SSL: certificate_verify_failed

thank you for this solution!! I have been experiencing the same issue; I had to export every certificate in the chain - just having the zscaler root was not sufficient. in my case, i’m working in a python:3 docker container, so I brought the three exported Zscaler certs into my container like this:

[assuming that I mapped my local certs folder into ‘~/local’ within the container - but it doesn’t matter how you get them into the /usr/local/share/ca-certificates folder, as long as they’re in place when you run the update-ca-certificates command]

cp ~/local/*.crt  /usr/local/share/ca-certificates 
chmod 644 /usr/local/share/ca-certificates/*.crt

, then you can set the REQUESTS_CA_BUNDLE in one of a variety of ways, e.g.:

os.environ['REQUESTS_CA_BUNDLE'] = '/etc/ssl/certs/ca-certificates.crt'