SSLError: Certificate Verify Failed error for JIRA request with the executable

[krishtej23]

I am trying to make a connection to JIRA server using python and below is code:

from jira import JIRA
server =  'https://jira.company.com:444/'
usrnme = input("Enter UserId: ")
pwd = getpass()
jira_instance = JIRA(server = server, basic_auth=(usrnme, pwd))

When this code is run in powershell, I used to get this error:

runfile('C:/Users/desktop/JiraConnection.py', wdir='C:/Users/desktop')
WARNING:root:HTTPSConnectionPool(host='jira.company.com', port=444): Max retries exceeded with url: /rest/api/2/serverInfo (Caused by SSLError(SSLCertVerificationError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: self signed certificate in certificate chain (_ssl.c:1051)'))) while doing GET https://jira.company.com:444/rest/api/2/serverInfo [{'params': None, 'headers': {'User-Agent': 'python-requests/2.25.1', 'Accept-Encoding': 'gzip, deflate', 'Accept': 'application/json,*.*;q=0.9', 'Connection': 'keep-alive', 'Cache-Control': 'no-cache', 'Content-Type': 'application/json', 'X-Atlassian-Token': 'no-check'}}]
WARNING:root:Got ConnectionError [HTTPSConnectionPool(host='jira.company.com', port=444): Max retries exceeded with url: /rest/api/2/serverInfo (Caused by SSLError(SSLCertVerificationError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: self signed certificate in certificate chain (_ssl.c:1051)')))] errno:None on GET https://jira.company.com:444/rest/api/2/serverInfo
{'response': None, 'request': <PreparedRequest [GET]>}
{'response': None, 'request': <PreparedRequest [GET]>}
WARNING:root:Got recoverable error from GET https://jira.company.com:444/rest/api/2/serverInfo, will retry [1/3] in 12.00957322719334s. Err: HTTPSConnectionPool(host='jira.company.com', port=444): Max retries exceeded with url: /rest/api/2/serverInfo (Caused by SSLError(SSLCertVerificationError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: self signed certificate in certificate chain (_ssl.c:1051)')))
Traceback (most recent call last):

  File "C:\Users\desktop\JiraConnection.py", line 6, in <module>
    jira_instance = JIRA(server = server, basic_auth=(usrnme, pwd))

  File "C:\ProgramData\Anaconda3\lib\site-packages\jira\client.py", line 506, in __init__
    si = self.server_info()

  File "C:\ProgramData\Anaconda3\lib\site-packages\jira\client.py", line 2551, in server_info
    j = self._get_json("serverInfo")

  File "C:\ProgramData\Anaconda3\lib\site-packages\jira\client.py", line 3139, in _get_json
    r = self._session.get(url, params=params)

  File "C:\ProgramData\Anaconda3\lib\site-packages\jira\resilientsession.py", line 172, in get
    return self.__verb("GET", url, **kwargs)

  File "C:\ProgramData\Anaconda3\lib\site-packages\jira\resilientsession.py", line 156, in __verb
    response_or_exception, url, verb.upper(), retry_number

  File "C:\ProgramData\Anaconda3\lib\site-packages\jira\resilientsession.py", line 120, in __recoverable
    logging.debug("response.headers: %s", response.headers)

AttributeError: 'SSLError' object has no attribute 'headers'

To resolve this I installed python-certifi-win32 and everything works perfectly in powershell. Now, I want to make the code as executable and so used PyInstaller and it creates an executable but when I try to run and make a jira connection, I get the above error again. Is there a way to package this certificate verification in my code or in the executable to solve the SSLError? Please help.
Thank you very much.

[rokm]

Looks like python-certifi-win32 uses site and .pth file to call its bootstrap code. I very much doubt that works with pyinstaller.

But perhaps you can try performing the same bootstrap steps at the beginning of your application (under sys.frozen check so that it applies only to frozen application).

[krishtej23]

Ok. I have one last question, I zipped ONLY the .exe file from dist folder and shared it with my colleague to test. It throwed an error saying there is no Python39.dll. Should I transfer all the contents in the dist folder and not just the .exe file when sharing with other people?

[rokm]

If you're making a onedir build, you need the whole dist folder.

[krishtej23]

how to build a standalone .exe file?

[krishtej23]

Got it. I used --onefile to get a single executable. A big thanks for all the support Rok.

[rokm]

There is no "standalone" .exe, because you always need supporting shared libraries (like python39.dll). There is a onefile mode, though, which puts all those files from dist directory into an embedded archive and extracts them into temporary directory each time you run it. You can enable that with --onefile command-line switch.