[Orchestrator API][Python]_Connection Error_certificate Verify Failed: Unable To Get Local Issuer Certificate

News Knowledge Base
1

Resolution for Orchestrator API connection error "| Python | certificate verify failed: unable to get local issuer certificate" .

Issue Description: hile making an Orchestrator API call from Python and Postman applications, error is thrown "HTTPSConnectionPool(host='abc.xyz.com', port=443): Max retries exceeded with url: /api/account/authenticate (Caused by SSLError(SSLCertVerificationError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: unable to get local issuer certificate (_ssl.c:1129)'))"

Root Cause: Identified it to be an issue with the Python Certificate module where the local certificates are not included when using the certifi module. More info here - Added support to load certificate from the Windows Certificate store .

Resolution: Install the above 2 libraries
  • These 2 libraries would patch pip and requests at runtime to use certificates from the default system store (rather than the bundled certs ca)
    • pip_system_certs
    • python-certifi-win32
Read more on the Unable To Get Local Issuer Certificate When Using Requests In Python .