Repository navigation
ERROR: 'OpenSSL.crypto' has no attribute 'sign' #2554
Description
Environment details
- OS type and version: ubuntu:20.04 and macOs 14.7.1
- Python version: 3.11
- pip version: I dont use pip y use Poetry 1.5.1
google-api-python-clientversion: 2.159.0
Steps to reproduce
- Install google-api-python-client with pip, pdm, poetry, hatch... it doesn't matter
- Use the method oauth to authenticate
from oauth2client.service_account import ServiceAccountCredentials - use .execute() method of any googleapi method
- this retrieves the error 'OpenSSL.crypto' has no attribute 'sign'
Why does this happen?
Because you are importing oauth2client on the line https://github.com/googleapis/google-api-python-client/blob/main/googleapiclient/_auth.py#L33 and it is deprecated, oauth2client uses openssl with the method sign and openssl removed the method sign on the version 24.3.0.
So if you install openssl >= 24.3.0, and if you use the oauth2client.service_account from googleapiclient this will retrieves you the error
ERROR: module 'OpenSSL.crypto' has no attribute 'sign'
How to solves this?
Set a constraint of openssl >= 24.3.0 on googleapiclient or dont import oauth2client on googleapi anymore.
Activity
VincentLa commentedon Jan 30, 2025
Clarification question: do you mean set a constraint of openssl < 24.3.0 to avoid the error?
Rodrigo-Novas commentedon Jan 31, 2025
@VincentLa
I do think that having an openssl constraint while oauth2client is still there would be the right thing to do
python3-google-auth: Disable TestDecryptPrivateKey ptest
python3-google-auth: Disable TestDecryptPrivateKey ptest
vchudnov-g commentedon Apr 24, 2025
Thanks for reporting this issue! We will investigate.
h0nIg commentedon Jun 3, 2025
@vchudnov-g @VincentLa you should not set a constraint to use an older pyopenssl version, please stop using oauth2client - which is deprecated since 2018 and the repo is archived! https://github.com/googleapis/oauth2client
daniel-sanche commentedon Feb 26, 2026
oauth2client is unsupported, so I think this can be closed
wookayin commentedon Feb 26, 2026
I see this error happening with particular versions of gsutil and PyopenSSL; not necessarily a sole problem of oauthclient.
daniel-sanche commentedon Feb 27, 2026
Can you post a reproductive sample? The original bug report was focused on using
oauth2client, but if you can share another way to reproduce the error, I can take a lookh0nIg commentedon Apr 7, 2026
@daniel-sanche gsutil is deprecated: https://docs.cloud.google.com/storage/docs/gsutil-transition-to-gcloud