-
Notifications
You must be signed in to change notification settings - Fork 3.3k
Description
Related command
az login
Is your feature request related to a problem? Please describe.
az login is failing behind proxy/VPN as of azure-cli 2.77.0 with
Error: could not run CLI command: failed to run 'az login': failed to wait for '/opt/homebrew/bin/az login': exit status 1. stdout='', stderr='ERROR: HTTPSConnectionPool(host='login.microsoftonline.com', port=443): Max retries exceeded with url: /organizations/v2.0/.well-known/openid-configuration (Caused by SSLError(SSLCertVerificationError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: Missing Authority Key Identifier (_ssl.c:1032)')))
Certificate verification failed. This typically happens when using Azure CLI behind a proxy that intercepts traffic with a self-signed certificate. Please add this certificate to the trusted CA bundle. More info: https://learn.microsoft.com/cli/azure/use-cli-effectively#work-behind-a-proxy.
due to proxy/VPN certificates missing Authority Key Identifier and Python 3.13 requiring it. It will take time to get certs fixed.
The only officially supported way to manage azure-cli on Mac OS is with Homebrew azure-cli. Current Homebrew formula installs 2.77.0 and depends on Python 3.13. Homebrew does not support rolling back / installing previous version.
Describe the solution you'd like
Support installing / rolling back to previous azure-cli version, with Homebrew (by adding an extra azure-cli formula or adding support to Homebrew in general), or without Homebrew, so when breaking changes get introduced we can safely test and rollback, without losing access to Azure.
Describe alternatives you've considered
Tried finding a way to override the default and configure a different Python version (e.g. [email protected]) to be used by azure-cli 2.77.0 instead of one in the formula but that doesn't seem possible either, in Homebrew or az CLI itself.
Additional context