gcloud crashed (SSLHandshakeError): [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:661) [127132280]

Verified

Bug

More Info Required

Status Update

No update yet.

Description

hi...@gmail.com

created issue #1

Mar 4, 2019 09:49AM

Issue running command [gcloud auth login].

Trace:
/google/google-cloud-sdk/gcloud_main.py:147
gcloud_cli.Execute()
/google/google-cloud-sdk/calliope/cli.py:823
self._HandleAllErrors(exc, command_path_string, specified_arg_names)
/google/google-cloud-sdk/calliope/cli.py:861
exceptions.HandleError(exc, command_path_string, self.__known_error_handler)
/google/google-cloud-sdk/calliope/cli.py:797
resources = calliope_command.Run(cli=self, args=args)
/google/google-cloud-sdk/calliope/backend.py:757
resources = command_instance.Run(args)
surface/auth/login.py:139
creds = auth_util.DoInstalledAppBrowserFlow(launch_browser, scopes)
/google/google-cloud-sdk/api_lib/auth/util.py:86
client_secret=client_secret)
/google/google-cloud-sdk/core/credentials/store.py:517
return RunWebFlow(webflow, launch_browser=launch_browser)
/google/google-cloud-sdk/core/credentials/store.py:538
cred = flow.Run(webflow, launch_browser=launch_browser, http=http.Http())
/google/google-cloud-sdk/core/credentials/flow.py:180
credential = flow.step2_exchange(code, http=http)
/google/google-cloud-sdk/oauth2client/util.py:137
return wrapped(*args, **kwargs)
/google/google-cloud-sdk/oauth2client/client.py:2068
headers=headers)
/google/google-cloud-sdk/core/http.py:254
response = orig_request(*modified_args, **kwargs)
/google/google-cloud-sdk/httplib2/__init__.py:1625
(response, content) = self._request(conn, authority, uri, request_uri, method, b...
/google/google-cloud-sdk/httplib2/__init__.py:1367
(response, content) = self._conn_request(conn, request_uri, method, body, header...
/google/google-cloud-sdk/httplib2/__init__.py:1287
conn.connect()
/google/google-cloud-sdk/httplib2/__init__.py:1081
raise SSLHandshakeError(e)
SSLHandshakeError: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:661)

Installation information:

Google Cloud SDK [185.0.0]

Platform: [Linux, x86_64] ('Linux', 'cs-6000-devshell-vm-3af0acd3-e491-4451-8e5d-4d93211fcca9', '4.14.83+', '#1 SMP Mon Feb 11 22:55:51 PST 2019', 'x86_64', '')
Python Version: [2.7.13 (default, Sep 26 2018, 18:42:22) [GCC 6.3.0 20170516]]
Python Location: [/usr/bin/python2]
Site Packages: [Disabled]

Installation Root: [${SDK_ROOT}]
Installed Components:
kubectl: []
app-engine-python: [1.9.65]
pubsub-emulator: [2017.09.15]
core: [2018.01.12]
app-engine-java: [1.9.60]
datalab: [20180105]
app-engine-php: [ ]
docker-credential-gcr: []
app-engine-python-extras: [1.9.63]
beta: [2017.09.15]
gsutil: [4.28]
cloud-datastore-emulator: [1.3.0]
cbt: []
alpha: [2017.09.15]
gcd-emulator: [v1beta3-1.0.0]
app-engine-go: []
bq: [2.0.28]
System PATH: [${HOME}/gopath/bin:/google/gopath/bin:${SDK_ROOT}/bin:/usr/local/go/bin:/opt/gradle/bin:/opt/maven/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/usr/local/nvm/versions/node/v10.14.2/bin:/google/go_appengine:/google/google_appengine]
Python PATH: [${SDK_ROOT}/lib/third_party:${SDK_ROOT}/lib:/usr/lib/python2.7:/usr/lib/python2.7/plat-x86_64-linux-gnu:/usr/lib/python2.7/lib-tk:/usr/lib/python2.7/lib-old:/usr/lib/python2.7/lib-dynload]
Cloud SDK on PATH: [False]
Kubectl on PATH: [${SDK_ROOT}/bin/kubectl]

WARNING: There are old versions of the Google Cloud Platform tools on your system PATH.
/google/go_appengine/dev_appserver.py
/google/go_appengine/endpointscfg.py

Installation Properties: [${SDK_ROOT}/properties]
User Config Directory: [${CLOUDSDK_CONFIG}]
Active Configuration Name: [cloudshell-29750]
Active Configuration Path: [${CLOUDSDK_CONFIG}/configurations/config_cloudshell-29750]

Account: [h..8@g..m]
Project: [s..9]

Current Properties:
[metrics]
environment: [devshell]
[core]
project: [s..9]
account: [h..8@g..m]
disable_usage_reporting: [False]
[compute]
gce_metadata_read_timeout_sec: [5]
[component_manager]
disable_update_check: [True]

Logs Directory: [${CLOUDSDK_CONFIG}/logs]
Last Log File: [${CLOUDSDK_CONFIG}/logs/2019.03.04/15.17.27.243928.log]

git: [git version 2.11.0]
ssh: [OpenSSH_7.4p1 Debian-10+deb9u5, OpenSSL 1.0.2q 20 Nov 2018]

Comments

[Deleted User] <[Deleted User]> #2Mar 4, 2019 02:53PM

Duplicate of

https://issuetracker.google.com/issues/72407295

gs...@google.com <gs...@google.com> #3Mar 4, 2019 03:43PM

Assigned to gs...@google.com.

