DAP client SSL Error

[RobSnyder]

Installed the instructure-dap-client in Python 3.10 (tried 3.11 as well). Getting an error each time we try to invoke it:

[SSLCertVerificationError: (1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: unable to get local issuer certificate (_ssl.c:1129)')]

We are able to use both CURL and the Python Requests module with the same client ID and secret against the same host and things are working. Did update the local CA store to no effect. 

Any guidance would be appreciated. Sorry if I missed a documented step somewhere...

Thanks!

[KeithSmith_au]

See this forum question for the answer https://community.canvaslms.com/t5/Data-and-Analytics-Group/ERROR-Cannot-connect-to-host-api-gateway...

[RichardCarballo]

this is not a solution

[RobSnyder]

Thanks... unfortunately this didn't fix it for us. Installed the latest AWS CLI, ensured it was setup and working, rebooted, reinstalled the python virtual environment, etc. Still stuck. It seems like we are missing a trust certificate but not sure where to find it. 

[danlasota]

Did you ever get a response to this? I have a very similar problem

[LeventeHunyadi]

Can you share the full stack trace? Is this related to database connectivity (e.g. commands initdb and syncdb) or downloading files (e.g. commands snapshot and incremental)?

Can you share what aiohttp version you have? There was a recent release on Jan 29 that you can upgrade to with pip, which might deliver a solution out of the box.

curl and Python requests integrate with OpenSSL in a different way than does aiohttp. The library aiohttp is responsible for all (asynchronous) HTTPS communication with web servers, e.g. DAP API or S3 buckets.

Depending on your database server configuration, the database connection might also use OpenSSL. Do you have a PostgreSQL or MySQL database server?

[awillis]

If you are still facing this issue for Python 3 on MacOS, this may be of help. There is probably a similar solution for other operating systems.

https://stackoverflow.com/questions/40684543/how-to-make-python-use-ca-certificates-from-mac-os-trus...

[asergay]

Here is the answer that. worked for me (Mac), I don't really remember which post I found it in...

"How to fix SSL error with DAP:

You can try installing the certifi library.

pip install certifi

After installation you can use this command

/Applications/Python\ 3.10/install\ Certificates.command

Change the python version to the version you're at in your environment and try running your program again.

[JamesSorenson]

I had this VERY same problem this week.  I had to reinstall Python.  Support said it was an expected thing that my server's python cert would expire.

FWIW, I also upgraded the DAP client, upgraded PIP, upgraded Python, and about anything else I could and the issue resolved.