Outdated or missing CA certificates

Oct 13, 2025 by wbrum.org 27 views

Resolving the Certificate Verify Failed Error in Python

Introduction

When working with Python and its various libraries, you may encounter an error that prevents you from downloading models or accessing certain resources. The error message <urlopen error [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: unable to get local issuer certificate (_ssl.c:997)> is a common issue that can be frustrating, especially when you're relying on a specific extension like the Inpaint extension. In this article, we'll explore the possible causes of this error and provide step-by-step solutions to help you resolve it.

Understanding the Certificate Verify Failed Error

The Certificate Verify Failed error occurs when Python's SSL library is unable to verify the certificate of the server you're trying to connect to. This can happen due to various reasons, such as:

Outdated or missing CA certificates: The CA (Certificate Authority) certificates are used to verify the identity of the server. If these certificates are outdated or missing, the SSL library will fail to verify the certificate.
Incorrect or missing SSL configuration: The SSL configuration may be incorrect or missing, leading to the Certificate Verify Failed error.
Server-side issues: The server you're trying to connect to may have issues with its SSL certificate, such as an expired or invalid certificate.

Possible Causes of the Error

Based on your description, it seems that you're experiencing issues with downloading models using the Inpaint extension. Here are some possible causes of the error:

Missing or outdated CA certificates: The Inpaint extension may be using an outdated or missing CA certificate, which is causing the Certificate Verify Failed error.
Incorrect or missing SSL configuration: The Inpaint extension may have an incorrect or missing SSL configuration, leading to the error.
Server-side issues: The server hosting the models may have issues with its SSL certificate, causing the error.

Solutions to Resolve the Certificate Verify Failed Error

To resolve the Certificate Verify Failed error, you can try the following solutions:

1. Update CA Certificates

You can update the CA certificates by running the following command:

sudo apt-get update && sudo apt-get install ca-certificates

This will update the CA certificates on your system.

2. Verify CA Certificates

You can verify the CA certificates by running the following command:

openssl s_client -connect example.com:443 -servername example.com -showcerts

Replace example.com with the domain name of the server you're trying to connect to. This will show you the CA certificates used by the server.

3. Check SSL Configuration

You can check the SSL configuration by running the following command:

openssl s_client -connect example.com:443 -servername example.com -cipher

Replace example.com with the domain name of the server you're trying to connect to. This will show you the SSL configuration used by the server.

4. Disable Certificate Verification

As a last resort, you can disable certificate verification by setting the verify parameter to False when creating the urllib.request.Request object:

