Azure / azure-cli

Azure Command-Line Interface
MIT License
3.97k stars 2.95k forks source link

[X509] unknown error (_ssl.c:4035) after upgrading to 2.54.0 #27912

Open danielstefanescu opened 9 months ago

danielstefanescu commented 9 months ago

Describe the bug

After upgrading to 2.54.0 the connection through proxy doesn't work anymore

Related command

az login

Errors

cli.azure.cli.core.azclierror: [X509] unknown error (_ssl.c:4035) az_command_data_logger: [X509] unknown error (_ssl.c:4035)

Issue script & Debug output

cli.knack.cli: Command arguments: ['login', '--debug'] cli.knack.cli: init debug log: Enable color in terminal. Enable VT mode. cli.knack.cli: Event: Cli.PreExecute [] cli.knack.cli: Event: CommandParser.OnGlobalArgumentsCreate [<function CLILogging.on_global_arguments at 0x000001E74074B560>, <function OutputProducer.on_global_arguments at 0x000001E7408D5C60>, <function CLIQuery.on_global_arguments at 0x000001E7409037E0>] cli.knack.cli: Event: CommandInvoker.OnPreCommandTableCreate [] cli.azure.cli.core: Modules found from index for 'login': ['azure.cli.command_modules.profile'] cli.azure.cli.core: Loading command modules: cli.azure.cli.core: Name Load Time Groups Commands cli.azure.cli.core: profile 0.006 2 8 cli.azure.cli.core: Total (1) 0.006 2 8 cli.azure.cli.core: These extensions are not installed and will be skipped: ['azext_ai_examples', 'azext_next'] cli.azure.cli.core: Loading extensions: cli.azure.cli.core: Name Load Time Groups Commands Directory cli.azure.cli.core: Total (0) 0.000 0 0 cli.azure.cli.core: Loaded 2 groups, 8 commands. cli.azure.cli.core: Found a match in the command table. cli.azure.cli.core: Raw command : login cli.azure.cli.core: Command table: login cli.knack.cli: Event: CommandInvoker.OnPreCommandTableTruncate [<function AzCliLogging.init_command_file_logging at 0x000001E7437794E0>] cli.azure.cli.core.azlogging: metadata file logging enabled - writing logs to 'C:\Users\danielste.azure\commands\2023-11-24.09-34-31.login.21236.log'. az_command_data_logger: command args: login --debug cli.knack.cli: Event: CommandInvoker.OnPreArgumentLoad [<function register_global_subscription_argument..add_subscription_parameter at 0x000001E7437B79C0>] cli.knack.cli: Event: CommandInvoker.OnPostArgumentLoad [] cli.knack.cli: Event: CommandInvoker.OnPostCommandTableCreate [<function register_ids_argument..add_ids_arguments at 0x000001E7437B7A60>, <function register_cache_arguments..add_cache_arguments at 0x000001E7437B7BA0>] cli.knack.cli: Event: CommandInvoker.OnCommandTableLoaded [] cli.knack.cli: Event: CommandInvoker.OnPreParseArgs [] cli.knack.cli: Event: CommandInvoker.OnPostParseArgs [<function OutputProducer.handle_output_argument at 0x000001E7408D5D00>, <function CLIQuery.handle_query_parameter at 0x000001E740903880>, <function register_ids_argument..parse_ids_arguments at 0x000001E7437B7B00>] cli.azure.cli.core.auth.persistence: build_persistence: location='C:\Users\danielste\.azure\msal_token_cache.bin', encrypt=True cli.azure.cli.core.auth.binary_cache: load: C:\Users\danielste.azure\msal_http_cache.bin urllib3.util.retry: Converted retries value: 1 -> Retry(total=1, connect=None, read=None, redirect=None, status=None) msal.authority: openid_config = {'token_endpoint': 'https://login.microsoftonline.com/organizations/oauth2/v2.0/token', 'token_endpoint_auth_methods_supported': ['client_secret_post', 'private_key_jwt', 'client_secret_basic'], 'jwks_uri': 'https://login.microsoftonline.com/organizations/discovery/v2.0/keys', 'response_modes_supported': ['query', 'fragment', 'form_post'], 'subject_types_supported': ['pairwise'], 'id_token_signing_alg_values_supported': ['RS256'], 'response_types_supported': ['code', 'id_token', 'code id_token', 'id_token token'], 'scopes_supported': ['openid', 'profile', 'email', 'offline_access'], 'issuer': 'https://login.microsoftonline.com/{tenantid}/v2.0', 'request_uri_parameter_supported': False, 'userinfo_endpoint': 