ERROR: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: self-signed certificate in certificate chain (_ssl.c:997)

[Derek Fetsch]

Hello,
Here is my issue:

% bash <(curl -s -S -L https://git.io/install-gam)

You are running MacOS 12.3
Checking GitHub URL https://api.github.com/repos/GAM-team/GAM/releases for latest GAM release (unauthenticated)...
Getting file and download URL...

Downloading file gam-6.17-macos-universal2.tar.xz from https://github.com/GAM-team/GAM/releases/download/v6.17/gam-6.17-macos-universal2.tar.xz to /var/folders/rq/1n2nh38n76g22ry9j0dv44ch0000gp/T/tmp.dI5X379K (unauthenticated)...

  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current

                                 Dload  Upload   Total   Spent    Left  Speed

100   669  100   669    0     0   3751      0 --:--:-- --:--:-- --:--:--  3822
100 28.5M  100 28.5M    0     0  13.4M      0  0:00:02  0:00:02 --:--:-- 18.0M

Extracting archive to /Users/dadmin/bin
Finished extracting GAM archive.
Adding gam alias to profile file /Users/dadmin/.profile.
Adding gam alias to profile file /Users/dadmin/.zshrc.

Can you run a full browser on this machine? (usually Y for MacOS, N for Linux if you SSH into this machine) Y

GAM is now installed. Are you ready to set up a Google API project for GAM? (yes or no) yes

Please enter your Google Workspace admin email address: dad...@derek.net

ERROR: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: self-signed certificate in certificate chain (_ssl.c:997)

Project creation failed. Trying again. Say N to skip project creation.

GAM is now installed. Are you ready to set up a Google API project for GAM? (yes or no) no

You can create an API project later by running:
gam create project

Here's information about your new GAM installation:

ERROR: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: self-signed certificate in certificate chain (_ssl.c:997)
ERROR: Failed running GAM for the first time with 3. Please report this error to GAM mailing list. Exiting.



The resolution from https://github.com/GAM-team/GAM/issues/736 failed.

This was interesting: "what version of python are you using" https://groups.google.com/g/google-apps-manager/c/EI2VvMBtv48 as I have Homebrew installed.

That took me to https://stackoverflow.com/questions/27835619/urllib-and-ssl-certificate-verify-failed-error but that went like this:



% /Applications/Python\ 3.10/Install\ Certificates.command ; exit;
-- pip install --upgrade certifi
Collecting certifi
Downloading certifi-2021.10.8-py2.py3-none-any.whl (149 kB)

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 149.2/149.2 KB 1.9 MB/s eta 0:00:00

Installing collected packages: certifi

Successfully installed certifi-2021.10.8
-- removing any existing file or link
-- creating symlink to certifi certificate bundle
-- setting permissions
-- update complete

Saving session...
...copying shared history...
...saving history...truncating history files...
...completed.

Deleting expired sessions... 6 completed.

[Process completed]

[Derek Fetsch]

Sorry, my email got cut off...

So I get one error after entering my Google Workspace admin email:

ERROR: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: self-signed certificate in certificate chain (_ssl.c:997)

and here is the error I get at the end:

ERROR: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: self-signed certificate in certificate chain (_ssl.c:997)

ERROR: Failed running GAM for the first time with 3. Please report this error to GAM mailing list. Exiting.

I don't have any self-signed certs in my keychain. I did have one system root that was not trusted, but I trusted that and still no joy.

Thanks,

Derek

[James Simpson]

Looking to see if you got any resolution to this.  I am running into this issue too and know that its the company security software trying to decrypt the traffic

[Jay Lee]

https://github.com/GAM-team/GAM/wiki#hostnames-used-by-gam

Jay Lee

--
You received this message because you are subscribed to the Google Groups "GAM for Google Workspace" group.
To unsubscribe from this group and stop receiving emails from it, send an email to google-apps-man...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/google-apps-manager/bc348e55-3ae1-48d3-ac25-71fc553dd7f5n%40googlegroups.com.