How to fix SSL: CERTIFICATE_VERIFY_FAILED on my PC

Question

How to fix SSL: CERTIFICATE_VERIFY_FAILED on my PC

Yoga 41

When sending a message from the device to the cloud through Azure CLI I get the error SSL Certificate to verify failure from my PC.

Command

az iot device send-d2c-message -n MY-STAGE-IOT-HUB -d 01118 --data 'Test Message'

Out Put

[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:852)

Can you suggest a way to fix this issue in a development environment?

Some more info

$ az --version

azure-cli 2.11.1

core 2.11.1

telemetry 1.0.5

Extensions:

azure-iot 0.10.0

Python location 'C:\Program Files (x86)\Microsoft SDKs\Azure\CLI2\python.exe'

Extensions directory 'C:\Users\MyPC.azure\cliextensions'

Python (Windows) 3.6.8 (tags/v3.6.8:3c6b436a57, Dec 23 2018, 23:31:17) [MSC v.1916 32 bit (Intel)]

Legal docs and information: aka.ms/AzureCliLegal

Unable to check if your CLI is up-to-date. Check your internet connection.

Please let us know how we are doing: https://aka.ms/azureclihats

and let us know if you're interested in trying out our newest features: https://aka.ms/CLIUXstudy

AshokPeddakotla-MSFT 35,971 Reputation points Moderator

2023-03-29T15:13:20.7733333+00:00

Yoga Just checking in to see if the below answer(s) helped.

If this answers your query, do click Accept Answer and Yes if this answer helpful. And, if you have any further query do let us know.

Accepted answer

1 additional answer

Your answer

AshokPeddakotla-MSFT 35,971 Reputation points Moderator

2023-03-29T15:13:20.7733333+00:00

Yoga Just checking in to see if the below answer(s) helped.

If this answers your query, do click Accept Answer and Yes if this answer helpful. And, if you have any further query do let us know.

Answer 1

Sander van de Velde | MVP 36,766 MVP Volunteer Moderator

Hello @Yoga,

I tried to send a message myself:

az iot device send-d2c-message --device-id clidevice --hub-name edge-check-weu-ih --data {\"e\":42} --properties 'a=1;b=2' -o json

I did not encounter any problems, although my IoT is still using the old Baltimore TLS certificate (which is almost deprecated).

This gave me this IoT Explorer positive feedback:

User's image

Notice, this is a tool for testing purposes only, you do not need to pass any device security credentials. This is because the CLI tool is running within the context of your subscription login account.

If the response helped, do "Accept Answer". If it doesn't work, please let us know the progress. All community members with similar issues will benefit by doing so. Your contribution is highly appreciated.

Yoga 41 Reputation points

2023-03-30T10:56:09.5066667+00:00

Hi
I was able to send the messages but somehow I couldn't send them now and we updated to DigiCert Global G2 root our IoT Hub Account, I shared the Azure CLI version details of my local environment, Do we need to upgrade the CLI version
Sander van de Velde | MVP 36,766 Reputation points MVP Volunteer Moderator

2023-03-30T21:36:10.5866667+00:00
Hello @Yoga,

I used the bash shell of the Azure portal cloud shell:

If you run...:

az upgrade az extension add --name azure-iot

...first, you have the latest CLI tooling and IoT extension.

Have you tried to send data with a regular IoT Device too? Check out this device simulation written in Python.