'https://graph.microsoft.com/oidc/userinfo', 'authorization_endpoint': 'https://login.microsoftonline.com/organizations/oauth2/v2.0/authorize', 'device_authorization_endpoint': 'https://login.microsoftonline.com/organizations/oauth2/v2.0/devicecode', 'http_logout_supported': True, 'frontchannel_logout_supported': True, 'end_session_endpoint': 'https://login.microsoftonline.com/organizations/oauth2/v2.0/logout', 'claims_supported': ['sub', 'iss', 'cloud_instance_name', 'cloud_instance_host_name', 'cloud_graph_host_name', 'msgraph_host', 'aud', 'exp', 'iat', 'auth_time', 'acr', 'nonce', 'preferred_username', 'name', 'tid', 'ver', 'at_hash', 'c_hash', 'email'], 'kerberos_endpoint': 'https://login.microsoftonline.com/organizations/kerberos', 'tenant_region_scope': None, 'cloud_instance_name': 'microsoftonline.com', 'cloud_graph_host_name': 'graph.windows.net', 'msgraph_host': 'graph.microsoft.com', 'rbac_url': 'https://pas.windows.net'} msal.application: Broker enabled? True msal.application: Falls back to broker._signin_interactively() cli.azure.cli.core.auth.identity: Please select the account you want to log in with. msal.broker: [MSAL:0001] INFO SetCorrelationId:220 Set correlation ID: a94ee503-bcb3-46ff-a80c-fb14256d95c2msal.broker: [MSAL:0001] INFO ExecuteInteractiveRequest:804 The original authority is 'https://login.microsoftonline.com/organizations' msal.broker: [MSAL:0001] WARNING TryNormalizeRealm:2224 No HomeAccountId provided to normalize the realm msal.broker: [MSAL:0001] INFO ExecuteInteractiveRequest:815 The normalized realm is '' msal.broker: [MSAL:0001] INFO ModifyAndValidateAuthParameters:208 Additional query parameter added successfully. Key: '(pii)' Value: '(pii)' msal.broker: [MSAL:0001] INFO ModifyAndValidateAuthParameters:208 Additional query parameter added successfully. Key: '(pii)' Value: '(pii)' msal.broker: [MSAL:0001] INFO ModifyAndValidateAuthParameters:225 Authority Realm: organizations msal.broker: [MSAL:0002] WARNING TryReadUniversalStorage:639 Attempted to read cache with a non-normalized realm, access token and ID token reads will fail msal.broker: [MSAL:0002] WARNING ReadAccountById:225 Account id is empty - account not found msal.broker: [MSAL:0002] INFO SetCanonicalRealm:1048 Normalize realm to: '1ac04339-8417-4387-b32c-9a9526779033' msal.broker: [MSAL:0002] ERROR ErrorInternalImpl:134 Created an error: 9zj2r, StatusInternal::Unexpected, InternalEvent::None, Error Code 2148073483, Context 'Error decrypting data of size 506' msal.broker: [MSAL:0002] WARNING DecryptParse:964 Failed to decrypt '(pii)', overwriting msal.broker: [MSAL:0002] ERROR ErrorInternalImpl:134 Created an error: 9zj2r, StatusInternal::Unexpected, InternalEvent::None, Error Code 2148073483, Context 'Error decrypting data of size 538' msal.broker: [MSAL:0002] WARNING DecryptParse:964 Failed to decrypt '(pii)', overwriting msal.broker: [MSAL:0002] INFO LogTelemetryData:332 Printing Telemetry for Correlation ID: a94ee503-bcb3-46ff-a80c-fb14256d95c2 msal.broker: [MSAL:0002] INFO LogTelemetryData:340 Key: start_time, Value: 2023-11-24T07:34:31.000Z msal.broker: [MSAL:0002] INFO LogTelemetryData:340 Key: api_name, Value: SignInInteractively msal.broker: [MSAL:0002] INFO LogTelemetryData:340 Key: was_request_throttled, Value: false msal.broker: [MSAL:0002] INFO LogTelemetryData:340 Key: authority_type, Value: AAD msal.broker: [MSAL:0002] INFO LogTelemetryData:340 Key: access_token_expiry_time, Value: 2023-11-24T08:05:10.000Z msal.broker: [MSAL:0002] INFO LogTelemetryData:340 Key: msal_version, Value: 1.1.0+local msal.broker: [MSAL:0002] INFO LogTelemetryData:340 Key: client_id, Value: 04b07795-8ddb-461a-bbee-02f9e1bf7b46 msal.broker: [MSAL:0002] INFO LogTelemetryData:340 Key: correlation_id, Value: a94ee503-bcb3-46ff-a80c-fb14256d95c2 msal.broker: [MSAL:0002] INFO LogTelemetryData:340 Key: stop_time, Value: 2023-11-24T07:34:37.000Z msal.broker: [MSAL:0002] INFO LogTelemetryData:340 Key: msalruntime_version, Value: 0.13.12 