You can use the admin setting enable_certificate_chain_debug to troubleshoot SSL certificate issues. With this setting, certificate chain information is logged to the iManage Drive Log file. The default value of this setting is true. Example: enable_certificate_chain_debug: true.

If there are any errors related to SSL certificate verification, check:

  • If multiple certificates related to one application exist in your device's trusted root certificate store..

  • For the following error: SSLError(SSLCertVerificationError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: certificate signature failure (_ssl.c:1006)'))

Even if the SSL certificate error doesn't match the error provided above, check for duplicate certificates

  1. Identify the certificate your application is using.
    For example:
    0 s:/C=US/ST=Illinois/L=Chicago/O=iManage LLC./CN=*.<E>cloudimanage.com</E>
    i:/C=US/O=DigiCert Inc/CN=DigiCert Global G2 TLS RSA SHA256 2020 CA1
    serial_number: 01637BA44601A86C00157ECF6DB235EB
    1 s:/C=US/O=DigiCert Inc/CN=DigiCert Global G2 TLS RSA SHA256 2020 CA1
    i:/C=US/O=DigiCert Inc/OU=www.digicert.com/CN=DigiCert Global Root G2
    serial_number: 0CF5BD062B5602F47AB8502C23CCF066
    2 s:/C=US/O=DigiCert Inc/OU=www.digicert.com/CN=DigiCert Global Root G2
    i:/C=US/O=DigiCert Inc/OU=www.digicert.com/CN=DigiCert Global Root G2
    serial_number: 033AF1E6A711A9A0BB2864B11D09FAE5
    [thread=24196]

  2. Remove any unused or duplicate certificates from the trusted root.

This should resolve conflicts and prevent verification failures.