aws s3 ls - SSL validation failed for https://s3.amazonaws.com/ [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:749)

[sigamani30]

im getting SSL verification failed for all the aws cli commands.
Im trying in powershell below are the versions.

aws-cli/1.16.155 Python/3.6.0 Windows/10 botocore/1.12.145

Below is my debug information :
C:\Program Files (x86)\AWS Tools\PowerShell\AWSPowerShell> aws s3 ls debug

File "C:\Program Files\Amazon\AWSCLI\runtime\lib\site-packages\urllib3\connectionpool.py", line 600, in urlopen
chunked=chunked)
File "C:\Program Files\Amazon\AWSCLI\runtime\lib\site-packages\urllib3\connectionpool.py", line 343, in _make_request
self._validate_conn(conn)
File "C:\Program Files\Amazon\AWSCLI\runtime\lib\site-packages\urllib3\connectionpool.py", line 839, in validate_conn
conn.connect()
File "C:\Program Files\Amazon\AWSCLI\runtime\lib\site-packages\urllib3\connection.py", line 344, in connect
ssl_context=context)
File "C:\Program Files\Amazon\AWSCLI\runtime\lib\site-packages\urllib3\util\ssl.py", line 345, in ssl_wrap_socket
return context.wrap_socket(sock, server_hostname=server_hostname)
File "ssl.py", line 401, in wrap_socket
File "ssl.py", line 808, in init
File "ssl.py", line 1061, in do_handshake
File "ssl.py", line 683, in do_handshake
ssl.SSLError: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:749)

Could some one help me on the issue.?

[justnance]

@sigamani30 - Thank for reporting this issue. We need a bit more information:

What version of Python is in use?
How was Python install?
How did you install the CLI?
Is there a proxy in place?

Related GitHub issues: #2373 and #1499

[sigamani30]

The version of python we use is Python/3.6.0.
CLI we have installed using the msi installer which was downloded from aws website.
We donot have any proxies in our environment.

[sigamani30]

And the ssl version is below...

_ssl.OPENSSL_VERSION
'OpenSSL 1.0.2k 26 Jan 2017

[kyleknap]

Thanks for the responses. I'm not able to reproduce. Is this only happening to you for S3? Can you make any other AWS API calls with the CLI? Could you also provide debug logs from running the command? You can do so by appending --debug to the command you ran.

[no-response]

This issue has been automatically closed because there has been no response to our request for more information from the original author. With only the information that is currently in the issue, we don't have enough information to take action. Please reach out if you have or find the answers we need so that we can investigate further.