# Max retries exceeded with url: /pmc/documents.json.bz2 SSLCertVerificationError \[SSL: CERTIFICATE\_VERIFY\_FAILED\] **URL:** \ **Category:** Elasticsearch\ **Tags:** rally\ **Created:** [June 11, 2023, 5:24am UTC](https://discuss.elastic.co/t/max-retries-exceeded-with-url-pmc-documents-json-bz2-sslcertverificationerror-ssl-certificate-verify-failed/335708 "2023-06-11T05:24:44Z")\ **Posts on this page:** 1\ **Showing post:** 8
**Author:** ![Swathi\_Kakumanu](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/swathi_kakumanu/32/117764_2.png) [@Swathi\_Kakumanu](https://discuss.elastic.co/u/Swathi_Kakumanu)\ **Post date:** [July 5, 2023, 3:51pm UTC](https://discuss.elastic.co/t/max-retries-exceeded-with-url-pmc-documents-json-bz2-sslcertverificationerror-ssl-certificate-verify-failed/335708/8 "2023-07-05T15:51:39Z")
Hi @Quentin_Pradet , as a workaround for online execution, I did the below changes. 1st Step : Updating the cacerts ```auto sudo cp ca.crt /usr/local/share/ca-certificates sudo cp /home/administrator/.local/lib/python3.8/site-packages/certifi/cacert.pem /usr/local/share/ca-certificates sudo update-ca-certificates ``` which will update the '/etc/ssl/certs/ca-certificates.crt' 2nd Step: Replacing the default certifi file with the updated one: - Verify certifi.where() path, in my case it is /home/administrator/.local/lib/python3.8/site-packages/certifi/cacert.pem - Take a backup of this file just for reference - Copy the file /etc/ssl/certs/ca-certificates.crt as cacert.pem and replace in the path /home/administrator/.local/lib/python3.8/site-packages/certifi/ > So that certifi will find this certificate which has external access now. Basically replacing the default file. With these steps I was able to execute online mode. Just sharing it here so that it can help others. --- _[View the full topic](https://discuss.elastic.co/t/max-retries-exceeded-with-url-pmc-documents-json-bz2-sslcertverificationerror-ssl-certificate-verify-failed/335708)._