Yoga 41

Hi
Thanks for the reply. When I am doing an upgrade It failed, Bellow is the trace log. Thanks for sharing the device simulation.

 az upgrade
This command is experimental and not covered by customer support. Please use with discretion.
Your current Azure CLI version is 2.11.1. Latest version available is 2.29.0.
The command failed with an unexpected error. Here is the traceback:


Traceback (most recent call last):
  File "C:\Users\VSSADM~1\AppData\Local\Temp\pip-unpacked-wheel-mtleih48\knack\cli.py", line 215, in invoke
  File "C:\Users\VSSADM~1\AppData\Local\Temp\pip-unpacked-wheel-a_t_wugh\azure\cli\core\commands\__init__.py", line 654, in execute
  File "C:\Users\VSSADM~1\AppData\Local\Temp\pip-unpacked-wheel-a_t_wugh\azure\cli\core\commands\__init__.py", line 718, in _run_jobs_serially
  File "C:\Users\VSSADM~1\AppData\Local\Temp\pip-unpacked-wheel-a_t_wugh\azure\cli\core\commands\__init__.py", line 711, in _run_job
  File "C:\Users\VSSADM~1\AppData\Local\Temp\pip-unpacked-wheel-qqxn1krb\six.py", line 703, in reraise
  File "C:\Users\VSSADM~1\AppData\Local\Temp\pip-unpacked-wheel-a_t_wugh\azure\cli\core\commands\__init__.py", line 688, in _run_job
  File "C:\Users\VSSADM~1\AppData\Local\Temp\pip-unpacked-wheel-a_t_wugh\azure\cli\core\commands\__init__.py", line 325, in __call__
  File "C:\Users\VSSADM~1\AppData\Local\Temp\pip-unpacked-wheel-a_t_wugh\azure\cli\core\__init__.py", line 782, in default_command_handler
  File "C:\Users\VSSADM~1\AppData\Local\Temp\pip-unpacked-wheel-yndvnbfi\azure\cli\command_modules\util\custom.py", line 69, in upgrade_version
  File "C:\Users\VSSADM~1\AppData\Local\Temp\pip-unpacked-wheel-mtleih48\knack\prompting.py", line 73, in prompt_y_n
  File "C:\Users\VSSADM~1\AppData\Local\Temp\pip-unpacked-wheel-mtleih48\knack\prompting.py", line 81, in _prompt_bool
  File "C:\Users\VSSADM~1\AppData\Local\Temp\pip-unpacked-wheel-mtleih48\knack\prompting.py", line 30, in verify_is_a_tty
knack.prompting.NoTTYException

Sander van de Velde | MVP 36,766 Reputation points MVP Volunteer Moderator

2023-04-04T16:21:47.6833333+00:00

Hello @Yoga, The screenshots above are coming from the Azure Cloud shell, part of the Azure portal. I used the Bash shell there. I also checked upgrading the AZ CLI within powershell on my Windows device. This worked out fine also:

It seems you are running this locally. Which environment are you using? Please check the AZ CLI installation on another device or within the Azure portal.
Yoga 41 Reputation points

2023-04-06T07:03:06.1266667+00:00

Hi
Yes, I am running this in my local Windows environment, I have installed AZ CLI on another device there it's working as expected. Thanks for helping with this.

Answer 2

Yoga Welcome to Microsoft Q&A forum!

[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:852)

The error message indicates that the SSL certificate verification failed. Are you not using any certificate? Is this a simulated device?

Can you suggest a way to fix this issue in a development environment?

To fix this issue in a development environment, you can use a self-signed certificate. You can create a self-signed certificate using OpenSSL and then use it to authenticate your device. Please check the below documentations for detailed steps to create a self-signed certificate using OpenSSL.

Create a self-signed certificate

Use OpenSSL to create test certificates

Create test certificate using OpenSSL and Azure IoT Hub

Once certificate is generated and copied to the device, Use the --cert and --key flags to specify the path to the certificate and private key files when you run the az iot device send-d2c-message command:

See az iot device send-d2c-message for parameters.

Hope this helps. Do let us know if you need any further help.

If this answers your query, do click Accept Answer and Yes for this answer as helpful. And, if you have any further query do let us know by commenting in the below section, happy to help!

Yoga 41 Reputation points

2023-03-30T10:50:25.9166667+00:00

Hi Ashok,

It's not a simulator device, I was sending a through Azure CLI.

Share via

How to fix SSL: CERTIFICATE_VERIFY_FAILED on my PC

1 additional answer

Your answer