Sendgrid-python: Sendgrid certificate issue

[NGTRX]

Issue Summary

Sendgrid sertificate, got from ESET, is untrusted when I use your library on Debian server via apache with "Mail Helper Class" pointed in your documentation https://github.com/sendgrid/sendgrid-python

Steps to Reproduce

1. Install Debian + apache + ssl_mode + wsgi_mode
2. Install Django
3. Install sendgrid-python library
4. Send email with "Mail Helper Class"( https://github.com/sendgrid/sendgrid-python)
5. Got error "Exception:,

I think it is binded with sendgrid ssl certificate got from ESET. My server don't trust it, so I need get root certificate, as I think, to make my server know that ESET is trusted source.
Am I right? Where I can get root certs?
Could you help me with that issue?

Technical details:

• sendgrid-python Version: master (latest commit: [commit number])
• Python Version: 2.7.9

[thinkingserious]

Hi @NGTRX,

Can you please try this and let me know the error you receive? https://github.com/sendgrid/sendgrid-python/blob/master/TROUBLESHOOTING.md#error

[NGTRX]

I couldn't get this exception, but there is raised Exception: 'urllib2.URLError'>, certificate verify failed (_ssl.c:581)> when I use "response =
sg.client.mail.send.post(request_body=mail.get())".
I think it binded with self.host = opts.get('host', '
https://api.sendgrid.com'), but I couldn't clearly understand what is the
root of my issue. There is certificate problem. Could it be problem with my
server certificate? As I think, when I try to connect to sendgrid, it gives
my cert for SSL(ESET SSL Filter CA), but inside urllib2 it doesn't pass a
verification and exception raised. I've covered that one of probabilities
can be that my server need ESET root cert. I've downloaded it from
sendgrid.com certificate, but it didn't help.

I hope my answer very clear.

Regards
Leonid Shirokov.

2016-10-05 23:46 GMT+07:00 Elmer Thomas [email protected]:

Hi @NGTRX https://github.com/NGTRX,

Can you please try this and let me know the error you receive?
https://github.com/sendgrid/sendgrid-python/blob/master/
TROUBLESHOOTING.md#error

—
You are receiving this because you were mentioned.
Reply to this email directly, view it on GitHub
https://github.com/sendgrid/sendgrid-python/issues/229#issuecomment-251730925,
or mute the thread
https://github.com/notifications/unsubscribe-auth/ARI-3jnzvenF8wPh2QFQMEpQYFL66GbTks5qw9RjgaJpZM4KOgIu
.

С уважением,
Широков Леонид.

[thinkingserious]

Hi @NGTRX,

I think you have described your issue very well. Unfortunately, I have not had any experience with this issue.

I'll leave this ticket open in case anyone in the SendGrid community can help and I have added it to our backlog for further investigation.

You may also want to try our support team at https://support.sendgrid.com

[digitaldavenyc]

+1 Also having this issue....

[oduvan]

+1

Mac, Python 3.6

[oduvan]

Monkeypatching from this PEP-476 https://www.python.org/dev/peps/pep-0476/ helped.

[thinkingserious]

Thanks for the additional votes @digitaldavenyc and @oduvan, they have been added.

[halilserkanuz]

+1
Mac, Python 3.6

[kkinder]

This appears to happen also on OS X with Python 3.6.

[SendGridDX]

Thank you for the additional feedback @kkinder and I've added your vote to this issue in our backlog.

[hugotox]

+1
OSX Python 3.6

[thinkingserious]

@hugotox,

Have you tried this solution? https://stackoverflow.com/a/42334357

[hugotox]

Awesome! Thank you @thinkingserious !!

[aardvark82]

Also having this issue after installing 3.7 - solved by running /Applications/Python\ 3.7/Install\ Certificates.command

If you have installed Python 3.6 on OSX and are getting the "SSL: CERTIFICATE_VERIFY_FAILED" error when trying to connect to an https:// site, it's probably because Python 3.6 on OSX has no certificates at all, and can't validate any SSL connections. This is a change for 3.6 on OSX, and requires a post-install step, which installs the certifi package of certificates. This is documented in the ReadMe, which you should find at /Applications/Python\ 3.6/ReadMe.rtf

[thinkingserious]

Thanks for sharing the solution @aardvark82!

[justinhauer]

@aardvark82 I would buy you a beer if you lived near me, that fix has been tricking me out for a while

[gitspokeefe]

@aardvark82 @thinkingserious

• Running /Applications/Python\ 3.7/Install\ Certificates.command solves this problem on my localhost environment, but it does not solve the problem on Ubuntu 16.04.
• I'm having this exact error -> installing certifi is not correcting the problem

• How do I run the equivalent of/Applications/Python\ 3.7/Install\ Certificates.command on Ubuntu 16.04?

[waltersdmh]

@aardvark82 @thinkingserious

• Running /Applications/Python\ 3.7/Install\ Certificates.command solves this problem on my localhost environment, but it does not solve the problem on Ubuntu 16.04.
• I'm having this exact error -> installing certifi is not correcting the problem
• How do I run the equivalent of/Applications/Python\ 3.7/Install\ Certificates.command on Ubuntu 16.04?

Also having this problem with Debian 8. Checked that python3-certifi is installed but not working still.

[JoniFlies]

Also having this Problems on Windows :)

[matthewepler]

When running /Applications/Python\ 3.7/Install\ Certificates.command on MacOS for Python 3.7, I get the following error:

-- pip install --upgrade certifi
/Library/Frameworks/Python.framework/Versions/3.7/bin/python3.7: No module named pip.__main__; 'pip' is a package and cannot be directly executed
Traceback (most recent call last):
  File "<stdin>", line 44, in <module>
  File "<stdin>", line 25, in main
  File "/Library/Frameworks/Python.framework/Versions/3.7/lib/python3.7/subprocess.py", line 347, in check_call
    raise CalledProcessError(retcode, cmd)
subprocess.CalledProcessError: Command '['/Library/Frameworks/Python.framework/Versions/3.7/bin/python3.7', '-E', '-s', '-m', 'pip', 'install', '--upgrade', 'certifi']' returned non-zero exit status 1.

[elinaldosoft]

I'm using the Python 3.8 (Mac), I solved it that way

/Applications/Python\ 3.8/Install\ Certificates.command