msal.broker: [MSAL:0002] INFO LogTelemetryData:340 Key: original_authority, Value: https://login.microsoftonline.com/organizations msal.broker: [MSAL:0002] INFO LogTelemetryData:340 Key: request_eligible_for_broker, Value: true msal.broker: [MSAL:0002] INFO LogTelemetryData:340 Key: broker_app_used, Value: true msal.broker: [MSAL:0002] INFO LogTelemetryData:340 Key: additional_query_parameters_count, Value: 2 msal.broker: [MSAL:0002] INFO LogTelemetryData:340 Key: read_token_last_error, Value: missing required parameter msal.broker: [MSAL:0002] INFO LogTelemetryData:340 Key: auth_flow, Value: Broker msal.broker: [MSAL:0002] INFO LogTelemetryData:340 Key: ui_event_count, Value: 1 msal.broker: [MSAL:0002] INFO LogTelemetryData:340 Key: wam_telemetry, Value: {"x_ms_clitelem":"1,0,0,50640297.4093,","ui_visible":false,"tenant_id":"1ac04339-8417-4387-b32c-9a9526779033","scope":"https://management.core.windows.net//.default offline_access openid profile","redirect_uri":"ms-appx-web://Microsoft.AAD.BrokerPlugin/04b07795-8ddb-461a-bbee-02f9e1bf7b46","provider_id":"https://login.windows.net","http_status":200,"http_event_count":2,"device_join":"haadj","correlation_id":"{1a27815c-6f7a-47a3-9eb7-d6fc6045d4c2}","client_id":"04b07795-8ddb-461a-bbee-02f9e1bf7b46","cache_event_count":0,"broker_version":"10.0.18362.1766","authority":"https://login.microsoftonline.com/organizations","api_error_code":0,"account_join_on_start":"primary","account_join_on_end":"primary","account_id":"81c1e8af-bbc1-47e9-b599-3136dc13a470","silent_code":0,"silent_bi_sub_code":0,"silent_message":"","silent_mats":{"x_ms_clitelem":"1,0,0,50640297.4093,","ui_visible":false,"tenant_id":"1ac04339-8417-4387-b32c-9a9526779033","scope":"https://management.core.windows.net//.default offline_access openid profile","redirect_uri":"ms-appx-web://Microsoft.AAD.BrokerPlugin/04b07795-8ddb-461a-bbee-02f9e1bf7b46","provider_id":"https://login.windows.net","http_status":200,"http_event_count":2,"device_join":"haadj","correlation_id":"{1a27815c-6f7a-47a3-9eb7-d6fc6045d4c2}","client_id":"04b07795-8ddb-461a-bbee-02f9e1bf7b46","cache_event_count":0,"broker_version":"10.0.18362.1766","authority":"https://login.microsoftonline.com/organizations","api_error_code":0,"account_join_on_start":"primary","account_join_on_end":"primary","account_id":"81c1e8af-bbc1-47e9-b599-3136dc13a470","silent_code":0,"silent_bi_sub_code":0,"silent_message":"","silent_mats":{"x_ms_clitelem":"1,0,0,50640297.4093,","ui_visible":false,"tenant_id":"1ac04339-8417-4387-b32c-9a9526779033","scope":"https://management.core.windows.net//.default offline_access openid profile","redirect_uri":"ms-appx-web://Microsoft.AAD.BrokerPlugin/04b07795-8ddb-461a-bbee-02f9e1bf7b46","provider_id":"https://login.windows.net","http_status":200,"http_event_count":2,"device_join":"haadj","correlation_id":"{1a27815c-6f7a-47a3-9eb7-d6fc6045d4c2}","client_id":"04b07795-8ddb-461a-bbee-02f9e1bf7b46","cache_event_count":0,"broker_version":"10.0.18362.1766","authority":"https://login.microsoftonline.com/organizations","api_error_code":0,"account_join_on_start":"primary","account_join_on_end":"primary","account_id":"81c1e8af-bbc1-47e9-b599-3136dc13a470"},"silent_status":0,"is_cached":0},"silent_status":0,"is_cached":1} msal.broker: [MSAL:0002] INFO LogTelemetryData:340 Key: tenant_id, Value: 1ac04339-8417-4387-b32c-9a9526779033 msal.broker: [MSAL:0002] INFO LogTelemetryData:340 Key: normalized_realm, Value: 1ac04339-8417-4387-b32c-9a9526779033 msal.broker: [MSAL:0002] INFO LogTelemetryData:340 Key: write_token, Value: AT|ID msal.broker: [MSAL:0002] INFO LogTelemetryData:340 Key: is_successful, Value: true msal.broker: [MSAL:0002] INFO LogTelemetryData:340 Key: authorization_type, Value: CompleteBrokerResult msal.broker: [MSAL:0002] INFO LogTelemetryData:340 Key: request_duration, Value: 5649 msal.broker: [MSAL:0002] INFO LogTelemetryData:345 Printing Execution Flow: msal.broker: [MSAL:0002] INFO LogTelemetryData:353 {"t":"646u1","tid":1,"ts":0,"l":2},{"t":"8dqim","tid":2,"ts":4,"l":2},{"t":"8dqkl","tid":1,"ts":6,"l":2,"a":9,"ie":0},{"t":"54uxe","tid":1,"ts":10,"l":2},{"t":"4wqm9","tid":3,"ts":2165,"l":2},{"t":"8dql1","tid":3,"ts":2204,"l":2},{"t":"8dqkn","tid":3,"ts":2204,"l":2,"a":5,"ie":1},{"t":"8dqko","tid":3,"ts":2204,"l":2,"a":9,"ie":1},{"t":"8dqkr","tid":3,"ts":2204,"l":2},{"t":"8b2yn","tid":2,"ts":2204,"l":2},{"t":"8dqlh","tid":2,"ts":2204,"l":2},{"t":"8dqli","tid":2,"ts":2204,"l":2},{"t":"8dqln","tid":2,"ts":2204,"l":2},{"t":"8dqih","tid":2,"ts":2204,"l":2},{"t":"7e60p","tid":2,"ts":2205,"l":2,"a":3,"ie":0},{"t":"7e60q","tid":2,"ts":2226,"l":2,"a":3,"ie":1},{"t":"7e60v","tid":2,"ts":2226,"l":2,"a":2,"ie":0},{"t":"7e60w","tid":2,"ts":2227,"l":2,"a":2,"ie":1},{"t":"7e60r","tid":2,"ts":2227,"l":2,"a":3,"ie":0},{"t":"6ou2y","tid":2,"ts":2238,"l":2,"a":3,"ie":1},{"t":"6xuag","tid":2,"ts":2238,"l":2},{"t":"4waym","tid":2,"ts":2238,"l":2} msal.token_cache: event={ "_account_id": "81c1e8af-bbc1-47e9-b599-3136dc13a470", "client_id": "04b07795-8ddb-461a-bbee-02f9e1bf7b46", "data": {}, "response": { "_account_id": "81c1e8af-bbc1-47e9-b599-3136dc13a470", "_msalruntime_telemetry": { "access_token_expiry_time": "2023-11-24T08:05:10.000Z", "additional_query_parameters_count": "2", "api_name": "SignInInteractively", "auth_flow": "Broker", "authority_type": "AAD", "authorization_type": "CompleteBrokerResult", "broker_app_used": "true", "client_id": "04b07795-8ddb-461a-bbee-02f9e1bf7b46", "correlation_id": "a94ee503-bcb3-46ff-a80c-fb14256d95c2", "is_successful": "true", "msal_version": "1.1.0+local", "msalruntime_version": "0.13.12", "normalized_realm": "1ac04339-8417-4387-b32c-9a9526779033", "original_authority": "https://login.microsoftonline.com/organizations", "read_token_last_error": "missing required parameter", "request_duration": "5649", "request_eligible_for_broker": "true", "start_time": "2023-11-24T07:34:31.000Z", "stop_time": "2023-11-24T07:34:37.000Z", "tenant_id": "1ac04339-8417-4387-b32c-9a9526779033", "ui_event_count": "1", "was_request_throttled": "false", "write_token": "AT|ID" }, "access_token": "****", "client_info": "foobar", "expires_in": 1833, "id_token": "****", "id_token_claims": "****", "scope": "https://management.core.windows.net//user_impersonation https://management.core.windows.net//.default", "token_type": "Bearer" }, "scope": [ "https://management.core.windows.net//user_impersonation", "https://management.core.windows.net//.default" ], "token_endpoint": "https://login.microsoftonline.com/organizations/oauth2/v2.0/token" } urllib3.util.retry: Converted retries value: 1 -> Retry(total=1, connect=None, read=None, redirect=None, status=None) msal.authority: openid_config = {'token_endpoint': 'https://login.microsoftonline.com/organizations/oauth2/v2.0/token', 'token_endpoint_auth_methods_supported': ['client_secret_post', 'private_key_jwt', 'client_secret_basic'], 'jwks_uri': 'https://login.microsoftonline.com/organizations/discovery/v2.0/keys', 'response_modes_supported': ['query', 'fragment', 'form_post'], 'subject_types_supported': ['pairwise'], 'id_token_signing_alg_values_supported': ['RS256'], 'response_types_supported': ['code', 'id_token', 'code id_token', 'id_token token'], 'scopes_supported': ['openid', 'profile', 'email', 'offline_access'], 'issuer': 'https://login.microsoftonline.com/{tenantid}/v2.0', 'request_uri_parameter_supported': False, 'userinfo_endpoint': 'https://graph.microsoft.com/oidc/userinfo', 'authorization_endpoint': 'https://login.microsoftonline.com/organizations/oauth2/v2.0/authorize', 'device_authorization_endpoint': 'https://login.microsoftonline.com/organizations/oauth2/v2.0/devicecode', 'http_logout_supported': True, 'frontchannel_logout_supported': True, 'end_session_endpoint': 'https://login.microsoftonline.com/organizations/oauth2/v2.0/logout', 'claims_supported': ['sub', 'iss', 'cloud_instance_name', 'cloud_instance_host_name', 'cloud_graph_host_name', 'msgraph_host', 'aud', 'exp', 'iat', 