Error log for serverfault question "gcloud auth activate-service-account"

ACLs

$gsutil acl get gs://mybucket
[
  {
    "entity": "project-owners-1234567890",
    "projectTeam": {
      "projectNumber": "1234567890",
      "team": "owners"
    },
    "role": "OWNER"
  },
  {
    "entity": "project-editors-1234567890",
    "projectTeam": {
      "projectNumber": "1234567890",
      "team": "editors"
    },
    "role": "OWNER"
  },
  {
    "entity": "project-viewers-1234567890",
    "projectTeam": {
      "projectNumber": "1234567890",
      "team": "viewers"
    },
    "role": "READER"
  },
  {
    "email": "1234567890-ljfljkalksjdlkwjlkdjwqlkjdlqjdld@developer.gserviceaccount.com",
    "entity": "user-1234567890-ljfljkalksjdlkwjlkdjwqlkjdlqjdld@developer.gserviceaccount.com",
    "role": "OWNER"
  }
]

first command

$gsutil -D cp tempfile gs://mybucket
***************************** WARNING *****************************
*** You are running gsutil with debug output enabled.
*** Be aware that debug output includes authentication credentials.
*** Make sure to remove the value of the Authorization header for
*** each HTTP request printed to the console prior to posting to
*** a public medium such as a forum post or Stack Overflow.
***************************** WARNING *****************************
gsutil version 4.3
checksum 63637f5ea86f5c2966267c5123f928b2 (!= f6a4b1f8400e2d1d145c9ec5e9ea8d90)
boto version 2.29.1
python version 2.7.3 (default, Mar 13 2014, 11:03:55)
[GCC 4.7.2]
config path: /etc/boto.cfg
gsutil path: /usr/local/share/google/google-cloud-sdk/platform/gsutil/gsutil
compiled crcmod: False
installed via package manager: False
editable install: False
Command being run: /usr/local/share/google/google-cloud-sdk/platform/gsutil/gsutil -o GSUtil:default_project_id=XXXXX -D cp tempfile gs://mybucket
config_file_list: ['/root/.config/gcloud/legacy_credentials/gitolite-backups/.boto', '/etc/boto.cfg']
config: [('debug', '0'), ('working_dir', '/mnt/pyami'), ('https_validate_certificates', 'true'), ('debug', '0'), ('working_dir', '/mnt/pyami'), ('default_project_id', 'XXXXX'), ('default_api_version', '2')]
Calling method storage.buckets.get with StorageBucketsGetRequest: <StorageBucketsGetRequest
 bucket: u'mybucket'
 projection: ProjectionValueValuesEnum(full, 0)>
Making http GET to https://www.googleapis.com/storage/v1/b/mybucket?fields=versioning&alt=json&projection=full&prettyPrint=True
Headers: {'accept': 'application/json',
 'accept-encoding': 'gzip, deflate',
 'content-length': '0',
 'user-agent': 'apitools gsutil/4.3 (linux2) Cloud SDK Command Line Tool'}
Body: (none)
Attempting refresh to obtain initial access_token
{'iss': 'gitolite-backups', 'scope': 'https://www.googleapis.com/auth/devstorage.full_control', 'aud': 'https://accounts.google.com/o/oauth2/token', 'exp': 123456789, 'iat': 123456789}
DEBUG: Exception stack trace:
    Traceback (most recent call last):
      File "/usr/local/share/google/google-cloud-sdk/platform/gsutil/gslib/__main__.py", line 420, in _RunNamedCommandAndHandleExceptions
        debug_level, parallel_operations)
      File "/usr/local/share/google/google-cloud-sdk/platform/gsutil/gslib/command_runner.py", line 194, in RunNamedCommand
        return_code = command_inst.RunCommand()
      File "/usr/local/share/google/google-cloud-sdk/platform/gsutil/gslib/commands/cp.py", line 722, in RunCommand
        bucket = self._GetBucketWithVersioningConfig(exp_dst_url)
      File "/usr/local/share/google/google-cloud-sdk/platform/gsutil/gslib/commands/cp.py", line 903, in _GetBucketWithVersioningConfig
        (exp_dst_url.GetUrlString(), e.message))
    CommandException: CommandException: Error retrieving destination bucket gs://mybucket/: [('PEM routines', 'PEM_read_bio', 'no start line')]

