GMS mcheck fails with SSL: CERTIFICATE_VERIFY_FAILED

  • 7024512
  • 30-Mar-2020
  • 25-Nov-2020

Environment

GroupWise Mobility Service 18

Situation

Running the GMS diagnostic tool called mcheck fails on any operation requiring a login to a POA

Seen in the resultant mcheck log files:

Exception: <urlopen error [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:727)>



Resolution

Run the following command on the GMS server before launching mcheck:

export PYTHONHTTPSVERIFY=0

To check that the command was accepted correctly, and note that it is case sensitive, run this command:

env | grep -i python

and in the output you must see this:

PYTHONHTTPSVERIFY=0


Cause

In python 2.7.9, SSL certificate verification was turned on by default. The above  environment variable disables certificate verification with GroupWise.  This is a quick workaround.

To enable certificate verification with POA, follow section 5 in the following:  https://www.novell.com/documentation/groupwise18/gwmob18_qs_security/data/gwmob18_qs_security.html

Status

Reported to Engineering

Additional Information

This should be resolved in a future release of GMS