cli.azure.cli.core.azclierror: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: unable to get local issuer certificate

[satheshs]

I am getting below error when I login with azure-cli.Currently not using any proxies.

cli.azure.cli.core.azclierror: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: unable to get local issuer certificate (_ssl.c:997)
az_command_data_logger: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: unable to get local issuer certificate (_ssl.c:997)
Certificate verification failed. This typically happens when using Azure CLI behind a proxy that intercepts traffic with a self-signed certificate. Please add this certificate to the trusted CA bundle. More info: https://docs.microsoft.com/cli/azure/use-cli-effectively#work-behind-a-proxy.
cli.knack.cli: Event: Cli.PostExecute [<function AzCliLogging.deinit_cmd_metadata_logging at 0x10e8eee60>]

az --version
azure-cli 2.38.0

core 2.38.0
telemetry 1.0.6

Dependencies:
msal 1.18.0b1
azure-mgmt-resource 21.1.0b1

Python location '/usr/local/Cellar/azure-cli/2.38.0/libexec/bin/python'
Extensions directory '/Users/sathesh/.azure/cliextensions'

Python (Darwin) 3.10.5 (main, Jun 23 2022, 17:15:25) [Clang 13.1.6 (clang-1316.0.21.2.5)]

Legal docs and information: aka.ms/AzureCliLegal

[satheshs]

I couldn't able to use azure-cli.Please help me to resolve this.

[yonzhan]

@jiasli for awareness

[satheshs]

@jiasli @yonzhan Can you help me on this

[jiasli]

Duplicate of #19571

Currently not using any proxies.

I don't think so. It is highly possible that your company/organization has a proxy that intercepts your traffic.

You may get the same error without Azure CLI by directly running:

python3 -c "import requests; print(requests.get('https://login.microsoftonline.com/').status_code)"

As indicated by the error message, please follow the instruction at https://docs.microsoft.com/cli/azure/use-cli-effectively#work-behind-a-proxy to trust the root certificate.

[satheshs]

sathesh@Sathesh-S-2 ~ % python3 -c "import requests;print(requests.get('https://login.microsoftonline.com/').status_code)"
200

I am getting 200 responses @jiasli

[satheshs]

Any one can help @yonzhan ?

[jiasli]

It seems you can reach https://login.microsoftonline.com/ without any problem. Could you run az login --debug?

[p9139010]

Hi, have similar problem but not connecting into Azure but couldn't update the extension or upgrade. Can anyone suggest.

Unable to get extension index.
Please ensure you have network connection. Error detail: HTTPSConnectionPool(host='aka.ms', port=443): Max retries exceeded with url: /azure-cli-extension-index-v1 (Caused by SSLError(SSLCertVerificationError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: unable to get local issuer certificate (_ssl.c:997)')))