langgenius/dify-official-plugins
1
0
Fork 0
mirror of https://github.com/langgenius/dify-official-plugins.git synced 2026-07-21 17:45:23 -04:00
Code Issues 54 Packages Projects Releases Wiki Activity

ssl.SSLCertVerificationError: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: Hostname mismatch, certificate is not valid for 'xxx.com.cn'. (_ssl.c:1010) #18

New Issue
Closed
opened 2026-02-16 10:17:46 -05:00 by yindo · 2 comments
yindo commented 2026-02-16 10:17:46 -05:00
Owner
Copy Link
Copy Source

Originally created by @AllenHu2024 on GitHub (Feb 24, 2025).

Hello I want to know how to use self-signed Cert? For it throws SSLCertVerificationError when set an SSL server name with self signed Cert.

Originally created by @AllenHu2024 on GitHub (Feb 24, 2025). Hello I want to know how to use self-signed Cert? For it throws SSLCertVerificationError when set an SSL server name with self signed Cert.
yindo closed this issue 2026-02-16 10:17:46 -05:00
yindo commented 2026-02-16 10:17:46 -05:00
Author
Owner
Copy Link
Copy Source

@kubegut commented on GitHub (Mar 6, 2025):

I also encounter the similar issue when I installed openai_api_compatible-0.0.7 plugin in my on-prem dify 1.0.0.
It looks like each plugin they will have python certifi module to recognize the CA of accessing endpoint is valid or not.

I can solve this SSL verification problem temporarily by setting CA file in my dify-plugin-daemon container in this path: /app/storage/cwd/langgenius/openai_api_compatible-0.0.7@f20c7275bbcf055ec5d170dd5128e341986e2dcba5266d08fd080d4bdf2288f6/.venv/lib/python3.12/site-packages/certifi/cacert.pem

(Based on the solutions on this dify issue: https://github.com/langgenius/dify/discussions/4600)

However, this package langgenius-openai_api_compatible_0.0.7.difypkg is compressed or compiled that I cannot setup my CA for this python certifi module.

How do I setup custom CA for those public plugin?

Thanks.

@kubegut commented on GitHub (Mar 6, 2025): I also encounter the similar issue when I installed `openai_api_compatible-0.0.7` plugin in my on-prem dify 1.0.0. It looks like each plugin they will have python certifi module to recognize the CA of accessing endpoint is valid or not. I can solve this SSL verification problem temporarily by setting CA file in my dify-plugin-daemon container in this path: `/app/storage/cwd/langgenius/openai_api_compatible-0.0.7@f20c7275bbcf055ec5d170dd5128e341986e2dcba5266d08fd080d4bdf2288f6/.venv/lib/python3.12/site-packages/certifi/cacert.pem` (Based on the solutions on this dify issue: https://github.com/langgenius/dify/discussions/4600) However, this package `langgenius-openai_api_compatible_0.0.7.difypkg` is compressed or compiled that I cannot setup my CA for this python certifi module. How do I setup custom CA for those public plugin? Thanks.
yindo commented 2026-02-16 10:17:46 -05:00
Author
Owner
Copy Link
Copy Source

@dosubot[bot] commented on GitHub (Aug 16, 2025):

Hi, @AllenHu2024. I'm Dosu, and I'm helping the dify-official-plugins team manage their backlog and am marking this issue as stale.

Issue Summary:

  • You reported an ssl.SSLCertVerificationError due to hostname mismatch with a self-signed certificate.
  • You requested guidance on proper usage to avoid this SSL verification error.
  • Another user, kubegut, shared a similar SSL issue with the openai_api_compatible-0.0.7 plugin on an on-prem dify 1.0.0 setup.
  • Kubegut temporarily fixed it by setting a CA file in the certifi module path but struggled with configuring custom CAs for compressed plugin packages.
  • The issue remains unresolved with no definitive solution or official guidance provided yet.

Next Steps:

  • Please let me know if this SSL verification issue is still relevant with the latest version of dify-official-plugins by commenting here.
  • If I do not hear back within 5 days, I will automatically close this issue to keep the backlog manageable.

Thank you for your understanding and contribution!

@dosubot[bot] commented on GitHub (Aug 16, 2025): Hi, @AllenHu2024. I'm [Dosu](https://dosu.dev), and I'm helping the dify-official-plugins team manage their backlog and am marking this issue as stale. **Issue Summary:** - You reported an ssl.SSLCertVerificationError due to hostname mismatch with a self-signed certificate. - You requested guidance on proper usage to avoid this SSL verification error. - Another user, kubegut, shared a similar SSL issue with the openai_api_compatible-0.0.7 plugin on an on-prem dify 1.0.0 setup. - Kubegut temporarily fixed it by setting a CA file in the certifi module path but struggled with configuring custom CAs for compressed plugin packages. - The issue remains unresolved with no definitive solution or official guidance provided yet. **Next Steps:** - Please let me know if this SSL verification issue is still relevant with the latest version of dify-official-plugins by commenting here. - If I do not hear back within 5 days, I will automatically close this issue to keep the backlog manageable. Thank you for your understanding and contribution!
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
Clear labels
bug
bug
bug
dependencies
documentation
enhancement
good first issue
invalid
pull-request
Mirrored from GitHub Pull Request
 question
stale
No Label
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
yindo
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: langgenius/dify-official-plugins#18
Delete Branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?