[GH-ISSUE #4809] pip install SSL: CERTIFICATE_VERIFY_FAILED #3027

Closed
opened 2026-02-26 07:37:36 +03:00 by kerem · 1 comment
Owner

Originally created by @Slawka on GitHub (Oct 25, 2025).
Original GitHub issue: https://github.com/NginxProxyManager/nginx-proxy-manager/issues/4809

latest version 2.12.6

[10/25/2025] [9:54:14 AM] [Global   ] › ⬤  debug     CMD: . /opt/certbot/bin/activate && pip install --no-cache-dir  certbot-dns-he~=1.0.0  && deactivate
[10/25/2025] [9:54:24 AM] [Global   ] › ⬤  debug     CMD: /usr/sbin/nginx -t -g "error_log off;"
[10/25/2025] [9:54:24 AM] [Nginx    ] › ℹ  info      Reloading Nginx
[10/25/2025] [9:54:24 AM] [Global   ] › ⬤  debug     CMD: /usr/sbin/nginx -s reload
[10/25/2025] [9:54:25 AM] [Express  ] › ⚠  warning   WARNING: Retrying (Retry(total=4, connect=None, read=None, redirect=None, status=None)) after connection broken by 'SSLError(SSLCertVerificationError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: unable to get local issuer certificate (_ssl.c:992)'))': /simple/certbot-dns-he/
WARNING: Retrying (Retry(total=3, connect=None, read=None, redirect=None, status=None)) after connection broken by 'SSLError(SSLCertVerificationError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: unable to get local issuer certificate (_ssl.c:992)'))': /simple/certbot-dns-he/
WARNING: Retrying (Retry(total=2, connect=None, read=None, redirect=None, status=None)) after connection broken by 'SSLError(SSLCertVerificationError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: unable to get local issuer certificate (_ssl.c:992)'))': /simple/certbot-dns-he/
WARNING: Retrying (Retry(total=1, connect=None, read=None, redirect=None, status=None)) after connection broken by 'SSLError(SSLCertVerificationError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: unable to get local issuer certificate (_ssl.c:992)'))': /simple/certbot-dns-he/
WARNING: Retrying (Retry(total=0, connect=None, read=None, redirect=None, status=None)) after connection broken by 'SSLError(SSLCertVerificationError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: unable to get local issuer certificate (_ssl.c:992)'))': /simple/certbot-dns-he/
ERROR: Could not find a version that satisfies the requirement certbot-dns-he~=1.0.0 (from versions: none)
ERROR: No matching distribution found for certbot-dns-he~=1.0.0


[root@docker-7d0f8c3c2608:/app]# apt install ca-certificates openssl
Reading package lists... Done
Building dependency tree... Done
Reading state information... Done
ca-certificates is already the newest version (20230311+deb12u1).
openssl is already the newest version (3.0.16-1~deb12u1).
0 upgraded, 0 newly installed, 0 to remove and 1 not upgraded.

Error in UI

Internal Error
CommandError: WARNING: Retrying (Retry(total=4, connect=None, read=None, redirect=None, status=None)) after connection broken by ...........
--||--.......

    at /app/lib/utils.js:16:13
    at ChildProcess.exithandler (node:child_process:430:5)
    at ChildProcess.emit (node:events:524:28)
    at maybeClose (node:internal/child_process:1104:16)
    at ChildProcess._handle.onexit (node:internal/child_process:304:5)
Originally created by @Slawka on GitHub (Oct 25, 2025). Original GitHub issue: https://github.com/NginxProxyManager/nginx-proxy-manager/issues/4809 latest version [2.12.6](https://hub.docker.com/layers/jc21/nginx-proxy-manager/2.12.6/images/sha256-dc9ccd92d8c534a4b9da7283c1b28f57b76d7980a45583270e5da492819f47c2) ```[10/25/2025] [9:54:14 AM] [Certbot ] › ▶ start Installing he... [10/25/2025] [9:54:14 AM] [Global ] › ⬤ debug CMD: . /opt/certbot/bin/activate && pip install --no-cache-dir certbot-dns-he~=1.0.0 && deactivate [10/25/2025] [9:54:24 AM] [Global ] › ⬤ debug CMD: /usr/sbin/nginx -t -g "error_log off;" [10/25/2025] [9:54:24 AM] [Nginx ] › ℹ info Reloading Nginx [10/25/2025] [9:54:24 AM] [Global ] › ⬤ debug CMD: /usr/sbin/nginx -s reload [10/25/2025] [9:54:25 AM] [Express ] › ⚠ warning WARNING: Retrying (Retry(total=4, connect=None, read=None, redirect=None, status=None)) after connection broken by 'SSLError(SSLCertVerificationError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: unable to get local issuer certificate (_ssl.c:992)'))': /simple/certbot-dns-he/ WARNING: Retrying (Retry(total=3, connect=None, read=None, redirect=None, status=None)) after connection broken by 'SSLError(SSLCertVerificationError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: unable to get local issuer certificate (_ssl.c:992)'))': /simple/certbot-dns-he/ WARNING: Retrying (Retry(total=2, connect=None, read=None, redirect=None, status=None)) after connection broken by 'SSLError(SSLCertVerificationError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: unable to get local issuer certificate (_ssl.c:992)'))': /simple/certbot-dns-he/ WARNING: Retrying (Retry(total=1, connect=None, read=None, redirect=None, status=None)) after connection broken by 'SSLError(SSLCertVerificationError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: unable to get local issuer certificate (_ssl.c:992)'))': /simple/certbot-dns-he/ WARNING: Retrying (Retry(total=0, connect=None, read=None, redirect=None, status=None)) after connection broken by 'SSLError(SSLCertVerificationError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: unable to get local issuer certificate (_ssl.c:992)'))': /simple/certbot-dns-he/ ERROR: Could not find a version that satisfies the requirement certbot-dns-he~=1.0.0 (from versions: none) ERROR: No matching distribution found for certbot-dns-he~=1.0.0 [root@docker-7d0f8c3c2608:/app]# apt install ca-certificates openssl Reading package lists... Done Building dependency tree... Done Reading state information... Done ca-certificates is already the newest version (20230311+deb12u1). openssl is already the newest version (3.0.16-1~deb12u1). 0 upgraded, 0 newly installed, 0 to remove and 1 not upgraded. ``` Error in UI ``` Internal Error CommandError: WARNING: Retrying (Retry(total=4, connect=None, read=None, redirect=None, status=None)) after connection broken by ........... --||--....... at /app/lib/utils.js:16:13 at ChildProcess.exithandler (node:child_process:430:5) at ChildProcess.emit (node:events:524:28) at maybeClose (node:internal/child_process:1104:16) at ChildProcess._handle.onexit (node:internal/child_process:304:5)
kerem 2026-02-26 07:37:36 +03:00
  • closed this issue
  • added the
    bug
    label
Author
Owner

@Slawka commented on GitHub (Oct 26, 2025):

Error on DNS server

<!-- gh-comment-id:3448747809 --> @Slawka commented on GitHub (Oct 26, 2025): Error on DNS server
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
starred/nginx-proxy-manager-NginxProxyManager#3027
No description provided.