Facing Intermittent SSL Certification Failure error in azure-servicebus about azure-sdk-for-python

[github-actions]

Thank you for your feedback. Tagging and routing to the team member best able to assist.

[kashifkhan]

Hi @kamleshsolanki-crest ,

This issue is coming from the ServiceBusAdmin client. There could a couple of things at play here which basically boil down to - are the certificates installed and accessible on the VM

• Can you try upgrading/installing certifi pip install -U certifi
• Are there any proxies involved on the network ?

[github-actions]

Hi @kamleshsolanki-crest. Thank you for opening this issue and giving us the opportunity to assist. To help our team better understand your issue and the details of your scenario please provide a response to the question asked above or the information requested above. This will help us more accurately address your issue.

[kamleshsolanki-crest]

Hi @kashifkhan,

Thanks for the quick response!

• I'm using the latest certifi (version 2024.6.2).
• There is no proxy involved. This is a corporate network, so the traffic is navigating via VPN and firewall. I have checked for any blockages, and everything is enabled in the network.

[kashifkhan]

@kamleshsolanki-crest do things work as expected without the VPN ?

[kamleshsolanki-crest]

@kashifkhan As this is an corporate network in order to access the VM VPN is must. But as I mentioned in the description that in cloud platform such as Amazon EC2 and Azure it is working fine.

Also note that our service is running on Docker containers.

[kashifkhan]

@kamleshsolanki-crest I would have to say there is something with the VM and the corp environment. Given that that sdk is working fine in other places, the only other suggestion I have here is making sure that certs.pm has the necessary information needed on the VM.

[kamleshsolanki-crest]

Thank you for your feedback. I agree that the issue might be related to the VM and the corporate environment, especially since the SDK is functioning correctly in other places.

I will ensure that the certs.pm file on the VM has all the necessary information. Could you provide more details on what specific information or configurations should be included in certs.pm? Additionally, are there any other environment settings or prerequisites that we should verify on the VM?

[kashifkhan]

Hi @kamleshsolanki-crest this stackoverflow thread has a few good options to try out https://stackoverflow.com/questions/30405867/how-to-get-python-requests-to-trust-a-self-signed-ssl-certificate

Some things to try

• See if the network admin for your company can help you point to the certs and it can be added via REQUESTS_CA_BUNDLE https://docs.python-requests.org/en/latest/user/advanced/#ssl-cert-verification
• Microsoft CA root from the trust store needs to be added to the environment

[github-actions]

Hi @kamleshsolanki-crest. Thank you for opening this issue and giving us the opportunity to assist. We believe that this has been addressed. If you feel that further discussion is needed, please add a comment with the text "/unresolve" to remove the "issue-addressed" label and continue the conversation.

[github-actions]

Hi @kamleshsolanki-crest, since you haven’t asked that we /unresolve the issue, we’ll close this out. If you believe further discussion is needed, please add a comment /unresolve to reopen the issue.