Ubuntu 14.04 LTS – Python HTTPS requests fail certificate verification

📖 ~1 min read

Table of contents

1. Symptom & Impact
2. Environment & Reproduction
3. Root Cause Analysis
4. Quick Triage
5. Step-by-Step Diagnosis
6. Solution – Primary Fix
7. Solution – Alternative Approaches
8. Verification & Acceptance Criteria
9. Rollback Plan
10. Prevention & Hardening
11. Related Errors & Cross-Refs
12. References & Further Reading

Symptom & Impact

Python clients fail outbound HTTPS calls, breaking integrations and automation jobs.

Environment & Reproduction

Seen on older runtimes with stale CA bundle or outdated TLS libraries.

Root Cause Analysis

Trust store or TLS stack cannot validate server certificates in modern chains.

Quick Triage

Test endpoint trust using openssl and compare runtime CA path settings.

Step-by-Step Diagnosis

Inspect Python SSL defaults and system CA certificate package health.

Solution – Primary Fix

Update CA certificates, align Python trust settings, and retest target endpoints.

Solution – Alternative Approaches

Pin approved intermediate certificates in controlled environments when necessary.

Verification & Acceptance Criteria

HTTPS requests complete without certificate verification exceptions.

Rollback Plan

Restore previous certificate bundles if incompatible trust changes appear.

Prevention & Hardening

Monitor CA expiry and maintain regular TLS stack updates.

Related Errors & Cross-Refs

Related errors include CERTIFICATE_VERIFY_FAILED and handshake failures.

Related tutorial: View the step-by-step tutorial for Ubuntu 14.04 LTS.

View all Ubuntu 14.04 LTS tutorials on the Tutorials Hub →

Browse all common problems & solutions on the Tutorials Hub.

References & Further Reading

Review Python SSL docs and Ubuntu CA certificate management guidance.