I just started getting errors about untrusted SSL cert when accessing the General registry. If I try to update General: (@v1.10) pkg> registry update General Updating registry at `~/.julia/registries/General.toml` ┌ Error: Some registries failed to update: │ — /Users/dmatz/.julia/registrie…

what Linux distribution (and version) are you on?

The top example is on my Mac, and the bottom example is a CI job running on our Linux system, which is CentOS 7.

[image] danielmatz: CentOS 7. Ha. At CERN we have this problem as well, where the stock COS7 with Julia (which is official binary but the our software environment would overload a bunch of things) would give you cert error, but only if you’re not using the official binary from juliaup. As fo…

Some co-workers are also seeing the issue, but only when on our company network. Must be an issue on our side.

Is there a proxy/firewall? Those will sometimes MITM your connections. In such cases there’s usually some company-specific certificate authority cert that needs to be added to allow the transparent proxy to perform this MITM. It will read all your traffic in such a case, even over HTTPS connections. …

If I use my browser to navigate to your us-west URL, it tries to download the registry. If I navigate to us-east, it seems to forward to “ storage.julialang.net ”, and my browser complains about an invalid certificate. If I force Julia to use the us-west server, things are working great: $ JULIA_PKG…

The root certificate for https://storage.julialang.net (which https://us-east.pkg.julialang.org redirects to) is ISRG Root X2 and the root certificate for https://us-west.pkg.julialang.org (and https://us-east.pkg.julialang.org too) is ISRG Root X1. Is it possible that the former isn’t trusted (yet)…

Thanks for that detail, I’ll pass that along. I’ve opened a ticket with my company’s IT department. They must have changed something this week!

Not necessarily a change on your end since the redirection to https://storage.julialang.net was deployed yesterday. Regardless, all certs are valid as far as I can tell.

You can locally try to curl the two letsencrypt URLs that Fredrik posted and check if the https://valid-isrgrootx2.letsencrypt.org/ one doesn’t work. In that case that would confirm the issue.

Bad cert when accessing the General registry

Tooling Package Management

Topic		Replies	Views
Warning: could not download https://pkg.julialang.org/registries julia 1.6.3 General Usage package	13	5995	September 22, 2022
Registry fails to download with certificate error in 1.10.11 General Usage	9	271	May 15, 2026
BADCERT_NOT_TRUSTED error while updating the Registry? General Usage pkg , registry , general-registry	27	784	September 6, 2024
Warning about https://pkg.julialang.org/registries General Usage package	3	552	September 6, 2024
`Pkg` fails to clone registry (SSL cert. error) General Usage	1	878	July 10, 2019

Bad cert when accessing the General registry

Related topics