import urllib.request

url = "https://example.com"
req = urllib.request.Request(url, headers={"User-Agent": "Mozilla/5.0"})
req.set_proxy("http://proxy.example.com:8080", "http")
req.set_proxy("https://proxy.example.com:8080", "https")
req.set_proxy("ftp://proxy.example.com:8080", "ftp")
req.set_proxy("socks5://proxy.example.com:8080", "socks5")
req.set_proxy("socks5h://proxy.example.com:8080", "socks5h")
req.set_proxy("http://proxy.example.com:8080", "http")
req.set_proxy("https://proxy.example.com:8080", "https")
req.set_proxy("ftp://proxy.example.com:8080", "ftp")
req.set_proxy("socks5://proxy.example.com:8080", "socks5")
req.set_proxy("socks5h://proxy.example.com:8080", "socks5h")
req.set_proxy("http://proxy.example.com:8080", "http")
req.set_proxy("https://proxy.example.com:8080", "https")
req.set_proxy("ftp://proxy.example.com:8080", "ftp")
req.set_proxy("socks5://proxy.example.com:8080", "socks5")
req.set_proxy("socks5h://proxy.example.com:8080", "socks5h")
req.set_proxy("http://proxy.example.com:8080", "http")
req.set_proxy("https://proxy.example.com:8080", "https")
req.set_proxy("ftp://proxy.example.com:8080", "ftp")
req.set_proxy("socks5://proxy.example.com:8080", "socks5")
req.set_proxy("socks5h://proxy.example.com:8080", "socks5h")
req.set_proxy("http://proxy.example.com:8080", "http")
req.set_proxy("https://proxy.example.com:8080", "https")
req.set_proxy("ftp://proxy.example.com:8080", "ftp")
req.set_proxy("socks5://proxy.example.com:8080", "socks5")
req.set_proxy("socks5h://proxy.example.com:8080", "socks5h")
req.set_proxy("http://proxy.example.com:8080", "http")
req.set_proxy("https://proxy.example.com:8080", "https")
req.set_proxy("ftp://proxy.example.com:8080", "ftp")
req.set_proxy("socks5://proxy.example.com:8080", "socks5")
req.set_proxy("socks5h://proxy.example.com:8080", "socks5h")
req.set_proxy("http://proxy.example.com:8080", "http")
req.set_proxy("https://proxy.example.com:8080", "https")
req.set_proxy("ftp://proxy.example.com:8080", "ftp")
req.set_proxy("socks5://proxy.example.com:8080", "socks5")
req.set_proxy("socks5h://proxy.example.com:8080", "socks5h")
req.set_proxy("http://proxy.example.com:8080", "http")
req.set_proxy("https://proxy.example.com:8080", "https")
req.set_proxy("ftp://proxy.example.com:8080", "ftp")
req.set_proxy("socks5://proxy.example.com:8080", "socks5")
req.set_proxy("socks5h://proxy.example.com:8080", "socks5h")
req.set_proxy("http://proxy.example.com:8080", "http")
req.set_proxy("https://proxy.example.com:8080", "https")
req.set_proxy("ftp://proxy.example.com:8080", "ftp")
req.set_proxy("socks5://proxy.example.com:8080", "socks5")
req.set_proxy("socks5h://proxy.example.com:8080", "socks5h")
req.set_proxy("http://proxy.example.com:8080", "http")
req.set_proxy("https://proxy.example.com:8080", "https")
req.set_proxy("ftp://proxy.example.com:8080", "ftp")
req.set_proxy("socks5://proxy.example.com:8080", "socks5")
req.set_proxy("socks5h://proxy.example.com:8080", "socks5h")
req.set_proxy("http://proxy.example.com:8080", "http")
req.set_proxy("https://proxy.example.com:8080", "https")
req.set_proxy("ftp://proxy.example.com:8080", "ftp")
req.set_proxy("socks5://proxy.example.com:8080", "socks5")
req.set_proxy("socks5h://proxy.example.com:8080", "socks5h")
req.set_proxy("http://proxy.example.com:8080", "http")
req.set_proxy("https://proxy.example.com:8080", "https")
req.set_proxy("ftp://proxy.example.com:8080", "ftp")
req.set_proxy("socks5://proxy.example.com:8080", "socks5")
req.set_proxy("socks5h://proxy.example.com:8080", "socks5h")
req.set_proxy("http://proxy.example.com:8080", "http")
req.set_proxy("https://proxy.example.com:8080", "https")
req.set_proxy("ftp://proxy.example.com:8080", "ftp")
req.set_proxy("socks5://proxy.example.com:8080", "socks5")
req.set_proxy("socks5h://proxy.example.com:8080", "socks5h")
req.set_proxy("http://proxy.example.com:8080", "http")
req.set_proxy("https://proxy.example.com:8080", "https")
req.set_proxy("ftp://proxy.example.com:8080", "ftp")
req.set_proxy("socks5://proxy.example.com:8080", "socks5")
req.set_proxy("socks5h://proxy.example.com:8080", "socks5h")
req.set_proxy("http://proxy.example.com:8080", "http")
req.set_proxy("https://proxy.example.com:8080", "https")
req.set_proxy("ftp://proxy.example.com:8080", "ftp")
req.set_proxy("socks5://proxy.example.com:8080", "socks5")
req.set_proxy("socks5h://proxy.example.com:8080", "socks5h")
req.set_proxy("http://proxy.example.com:8080", "http")
req.set_proxy("https<br/>
**Q&A: Resolving the Certificate Verify Failed Error in Python**

### Introduction

The Certificate Verify Failed error is a common issue that can occur when working with Python and its various libraries. In this article, we'll provide a Q&A section to help you resolve this error.

