) from error pystac.validation.stac_validator.GetSchemaError: Error when fetching schema https://stac-extensions.github.io/eo/v1.1.0/schema.json: `

A solution I found is to add these two lines of code :

import ssl
ssl._create_default_https_context = ssl._create_unverified_context

But it could introduce huge security concerns (according to this stackoverflow question).

As I did not find any related issue on pystac, I'm wondering if you had had the same troubles working on your servers in Montpellier and if yes, what was your solution ?

Thanks in advance for your help.

Guillaume