'auth_time', 'acr', 'nonce', 'preferred_username', 'name', 'tid', 'ver', 'at_hash', 'c_hash', 'email'], 'kerberos_endpoint': 'https://login.microsoftonline.com/organizations/kerberos', 'tenant_region_scope': None, 'cloud_instance_name': 'microsoftonline.com', 'cloud_graph_host_name': 'graph.windows.net', 'msgraph_host': 'graph.microsoft.com', 'rbac_url': 'https://pas.windows.net'} msal.application: Broker enabled? True cli.azure.cli.core._debug: Connection verification disabled by environment variable AZURE_CLI_DISABLE_CONNECTION_VERIFICATION cli.azure.cli.core.auth.msal_authentication: UserCredential.get_token: scopes=('https://management.core.windows.net//.default',), claims=None, kwargs={} msal.application: Cache hit an AT msal.telemetry: Generate or reuse correlation_id: 8d9b946f-d408-4234-8792-ec74f28e43ec cli.azure.cli.core.sdk.policies: Request URL: 'https://management.azure.com/tenants?api-version=2019-11-01' cli.azure.cli.core.sdk.policies: Request method: 'GET' cli.azure.cli.core.sdk.policies: Request headers: cli.azure.cli.core.sdk.policies: 'Accept': 'application/json' cli.azure.cli.core.sdk.policies: 'x-ms-client-request-id': 'e809a827-8a9b-11ee-a582-d89ef3375ec1' cli.azure.cli.core.sdk.policies: 'CommandName': 'login' cli.azure.cli.core.sdk.policies: 'ParameterSetName': '--debug' cli.azure.cli.core.sdk.policies: 'User-Agent': 'AZURECLI/2.54.0 (MSI) azsdk-python-azure-mgmt-resource/23.1.0b2 Python/3.11.5 (Windows-10-10.0.18363-SP0)' cli.azure.cli.core.sdk.policies: 'Authorization': '' cli.azure.cli.core.sdk.policies: Request body: cli.azure.cli.core.sdk.policies: This request has no body urllib3.connectionpool: Starting new HTTPS connection (1): management.azure.com:443 cli.azure.cli.core.sdk.policies: Request URL: 'https://management.azure.com/tenants?api-version=2019-11-01' cli.azure.cli.core.sdk.policies: Request method: 'GET' cli.azure.cli.core.sdk.policies: Request headers: cli.azure.cli.core.sdk.policies: 'Accept': 'application/json' cli.azure.cli.core.sdk.policies: 'x-ms-client-request-id': 'e809a827-8a9b-11ee-a582-d89ef3375ec1' cli.azure.cli.core.sdk.policies: 'CommandName': 'login' cli.azure.cli.core.sdk.policies: 'ParameterSetName': '--debug' cli.azure.cli.core.sdk.policies: 'User-Agent': 'AZURECLI/2.54.0 (MSI) azsdk-python-azure-mgmt-resource/23.1.0b2 Python/3.11.5 (Windows-10-10.0.18363-SP0)' cli.azure.cli.core.sdk.policies: 'Authorization': '' cli.azure.cli.core.sdk.policies: Request body: cli.azure.cli.core.sdk.policies: This request has no body urllib3.connectionpool: Starting new HTTPS connection (2): management.azure.com:443 cli.azure.cli.core.sdk.policies: Request URL: 'https://management.azure.com/tenants?api-version=2019-11-01' cli.azure.cli.core.sdk.policies: Request method: 'GET' cli.azure.cli.core.sdk.policies: Request headers: cli.azure.cli.core.sdk.policies: 'Accept': 'application/json' cli.azure.cli.core.sdk.policies: 'x-ms-client-request-id': 'e809a827-8a9b-11ee-a582-d89ef3375ec1' cli.azure.cli.core.sdk.policies: 'CommandName': 'login' cli.azure.cli.core.sdk.policies: 'ParameterSetName': '--debug' cli.azure.cli.core.sdk.policies: 'User-Agent': 'AZURECLI/2.54.0 (MSI) azsdk-python-azure-mgmt-resource/23.1.0b2 Python/3.11.5 (Windows-10-10.0.18363-SP0)' cli.azure.cli.core.sdk.policies: 'Authorization': '' cli.azure.cli.core.sdk.policies: Request body: cli.azure.cli.core.sdk.policies: This request has no body urllib3.connectionpool: Starting new HTTPS connection (3): management.azure.com:443 cli.azure.cli.core.sdk.policies: Request URL: 'https://management.azure.com/tenants?api-version=2019-11-01' cli.azure.cli.core.sdk.policies: Request method: 'GET' cli.azure.cli.core.sdk.policies: Request headers: cli.azure.cli.core.sdk.policies: 'Accept': 'application/json' cli.azure.cli.core.sdk.policies: 'x-ms-client-request-id': 'e809a827-8a9b-11ee-a582-d89ef3375ec1' cli.azure.cli.core.sdk.policies: 'CommandName': 'login' cli.azure.cli.core.sdk.policies: 