PG Admin 4 - SSL: CERTIFICATE_VERIFY_FAILED CA cert does not include key usage extension

[Githubruss1972]

In version of 9.9, I am seeing this error upon opening up the application:

<urlopen error [SSL : CERTIFICATE_VERIFY_FAILED] CA cert does not include key usage extension )-ssl.c:1032)>

I have made no changes to the setting or connections with PG Admin 4

[Githubruss1972]

The error causes the application to freeze - I am unable to select any of the menu options or do anything within the app

[adityatoshniwal]

@Githubruss1972 This is most likely the update check API failing. I'm sure it will not affect app usage.

[yogeshmahajan-1903]

@Githubruss1972
Can you please share complete pgadmin logs?

[Githubruss1972]

@Githubruss1972 Can you please share complete pgadmin logs?

ERROR pgadmin: <urlopen error [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: CA cert does not include key usage extension (_ssl.c:1032)>
Traceback (most recent call last):
File "urllib\request.py", line 1319, in do_open
File "http\client.py", line 1338, in request
File "http\client.py", line 1384, in _send_request
File "http\client.py", line 1333, in endheaders
File "http\client.py", line 1093, in _send_output
File "http\client.py", line 1037, in send
File "http\client.py", line 1479, in connect
File "ssl.py", line 455, in wrap_socket
File "ssl.py", line 1076, in _create
File "ssl.py", line 1372, in do_handshake
ssl.SSLCertVerificationError: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: CA cert does not include key usage extension (_ssl.c:1032)

During handling of the above exception, another exception occurred:

Traceback (most recent call last):
File "C:\Users<username>\AppData\Local\Programs\pgAdmin 4\web\pgadmin\misc_init_.py", line 385, in upgrade_check
response = urlopen(url, data, 5)
File "urllib\request.py", line 189, in urlopen
File "urllib\request.py", line 489, in open
File "urllib\request.py", line 506, in _open
File "urllib\request.py", line 466, in _call_chain
File "urllib\request.py", line 1367, in https_open
File "urllib\request.py", line 1322, in do_open
urllib.error.URLError: <urlopen error [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: CA cert does not include key usage extension (_ssl.c:1032)>

[akshay-joshi]

@Githubruss1972,

Can you please try to run the command below and check again
/Applications/Python\ 3.x/Install\ Certificates.command on OSX
python -m pip install --upgrade certifi on Windows

[spanevin]

Just installed 9.9, same issue (windows 11).

python -m pip install --upgrade certifi on Windows

Python was not found; run without arguments to install from the Microsoft Store, or disable this shortcut from Settings > Apps > Advanced app settings > App execution aliases.

[spanevin]

Just updated to 9.10

<urlopen error [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: Missing Authority Key Identifier (_ssl.c:1032)>

[akshay-joshi]

@spanevin, @Githubruss1972

Can you please try installing certificate using python "C:\Program Files (x86)\pgAdmin 4\python"
python -m pip install --upgrade certifi

[CD21Armand]

@akshay-joshi
Hi,
I'm experiencing the same problem after updating pgAdmin to version 9.10 : <urlopen error [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: unable to get local issuer certificate (_ssl.c:1032)>

I tried your command from the python.exe program, but I get the following error: invalid syntax.

[yogeshmahajan-1903]

Can you please try the command below with PowerShell

"C:\Program Files (x86)\pgAdmin 4\python\python.exe" -m pip install --upgrade certifi

[CD21Armand]

I tried your command, but although it executed successfully, it did not fix the problem.
For your information, below is the exact syntax under Windows.