O365 auth Caught exception while requesting OAuth 2.0

[davidstanaway]

Caught exception while requesting OAuth 2.0 credentials for account [email protected]: URLError(SSLCertVerificationError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: certificate has expired (_ssl.c:1123)'))

[[email protected]]
permission_url = https://login.microsoftonline.com/mytenantid/oauth2/v2.0/authorize
token_url = https://login.microsoftonline.com/mytenantid/oauth2/v2.0/token
oauth2_scope = https://outlook.office.com/IMAP.AccessAsUser.All https://outlook.office.com/POP.AccessAsUser.All https://outlook.office.com/SMTP.Send offline_access
redirect_uri = http://localhost
client_id = myappid

[emailproxy]
use_login_password_as_client_credentials_secret = True

Email client is thunderbird with IMAP (Will be using same config for someone that needs to use Eudora [Don't ask!] once validated and I am happy with the config.

App registration has these permissions
Microsoft Graph
IMAP.AccessAsUser.All | Delegated | Read and write access to mailboxes via IMAP.
POP.AccessAsUser.All | Delegated | Read and write access to mailboxes via POP.
SMTP.Send | Delegated | Send emails from mailboxes using SMTP AUTH.
User.Read

Log context: Authentication is successful, first use has be approve the application which is done.

2024-12-14 00:08:16: Authorisation request received for [email protected] (interactive mode)
2024-12-14 00:08:16: Please authorise your account [email protected] from the menu
2024-12-14 00:08:16: Authorisation request received for [email protected] (interactive mode)
2024-12-14 00:08:16: Please authorise your account [email protected] from the menu
2024-12-14 00:09:43: Returning authorisation request result for [email protected]
2024-12-14 00:09:43: Returning authorisation request result for [email protected]
2024-12-14 00:09:43: Authentication completed for [email protected]
2024-12-14 00:09:43: Caught exception while requesting OAuth 2.0 credentials for account [email protected]: URLError(SSLCertVerificationError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: certificate has expired (_ssl.c:1123)'))
2024-12-14 00:09:43: Caught exception while requesting OAuth 2.0 credentials for account [email protected]: URLError(SSLCertVerificationError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: certificate has expired (_ssl.c:1123)'))

I am not sure what certificate is expired. the tenant/directory ID is correct and the login URLs are successfully accessed in my browser without cert issues.

[cmchick]

Expired certs might mean your date and time is not set correctly. Verify that your host's clock is accurate.

Coincidentally I am doing the same thing: testing with Thunderbird with intent to deploy for a coworker who is metaphorically married to Eudora.

[simonrob]

In addition to the date/time suggestion (which is valid), I'd also recommend taking a look at previous similar issues (e.g., this one). You might benefit from installing certifi (python -m pip install certifi) – even if the browser certificates are up-to-date, the ones used by the proxy may not be.