'ParameterSetName': '--debug' cli.azure.cli.core.sdk.policies: 'User-Agent': 'AZURECLI/2.54.0 (MSI) azsdk-python-azure-mgmt-resource/23.1.0b2 Python/3.11.5 (Windows-10-10.0.18363-SP0)' cli.azure.cli.core.sdk.policies: 'Authorization': '' cli.azure.cli.core.sdk.policies: Request body: cli.azure.cli.core.sdk.policies: This request has no body urllib3.connectionpool: Starting new HTTPS connection (4): management.azure.com:443 cli.azure.cli.core.azclierror: Traceback (most recent call last): File "D:\a_work\1\s\build_scripts\windows\artifacts\cli\Lib\site-packages\knack/cli.py", line 233, in invoke File "D:\a_work\1\s\build_scripts\windows\artifacts\cli\Lib\site-packages\azure/cli/core/commands/init.py", line 663, in execute File "D:\a_work\1\s\build_scripts\windows\artifacts\cli\Lib\site-packages\azure/cli/core/commands/init.py", line 726, in _run_jobs_serially File "D:\a_work\1\s\build_scripts\windows\artifacts\cli\Lib\site-packages\azure/cli/core/commands/init.py", line 697, in _run_job File "D:\a_work\1\s\build_scripts\windows\artifacts\cli\Lib\site-packages\azure/cli/core/commands/init.py", line 333, in call File "D:\a_work\1\s\build_scripts\windows\artifacts\cli\Lib\site-packages\azure/cli/core/commands/command_operation.py", line 121, in handler File "D:\a_work\1\s\build_scripts\windows\artifacts\cli\Lib\site-packages\azure/cli/command_modules/profile/custom.py", line 139, in login File "D:\a_work\1\s\build_scripts\windows\artifacts\cli\Lib\site-packages\azure/cli/core/_profile.py", line 176, in login File "D:\a_work\1\s\build_scripts\windows\artifacts\cli\Lib\site-packages\azure/cli/core/_profile.py", line 740, in find_using_common_tenant File "D:\a_work\1\s\build_scripts\windows\artifacts\cli\Lib\site-packages\azure/core/paging.py", line 128, in next File "D:\a_work\1\s\build_scripts\windows\artifacts\cli\Lib\site-packages\azure/core/paging.py", line 76, in next File "D:\a_work\1\s\build_scripts\windows\artifacts\cli\Lib\site-packages\azure/mgmt/resource/subscriptions/v2019_11_01/operations/_operations.py", line 739, in get_next File "D:\a_work\1\s\build_scripts\windows\artifacts\cli\Lib\site-packages\azure/core/pipeline/_base.py", line 211, in run File "D:\a_work\1\s\build_scripts\windows\artifacts\cli\Lib\site-packages\azure/core/pipeline/_base.py", line 71, in send File "D:\a_work\1\s\build_scripts\windows\artifacts\cli\Lib\site-packages\azure/core/pipeline/_base.py", line 71, in send File "D:\a_work\1\s\build_scripts\windows\artifacts\cli\Lib\site-packages\azure/core/pipeline/_base.py", line 71, in send [Previous line repeated 2 more times] File "D:\a_work\1\s\build_scripts\windows\artifacts\cli\Lib\site-packages\azure/mgmt/core/policies/_base.py", line 47, in send File "D:\a_work\1\s\build_scripts\windows\artifacts\cli\Lib\site-packages\azure/core/pipeline/policies/_redirect.py", line 158, in send File "D:\a_work\1\s\build_scripts\windows\artifacts\cli\Lib\site-packages\azure/core/pipeline/policies/_retry.py", line 468, in send File "D:\a_work\1\s\build_scripts\windows\artifacts\cli\Lib\site-packages\azure/core/pipeline/policies/_retry.py", line 446, in send File "D:\a_work\1\s\build_scripts\windows\artifacts\cli\Lib\site-packages\azure/core/pipeline/policies/_authentication.py", line 118, in send File "D:\a_work\1\s\build_scripts\windows\artifacts\cli\Lib\site-packages\azure/core/pipeline/_base.py", line 71, in send File "D:\a_work\1\s\build_scripts\windows\artifacts\cli\Lib\site-packages\azure/core/pipeline/_base.py", line 71, in send File "D:\a_work\1\s\build_scripts\windows\artifacts\cli\Lib\site-packages\azure/core/pipeline/_base.py", line 71, in send [Previous line repeated 1 more time] File "D:\a_work\1\s\build_scripts\windows\artifacts\cli\Lib\site-packages\azure/core/pipeline/_base.py", line 103, in send File "D:\a_work\1\s\build_scripts\windows\artifacts\cli\Lib\site-packages\azure/core/pipeline/transport/_requests_basic.py", line 361, in send azure.core.exceptions.ServiceRequestError: [X509] unknown error (_ssl.c:4035)