Hi, this error only affects Cloud SDK version 186. It was previously reported in

Issue 72407295

and a fix for it should be released in Cloud SDK version 187.

In the mean time, you can downgrade to Cloud SDK version 185 as a workaround by running the following command:

gcloud components update --version 185.0.0

hi...@gmail.com <hi...@gmail.com> #4Mar 5, 2019 09:33AM

Google Cloud SDK [236.0.0]
Platform: [Linux, x86_64] ('Linux', 'cs-6000-devshell-vm-9ef49eb9-bd50-4c10-ba2f-3da4b52ba404', '4.14.83+', '#1 SMP Mon Feb 11 22:55:51 PST 2019', 'x86_64', '
')
Python Version: [2.7.13 (default, Sep 26 2018, 18:42:22) [GCC 6.3.0 20170516]]
Python Location: [/usr/bin/python2]
Site Packages: [Disabled]
Installation Root: [/google/google-cloud-sdk]
Installed Components:
kubectl: [2018.09.17]
app-engine-python: [1.9.83]
pubsub-emulator: [2018.02.02]
core: [2019.02.22]
app-engine-java: [1.9.72]
datalab: [20190116]
cloud-build-local: []
docker-credential-gcr: []
app-engine-python-extras: [1.9.74]
beta: [2019.02.22]
gsutil: [4.36]
cloud-datastore-emulator: [2.1.0]
cbt: []
app-engine-php: [ ]
alpha: [2019.02.22]
gcd-emulator: [v1beta3-1.0.0]
app-engine-go: []
bq: [2.0.41]
System PATH: [/home/himanigaur1998/gopath/bin:/google/gopath/bin:/google/google-cloud-sdk/bin:/usr/local/go/bin:/opt/gradle/bin:/opt/maven/bin:/usr/local/sbin
:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/usr/local/nvm/versions/node/v10.14.2/bin:/google/go_appengine:/google/google_appengine]
Python PATH: [/google/google-cloud-sdk/lib/third_party:/google/google-cloud-sdk/lib:/usr/lib/python2.7:/usr/lib/python2.7/plat-x86_64-linux-gnu:/usr/lib/pytho
n2.7/lib-tk:/usr/lib/python2.7/lib-old:/usr/lib/python2.7/lib-dynload]
Cloud SDK on PATH: [True]
Kubectl on PATH: [/google/google-cloud-sdk/bin/kubectl]
WARNING: There are old versions of the Google Cloud Platform tools on your system PATH.
/google/go_appengine/dev_appserver.py
/google/go_appengine/endpointscfg.py
Installation Properties: [/google/google-cloud-sdk/properties]
User Config Directory: [/tmp/tmp.HE4APFc8z2]
Active Configuration Name: [cloudshell-21205]
Active Configuration Path: [/tmp/tmp.HE4APFc8z2/configurations/config_cloudshell-21205]
Account: [himanigaur1998@gmail.com]
Project: [silent-region-232809]
Current Properties:
[metrics]
environment: [devshell]
[core]
project: [silent-region-232809]
account: [himanigaur1998@gmail.com]
disable_usage_reporting: [False]
[component_manager]
disable_update_check: [True]
[compute]
gce_metadata_read_timeout_sec: [5]
Logs Directory: [/tmp/tmp.HE4APFc8z2/logs]
Last Log File: [/tmp/tmp.HE4APFc8z2/logs/2019.03.05/14.51.37.669841.log]
git: [git version 2.11.0]
ssh: [OpenSSH_7.4p1 Debian-10+deb9u5, OpenSSL 1.0.2q 20 Nov 2018]

$ gcloud auth login --verbosity=debug
DEBUG: Running [gcloud.auth.login] with arguments: [--verbosity: "debug"]

You are already authenticated with gcloud when running
inside the Cloud Shell and so do not need to run this
command. Do you wish to proceed anyway?
Y
Successfully retrieved access token

hi...@gmail.com <hi...@gmail.com> #5Mar 5, 2019 09:34AM

The error didn't come up again after reboot.

yi...@google.com <yi...@google.com> #6Mar 6, 2019 11:26PM

Verified by yi...@google.com.

I see that it's resolved with a reboot, I will close the issue then, please open another issue if it reoccurs, thanks.

Issue 127132280