az login unable to login getting SSL issues

az login
A web browser has been opened at https://login.microsoftonline.com/organizations/oauth2/v2.0/authorize. Please continue the login in the web browser. If no web browser is available or if the web browser fails to open, use device code flow with az login --use-device-code.
[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: self signed certificate in certificate chain (_ssl.c:997)
Certificate verification failed. This typically happens when using Azure CLI behind a proxy that intercepts traffic with a self-signed certificate. Please add this certificate to the trusted CA bundle. More info: https://learn.microsoft.com/cli/azure/use-cli-effectively#work-behind-a-proxy.

KapilAnanth-MSFT 46,956 Reputation points Microsoft Employee

2022-07-22T17:02:14.517+00:00

Hi @Arra Santhosh Kumar HYD DIWID22 ,

Welcome to the Microsoft Q&A Platform. Thank you for reaching out & I hope you are doing well.
I understand that you are facing issues with Azure CLI SDK.

The error usually occurs when you are using a system with a proxy configured.
For best practices, refer: https://learn.microsoft.com/en-us/cli/azure/use-cli-effectively?tabs=bash%2Cbash2#work-behind-a-proxy

Please make sure you are setting an environment variable REQUESTS_CA_BUNDLE according to your OS as documented.
Then add the proxy server's certificate to the CA bundle certificate file.

I hope this helps.
Please feel free to let me know if you have further queries on the same.

Thanks,
Kapil.
Arra Santhosh Kumar HYD DIWID22 6 Reputation points

2022-07-25T12:29:44.803+00:00

HI Kapil,
i was unable to fix the error if possible can you share me some details document to fix the error.
KapilAnanth-MSFT 46,956 Reputation points Microsoft Employee

2022-07-25T13:45:00.693+00:00
Hi @Arra Santhosh Kumar HYD DIWID22 ,

Can you please confirm if you are using a proxy or not?

Also, may I know the version of Azure CLI you are using?

Thank,
Kapil
Arra Santhosh Kumar HYD DIWID22 6 Reputation points

2022-07-26T04:06:10.79+00:00

yes we are using proxy with script address type and we are using az-cli version is

C:\Users\z0176282>az --version
azure-cli 2.38.0

core 2.38.0
telemetry 1.0.6

Dependencies:
msal 1.18.0b1
azure-mgmt-resource 21.1.0b1
Li, Tarick-T 0 Reputation points

2023-07-17T08:55:48.6333333+00:00

Hi,@KapilAnanth-MSFT @Arra Santhosh Kumar HYD DIWID22

I have the same problem with the ‘az login’ command: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: unable to get local issuer certificate (_ssl.c:997)')))

Certificate verification failed. This typically happens when using Azure CLI behind a proxy that intercepts traffic with a self-signed certificate. Please add this certificate to the trusted CA bundle. More info: https://docs.microsoft.com/cli/azure/use-cli-effectively#work-behind-a-proxy.

I don't know if you have solved it, can you share the solution to me？
MURUGAN BALAGANESH 0 Reputation points

2023-10-24T13:03:25.47+00:00

I am also facing the same issue did someone resolved the issues ?

az login

HTTPSConnectionPool(host='login.microsoftonline.com', port=443): Max retries exceeded with url: /organizations/v2.0/.well-known/openid-configuration (Caused by SSLError(SSLCertVerificationError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: unable to get local issuer certificate (_ssl.c:997)')))

Certificate verification failed. This typically happens when using Azure CLI behind a proxy that intercepts traffic with a self-signed certificate. Please add this certificate to the trusted CA bundle. More info: https://docs.microsoft.com/cli/azure/use-cli-effectively#work-behind-a-proxy.

Share via

az login unable to login getting SSL issues

Your answer