cli.azure.cli.core.azclierror: [X509] unknown error (_ssl.c:4035) az_command_data_logger: [X509] unknown error (_ssl.c:4035) Certificate verification failed. This typically happens when using Azure CLI behind a proxy that intercepts traffic with a self-signed certificate. Please add this certificate to the trusted CA bundle. More info: https://docs.microsoft.com/cli/azure/use-cli-effectively#work-behind-a-proxy. cli.knack.cli: Event: Cli.PostExecute [<function AzCliLogging.deinit_cmd_metadata_logging at 0x000001E743779760>] az_command_data_logger: exit code: 1 cli.main: Command ran in 11.973 seconds (init: 0.655, invoke: 11.318) telemetry.main: Begin splitting cli events and extra events, total events: 1 telemetry.client: Accumulated 0 events. Flush the clients. telemetry.main: Finish splitting cli events and extra events, cli events: 1 telemetry.save: Save telemetry record of length 4526 in cache telemetry.main: Begin creating telemetry upload process. telemetry.process: Creating upload process: "C:\Program Files\Microsoft SDKs\Azure\CLI2\python.exe C:\Program Files\Microsoft SDKs\Azure\CLI2\Lib\site-packages\azure\cli\telemetry__init__.pyc C:\Users\danielste.azure" telemetry.process: Return from creating process telemetry.main: Finish creating telemetry upload process.

