Keycloak 20.0.1 and flask-oidc issue

Getting advice
,
1

Hi, I have have vm running keycloak with certs for https, these are valid certs with Globalsign as issuer. So then thought that my flask app running flask-oidc should be able to verfiy the certificate, but instead after pressing login to keycloak i get ssl.SSLCertVerificationError: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: unable to get local issuer certificate (_ssl.c:1129)

Anyone know how to solve this?
I thought that as long as the rootCA is available in httlib2 that flask-oidc uses it would validate, but it does not. I have checked that httplib2 has the rootCA for my certificates, and it is there. Could not find the intermediary cert, but added it manual, but still it fails

2

@Snadder can you please share the solution here?. I am also facing the similar issue.

2023-04-12,10:19:00.620 ERROR {__init__} [_validate_token] ERROR: Unable to get token info
2023-04-12,10:19:00.621 ERROR {__init__} [_validate_token] [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: unable to get local issuer certificate (_ssl.c:1007)

The same client_secrets.json is working fine with unsecured keycloak endpoints but throws the above error with secured keycloak endpoints.

So I need suggestions on adding secured keycloak endpoints to the client_secrets.json file.