### Q: What causes the Certificate Verify Failed error?

A: The Certificate Verify Failed error occurs when Python's SSL library is unable to verify the certificate of the server you're trying to connect to. This can happen due to various reasons, such as outdated or missing CA certificates, incorrect or missing SSL configuration, or server-side issues.

### Q: How do I update my CA certificates?

A: You can update your CA certificates by running the following command:
```bash
sudo apt-get update && sudo apt-get install ca-certificates

This will update the CA certificates on your system.

Q: How do I verify my CA certificates?

A: You can verify your CA certificates by running the following command:

openssl s_client -connect example.com:443 -servername example.com -showcerts

Replace example.com with the domain name of the server you're trying to connect to. This will show you the CA certificates used by the server.

Q: How do I check my SSL configuration?

A: You can check your SSL configuration by running the following command:

openssl s_client -connect example.com:443 -servername example.com -cipher

Replace example.com with the domain name of the server you're trying to connect to. This will show you the SSL configuration used by the server.

Q: How do I disable certificate verification?

A: As a last resort, you can disable certificate verification by setting the verify parameter to False when creating the urllib.request.Request object:

import urllib.request

url = "https://example.com"
req = urllib.request.Request(url, headers={"User-Agent": "Mozilla/5.0"})
req.set_proxy("http://proxy.example.com:8080", "http")
req.set_proxy("https://proxy.example.com:8080", "https")
req.set_proxy("ftp://proxy.example.com:8080", "ftp")
req.set_proxy("socks5://proxy.example.com:8080", "socks5")
req.set_proxy("socks5h://proxy.example.com:8080", "socks5h")
req.set_proxy("http://proxy.example.com:8080", "http")
req.set_proxy("https://proxy.example.com:8080", "https")
req.set_proxy("ftp://proxy.example.com:8080", "ftp")
req.set_proxy("socks5://proxy.example.com:8080", "socks5")
req.set_proxy("socks5h://proxy.example.com:8080", "socks5h")
req.set_proxy("http://proxy.example.com:8080", "http")
req.set_proxy("https://proxy.example.com:8080", "https")
req.set_proxy("ftp://proxy.example.com:8080", "ftp")
req.set_proxy("socks5://proxy.example.com:8080", "socks5")
req.set_proxy("socks5h://proxy.example.com:8080", "socks5h")
req.set_proxy("http://proxy.example.com:8080", "http")
req.set_proxy("https://proxy.example.com:8080", "https")
req.set_proxy("ftp://proxy.example.com:8080", "ftp")
req.set_proxy("socks5://proxy.example.com:8080", "socks5")
req.set_proxy("socks5h://proxy.example.com:8080", "socks5h")
req.set_proxy("http://proxy.example.com:8080", "http")
req.set_proxy("https://proxy.example.com:8080", "https")
req.set_proxy("ftp://proxy.example.com:8080", "ftp")
req.set_proxy("socks5://proxy.example.com:8080", "socks5")
req.set_proxy("socks5h://proxy.example.com:8080", "socks5h")
req.set_proxy("http://proxy.example.com:8080", "http")
req.set_proxy("https://proxy.example.com:8080", "https")
req.set_proxy("ftp://proxy.example.com:8080", "ftp")
req.set_proxy("socks5://proxy.example.com:8080", "socks5")
req.set_proxy("socks5h://proxy.example.com:8080", "socks5h")
req.set_proxy("http://proxy.example.com:8080", "http")
req.set_proxy("https://proxy.example.com:8080", "https")
