Getting certificate error when running GAM commands

[Alex Chuang]

Hi, I was able to run GAM commands last year with no issue. Just tried last week for the first time in a few months and got this error:

alex.chuang gam_queries % gam redirect csv ./groupsdetails.csv print groups fields name,description

ERROR: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: self-signed certificate in certificate chain (_ssl.c:992)

Any idea what might be causing this?

Best Regards,

Alex

[Jay Lee]

You have security software or a network firewall/proxy/appliance performing TLS main-in-the-middle  inspection/ decryption. See: https://github.com/GAM-team/GAM/wiki#using-gam-with-ssl--tls-mitm-inspection

--
You received this message because you are subscribed to the Google Groups "GAM for Google Workspace" group.
To unsubscribe from this group and stop receiving emails from it, send an email to google-apps-man...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/google-apps-manager/8a601305-e852-4246-a59e-0ea7736841a8n%40googlegroups.com.

[Alex Chuang]

You guys are amazing! We recently rolled out Netskope. I disabled the agent and was able to execute the commands again. Is there something we need to ask the Netskope rollout team to do to unblock this when the agent is enabled?

[Jay Lee]

All of the information from the GAM side is on the wiki page above. From the Net scope side they need to either exempt the domains listed or provide the certificate authority with which they are signing. 

Jay

To view this discussion on the web visit https://groups.google.com/d/msgid/google-apps-manager/ffc80a51-89e3-4efb-be17-3b029870a52fn%40googlegroups.com.

[Alex Chuang]

Hi Jay, as always, you guys are amazing! We worked with the Netskope team to exempt GAM within the tool and it is working great now. Ty again!

Best Regards,

Alex