Python2.7 TransportError: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:581) #3498

Activity

1. dhermes

   added

   api: core

   on Jun 13, 2017
2. dhermes commented on Jun 13, 2017

   

   dhermes

   on Jun 13, 2017

   Contributor

   More actions

   @japonikaa Thanks for filing. This is something we've seen with shared state across threads in httplib2, but it appears the underlying code is using requests, so it seems to be different.
3. theacodes commented on Jun 13, 2017

   

   theacodes

   on Jun 13, 2017

   Contributor

   More actions

   @japonikaa try installing request's security extra pip install requests[security]. On older Python versions, the ssl module can't verify SNI certificates. Did you get an InsecurePlatformWarning at all?

   👍React with 👍1Reacted by Jun Makii
4. j2p0 commented on Jun 14, 2017

   

   j2p0

   on Jun 14, 2017

   Last edited by dhermes

   Author

   More actions

   @dhermes ,@jonparrott thanks for your advise .
   but after install requests[security], i got others error below

   i have confused because python2 run fine before Error: [SSL: CERTIFICATE_VERIFY_FAILED],but now i decided to using python3 and solved my problem.

   just wonder what wrong with python2.

   thanks all.

   ---

   E0614 14:54:59.432905077    5196 plugin_credentials.c:74]    Getting metadata from plugin failed with error: Traceback (most recent call last):
     File "src/python/grpcio/grpc/_cython/_cygrpc/credentials.pyx.pxi", line 154, in grpc._cython.cygrpc.plugin_get_metadata (src/python/grpcio/grpc/_cython/cygrpc.c:6996)
     File "/home/leth/Workspace/Python/python2/google-cloud-vision/lib/python2.7/site-packages/grpc/_plugin_wrapping.py", line 106, in __call__
       AuthMetadataPluginCallback(wrapped_cygrpc_callback))
     File "/home/leth/Workspace/Python/python2/google-cloud-vision/lib/python2.7/site-packages/google/auth/transport/grpc.py", line 73, in __call__
       callback(self._get_authorization_headers(context), None)
     File "/home/leth/Workspace/Python/python2/google-cloud-vision/lib/python2.7/site-packages/google/auth/transport/grpc.py", line 61, in _get_authorization_headers
       headers)
     File "/home/leth/Workspace/Python/python2/google-cloud-vision/lib/python2.7/site-packages/google/auth/credentials.py", line 121, in before_request
       self.refresh(request)
     File "/home/leth/Workspace/Python/python2/google-cloud-vision/lib/python2.7/site-packages/google/oauth2/credentials.py", line 126, in refresh
       self._client_secret))
     File "/home/leth/Workspace/Python/python2/google-cloud-vision/lib/python2.7/site-packages/google/oauth2/_client.py", line 189, in refresh_grant
       response_data = _token_endpoint_request(request, token_uri, body)
     File "/home/leth/Workspace/Python/python2/google-cloud-vision/lib/python2.7/site-packages/google/oauth2/_client.py", line 104, in _token_endpoint_request
       method='POST', url=token_uri, headers=headers, body=body)
     File "/home/leth/Workspace/Python/python2/google-cloud-vision/lib/python2.7/site-packages/google/auth/transport/requests.py", line 115, in __call__
       raise exceptions.TransportError(exc)
   TransportError: ("bad handshake: Error([('SSL routines', 'SSL3_GET_SERVER_CERTIFICATE', 'certificate verify failed')],)",)
   