second command

$gsutil -D cp tempfile gs://mybucket/tempfile
***************************** WARNING *****************************
*** You are running gsutil with debug output enabled.
*** Be aware that debug output includes authentication credentials.
*** Make sure to remove the value of the Authorization header for
*** each HTTP request printed to the console prior to posting to
*** a public medium such as a forum post or Stack Overflow.
***************************** WARNING *****************************
gsutil version 4.3
checksum 63637f5ea86f5c2966267c5123f928b2 (!= f6a4b1f8400e2d1d145c9ec5e9ea8d90)
boto version 2.29.1
python version 2.7.3 (default, Mar 13 2014, 11:03:55)
[GCC 4.7.2]
config path: /etc/boto.cfg
gsutil path: /usr/local/share/google/google-cloud-sdk/platform/gsutil/gsutil
compiled crcmod: False
installed via package manager: False
editable install: False
Command being run: /usr/local/share/google/google-cloud-sdk/platform/gsutil/gsutil -o GSUtil:default_project_id=XXXXX -D cp tempfile gs://mybucket/tempfile
config_file_list: ['/root/.config/gcloud/legacy_credentials/gitolite-backups/.boto', '/etc/boto.cfg']
config: [('debug', '0'), ('working_dir', '/mnt/pyami'), ('https_validate_certificates', 'true'), ('debug', '0'), ('working_dir', '/mnt/pyami'), ('default_project_id', 'XXXXX'), ('default_api_version', '2')]
DEBUG: wildcard=tempfile_$folder$, prefix=tempfile_$folder$, delimiter=/, prefix_wildcard=tempfile_$folder$, suffix_wildcard=
Calling method storage.objects.list with StorageObjectsListRequest: <StorageObjectsListRequest
 bucket: u'mybucket'
 delimiter: '/'
 maxResults: 500
 prefix: u'tempfile_$folder$'
 projection: ProjectionValueValuesEnum(full, 0)
 versions: False>
Making http GET to https://www.googleapis.com/storage/v1/b/mybucket/o?projection=full&prettyPrint=True&versions=False&fields=prefixes%2CnextPageToken%2Citems%2Fname&prefix=tempfile_%24folder%24&maxResults=500&delimiter=%2F&alt=json
Headers: {'accept': 'application/json',
 'accept-encoding': 'gzip, deflate',
 'content-length': '0',
 'user-agent': 'apitools gsutil/4.3 (linux2) Cloud SDK Command Line Tool'}
Body: (none)
Attempting refresh to obtain initial access_token
{'iss': 'gitolite-backups', 'scope': 'https://www.googleapis.com/auth/devstorage.full_control', 'aud': 'https://accounts.google.com/o/oauth2/token', 'exp': 1234567890L, 'iat': 1234567890L}
DEBUG: Exception stack trace:
    Traceback (most recent call last):
      File "/usr/local/share/google/google-cloud-sdk/platform/gsutil/gslib/__main__.py", line 420, in _RunNamedCommandAndHandleExceptions
        debug_level, parallel_operations)
      File "/usr/local/share/google/google-cloud-sdk/platform/gsutil/gslib/command_runner.py", line 194, in RunNamedCommand
        return_code = command_inst.RunCommand()
      File "/usr/local/share/google/google-cloud-sdk/platform/gsutil/gslib/commands/cp.py", line 713, in RunCommand
        self.debug, self.project_id))
      File "/usr/local/share/google/google-cloud-sdk/platform/gsutil/gslib/copy_helper.py", line 1169, in ExpandUrlToSingleBlr
        for blr in folder_expansion:
      File "/usr/local/share/google/google-cloud-sdk/platform/gsutil/gslib/wildcard_iterator.py", line 445, in IterAll
        expand_top_level_buckets=expand_top_level_buckets):
      File "/usr/local/share/google/google-cloud-sdk/platform/gsutil/gslib/wildcard_iterator.py", line 173, in __iter__
        fields=bucket_listing_fields):
      File "/usr/local/share/google/google-cloud-sdk/platform/gsutil/gslib/gcs_json_api.py", line 425, in ListObjects
        global_params=global_params)
      File "/usr/local/share/google/google-cloud-sdk/platform/gsutil/gslib/third_party/storage_apitools/storage_v1_client.py", line 957, in List
        config, request, global_params=global_params)
      File "/usr/local/share/google/google-cloud-sdk/platform/gsutil/gslib/third_party/storage_apitools/base_api.py", line 587, in _RunMethod
        http, http_request, retries=self.__client.num_retries)
      File "/usr/local/share/google/google-cloud-sdk/platform/gsutil/gslib/third_party/storage_apitools/http_wrapper.py", line 152, in MakeRequest
        redirections=redirections, connection_type=connection_type)
      File "/usr/local/share/google/google-cloud-sdk/platform/gsutil/third_party/google-api-python-client/oauth2client/util.py", line 132, in positional_wrapper
        return wrapped(*args, **kwargs)
      File "/usr/local/share/google/google-cloud-sdk/platform/gsutil/third_party/google-api-python-client/oauth2client/client.py", line 475, in new_request
        self._refresh(request_orig)
      File "/usr/local/share/google/google-cloud-sdk/platform/gsutil/third_party/google-api-python-client/oauth2client/client.py", line 663, in _refresh
        self._do_refresh_request(http_request)
      File "/usr/local/share/google/google-cloud-sdk/platform/gsutil/third_party/google-api-python-client/oauth2client/client.py", line 677, in _do_refresh_request
        body = self._generate_refresh_request_body()
      File "/usr/local/share/google/google-cloud-sdk/platform/gsutil/third_party/google-api-python-client/oauth2client/client.py", line 861, in _generate_refresh_request_body
        assertion = self._generate_assertion()
      File "/usr/local/share/google/google-cloud-sdk/platform/gsutil/third_party/google-api-python-client/oauth2client/client.py", line 977, in _generate_assertion
        private_key, self.private_key_password), payload)
      File "/usr/local/share/google/google-cloud-sdk/platform/gsutil/third_party/google-api-python-client/oauth2client/crypt.py", line 129, in from_string
        pkey = crypto.load_privatekey(crypto.FILETYPE_PEM, parsed_pem_key)
    Error: [('PEM routines', 'PEM_read_bio', 'no start line')]