Expected behavior

D:\a_work\1\s\build_scripts\windows\artifacts\cli\Lib\site-packages\urllib3/connectionpool.py:1056: InsecureRequestWarning: Unverified HTTPS request is being made to host 'proxy'. Adding certificate verification is strongly advised. See: https://urllib3.readthedocs.io/en/1.26.x/advanced-usage.html#ssl-warnings Connection verification disabled by environment variable AZURE_CLI_DISABLE_CONNECTION_VERIFICATION D:\a_work\1\s\build_scripts\windows\artifacts\cli\Lib\site-packages\urllib3/connectionpool.py:1056: InsecureRequestWarning: Unverified HTTPS request is being made to host 'proxy'. Adding certificate verification is strongly advised. See: https://urllib3.readthedocs.io/en/1.26.x/advanced-usage.html#ssl-warnings [ { "cloudName": "AzureCloud", "homeTenantId": "1111", "id": "1111", "isDefault": true, "managedByTenants": [], "name": "Visual Studio Professional Subscription", "state": "Enabled", "tenantId": "1111", "user": { "name": "foo@bar.com", "type": "user" } } ]

Environment Summary

azure-cli 2.54.0

core 2.54.0 telemetry 1.1.0

Extensions: azure-devops 0.26.0 devcenter 3.0.0

Dependencies: msal 1.24.0b2 azure-mgmt-resource 23.1.0b2

Python location 'C:\Program Files\Microsoft SDKs\Azure\CLI2\python.exe' Extensions directory 'C:\Users\danielste.azure\cliextensions'

Python (Windows) 3.11.5 (tags/v3.11.5:cce6ba9, Aug 24 2023, 14:38:34) [MSC v.1936 64 bit (AMD64)]

Additional context

Reverting back to 2.53.0 it fixed the issue

yonzhan commented 9 months ago

Thank you for opening this issue, we will look into it.

jiasli commented 9 months ago

This could be related to https://github.com/python/cpython/issues/108721.