   Traceback (most recent call last):
     File "quickstart.py", line 50, in <module>
       run_quickstart()
     File "quickstart.py", line 41, in run_quickstart
       labels = image.detect_labels()
     File "/home/leth/Workspace/Python/python2/google-cloud-vision/lib/python2.7/site-packages/google/cloud/vision/image.py", line 219, in detect_labels
       annotations = self.detect(features)
     File "/home/leth/Workspace/Python/python2/google-cloud-vision/lib/python2.7/site-packages/google/cloud/vision/image.py", line 143, in detect
       return self._detect_annotation(images)
     File "/home/leth/Workspace/Python/python2/google-cloud-vision/lib/python2.7/site-packages/google/cloud/vision/image.py", line 117, in _detect_annotation
       return self.client._vision_api.annotate(images)
     File "/home/leth/Workspace/Python/python2/google-cloud-vision/lib/python2.7/site-packages/google/cloud/vision/_gax.py", line 69, in annotate
       responses = annotator_client.batch_annotate_images(requests).responses
     File "/home/leth/Workspace/Python/python2/google-cloud-vision/lib/python2.7/site-packages/google/cloud/gapic/vision/v1/image_annotator_client.py", line 181, in batch_annotate_images
       return self._batch_annotate_images(request, options)
     File "/home/leth/Workspace/Python/python2/google-cloud-vision/lib/python2.7/site-packages/google/gax/api_callable.py", line 428, in inner
       return api_caller(api_call, this_settings, request)
     File "/home/leth/Workspace/Python/python2/google-cloud-vision/lib/python2.7/site-packages/google/gax/api_callable.py", line 416, in base_caller
       return api_call(*args)
     File "/home/leth/Workspace/Python/python2/google-cloud-vision/lib/python2.7/site-packages/google/gax/api_callable.py", line 376, in inner
       return a_func(*args, **kwargs)
     File "/home/leth/Workspace/Python/python2/google-cloud-vision/lib/python2.7/site-packages/google/gax/retry.py", line 127, in inner
       ' classified as transient', exception)
   google.gax.errors.RetryError: GaxError(Exception occurred in retry method that was not classified as transient, caused by <_Rendezvous of RPC that terminated with (StatusCode.UNAUTHENTICATED, Traceback (most recent call last):
     File "src/python/grpcio/grpc/_cython/_cygrpc/credentials.pyx.pxi", line 154, in grpc._cython.cygrpc.plugin_get_metadata (src/python/grpcio/grpc/_cython/cygrpc.c:6996)
     File "/home/leth/Workspace/Python/python2/google-cloud-vision/lib/python2.7/site-packages/grpc/_plugin_wrapping.py", line 106, in __call__
       AuthMetadataPluginCallback(wrapped_cygrpc_callback))
     File "/home/leth/Workspace/Python/python2/google-cloud-vision/lib/python2.7/site-packages/google/auth/transport/grpc.py", line 73, in __call__
       callback(self._get_authorization_headers(context), None)
     File "/home/leth/Workspace/Python/python2/google-cloud-vision/lib/python2.7/site-packages/google/auth/transport/grpc.py", line 61, in _get_authorization_headers
       headers)
     File "/home/leth/Workspace/Python/python2/google-cloud-vision/lib/python2.7/site-packages/google/auth/credentials.py", line 121, in before_request
       self.refresh(request)
     File "/home/leth/Workspace/Python/python2/google-cloud-vision/lib/python2.7/site-packages/google/oauth2/credentials.py", line 126, in refresh
       self._client_secret))
     File "/home/leth/Workspace/Python/python2/google-cloud-vision/lib/python2.7/site-packages/google/oauth2/_client.py", line 189, in refresh_grant
       response_data = _token_endpoint_request(request, token_uri, body)
     File "/home/leth/Workspace/Python/python2/google-cloud-vision/lib/python2.7/site-packages/google/oauth2/_client.py", line 104, in _token_endpoint_request
       method='POST', url=token_uri, headers=headers, body=body)
     File "/home/leth/Workspace/Python/python2/google-cloud-vision/lib/python2.7/site-packages/google/auth/transport/requests.py", line 115, in __call__
       raise exceptions.TransportError(exc)
   TransportError: ("bad handshake: Error([('SSL routines', 'SSL3_GET_SERVER_CERTIFICATE', 'certificate verify failed')],)",)
   )>)
   
5. lukesneeringer commented on Aug 8, 2017

   

   lukesneeringer

   on Aug 8, 2017

   Contributor

   More actions

   This issue was moved to grpc/grpc#12113
6. lukesneeringer

   closed this as completedon Aug 8, 2017
7. JustinBeckwith

   assigned

   lukesneeringer

   on Feb 1, 2021
8. parthea

   added a commit that references this issue on Mar 9, 2026

   docs: add samples from spanner/cloud-client (#117)

   ...

   ffb249b