SSL: CERTIFICATE_VERIFY_FAILED error

[Zisha Weinstock]

We've been using the Python google-ads library for a while now from behind our corporate firewall and it was working fine until yesterday.  

Last time it worked was yesterday 7/25/22 at 12:30pm EDT then at 1:30pm we started getting the following error:

Exception: HTTPSConnectionPool(host='accounts.google.com', port=443): Max retries exceeded with url: /o/oauth2/token (Caused by SSLError(SSLCertVerificationError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: self signed certificate in certificate chain (_ssl.c:1131)'))) at 2022-07-26 17:43:49 HTTPSConnectionPool(host='accounts.google.com', port=443): Max retries exceeded with url: /o/oauth2/token (Caused by SSLError(SSLCertVerificationError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: self signed certificate in certificate chain (_ssl.c:1131)')))
Traceback (most recent call last):
  File "/opt/rh/rh-python38/root/usr/local/lib/python3.8/site-packages/urllib3/connectionpool.py", line 703, in urlopen
    httplib_response = self._make_request(
  File "/opt/rh/rh-python38/root/usr/local/lib/python3.8/site-packages/urllib3/connectionpool.py", line 386, in _make_request
    self._validate_conn(conn)
  File "/opt/rh/rh-python38/root/usr/local/lib/python3.8/site-packages/urllib3/connectionpool.py", line 1040, in _validate_conn
    conn.connect()
  File "/opt/rh/rh-python38/root/usr/local/lib/python3.8/site-packages/urllib3/connection.py", line 414, in connect
    self.sock = ssl_wrap_socket(
  File "/opt/rh/rh-python38/root/usr/local/lib/python3.8/site-packages/urllib3/util/ssl_.py", line 449, in ssl_wrap_socket
    ssl_sock = _ssl_wrap_socket_impl(
  File "/opt/rh/rh-python38/root/usr/local/lib/python3.8/site-packages/urllib3/util/ssl_.py", line 493, in _ssl_wrap_socket_impl
    return ssl_context.wrap_socket(sock, server_hostname=server_hostname)
  File "/opt/rh/rh-python38/root/usr/lib64/python3.8/ssl.py", line 500, in wrap_socket
    return self.sslsocket_class._create(
  File "/opt/rh/rh-python38/root/usr/lib64/python3.8/ssl.py", line 1040, in _create
    self.do_handshake()
  File "/opt/rh/rh-python38/root/usr/lib64/python3.8/ssl.py", line 1309, in do_handshake
    self._sslobj.do_handshake()
ssl.SSLCertVerificationError: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: self signed certificate in certificate chain (_ssl.c:1131)

Our security people are saying that nothing changed on our end. Was there any change in that time period on Google's end?

I posted this message on https://groups.google.com/g/adwords-api/ and was referred to https://github.com/googleads/googleads-python-lib/issues who referred me to this group.

Response was: 

Hello. Given that there hasn't been a library release within the timeframe in which you noticed and reported this issue, I don't expect this is a library-related issue. You're probably right that a reasonable avenue to investigate is whether any changes occurred on the side of the API itself, but you should get in touch w/ Ad Manager support to initiate that discussion.

[Ad Manager API Forum Advisor]

Hi Zisha,

Thank you for contacting the Ad Manager API support team. I'm Ankam.

After checking the issue description, the error doesn't seem to be related to the API. The issue is with the SSL certificate, this link might help to resolve the issue. But I'm afraid that this is already out of scope for our team. If it doesn't work, please try to search for more information about the error on your end as we can only provide support for Ad Manager API related queries and  concerns.

Regards,

Ankam Ad Manager API Team

ref:_00D1U1174p._5004Q2d2AcP:ref