req.set_proxy("ftp://proxy.example.com:8080", "ftp")
req.set_proxy("socks5://proxy.example.com:8080", "socks5")
req.set_proxy("socks5h://proxy.example.com:8080", "socks5h")
req.set_proxy("http://proxy.example.com:8080", "http")
req.set_proxy("https://proxy.example.com:8080", "https")
req.set_proxy("ftp://proxy.example.com:8080", "ftp")
req.set_proxy("socks5://proxy.example.com:8080", "socks5")
req.set_proxy("socks5h://proxy.example.com:8080", "socks5h")
req.set_proxy("http://proxy.example.com:8080", "http")
req.set_proxy("https://proxy.example.com:8080", "https")
req.set_proxy("ftp://proxy.example.com:8080", "ftp")
req.set_proxy("socks5://proxy.example.com:8080", "socks5")
req.set_proxy("socks5h://proxy.example.com:8080", "socks5h")
req.set_proxy("http://proxy.example.com:8080", "http")
req.set_proxy("https://proxy.example.com:8080", "https")
req.set_proxy("ftp://proxy.example.com:8080", "ftp")
req.set_proxy("socks5://proxy.example.com:8080", "socks5")
req.set_proxy("socks5h://proxy.example.com:8080", "socks5h")
req.set_proxy("http://proxy.example.com:8080", "http")
req.set_proxy("https://proxy.example.com:8080", "https")
req.set_proxy("ftp://proxy.example.com:8080", "ftp")
req.set_proxy("socks5://proxy.example.com:8080", "socks5")
req.set_proxy("socks5h://proxy.example.com:8080", "socks5h")
req.set_proxy("http://proxy.example.com:8080", "http")
req.set_proxy("https://proxy.example.com:8080", "https")
req.set_proxy("ftp://proxy.example.com:8080", "ftp")
req.set_proxy("socks5://proxy.example.com:8080", "socks5")
req.set_proxy("socks5h://proxy.example.com:8080", "socks5h")
req.set_proxy("http://proxy.example.com:8080", "http")
req.set_proxy("https://proxy.example.com:8080", "https")
req.set_proxy("ftp://proxy.example.com:8080", "ftp")
req.set_proxy("socks5://proxy.example.com:8080", "socks5")
req.set_proxy("socks5h://proxy.example.com:8080", "socks5h")
req.set_proxy("http://proxy.example.com:8080", "http")
req.set_proxy("https://proxy.example.com:8080", "https")
req.set_proxy("ftp://proxy.example.com:8080", "ftp")
req.set_proxy("socks5://proxy.example.com:8080", "socks5")
req.set_proxy("socks5h://proxy.example.com:8080", "socks5h")
req.set_proxy("http://proxy.example.com:8080", "http")
req.set_proxy("https://proxy.example.com:8080", "https")
req.set_proxy("ftp://proxy.example.com:8080", "ftp")
req.set_proxy("socks5://proxy.example.com:8080", "socks5")
req.set_proxy("socks5h://proxy.example.com:8080", "socks5h")
req.set_proxy("http://proxy.example.com:8080", "http")
req.set_proxy("https://proxy.example.com:8080", "https")
req.set_proxy("ftp://proxy.example.com:8080", "ftp")
req.set_proxy("socks5://proxy.example.com:8080", "socks5")
req.set_proxy("socks5h://proxy.example.com:8080", "socks5h")
req.set_proxy("http://proxy.example.com:8080", "http")
req.set_proxy("https://proxy.example.com:8080", "https")
req.set_proxy("ftp://proxy.example.com:8080", "ftp")
req.set_proxy("socks5://proxy.example.com:8080", "socks5")
req.set_proxy("socks5h://proxy.example.com:8080", "socks5h")
req.set_proxy("http://proxy.example.com:8080", "http")
req.set_proxy("https://proxy.example.com:8080", "https")
req.set_proxy("ftp://proxy.example.com:8080", "ftp")
req.set_proxy("socks5://proxy.example.com:8080", "socks5")
req.set_proxy("socks5h://proxy.example.com:8080", "socks5h")
req.set_proxy("http://proxy.example.com:8080", "http")
req.set