# BADCERT\_NOT\_TRUSTED error while updating the Registry?

**URL:** https://discourse.julialang.org/t/badcert-not-trusted-error-while-updating-the-registry/119040
**Category:** General Usage
**Tags:** pkg, registry, general-registry
**Created:** [September 4, 2024, 2:16pm UTC](https://discourse.julialang.org/t/badcert-not-trusted-error-while-updating-the-registry/119040 "2024-09-04T14:16:45Z")
**Posts on this page:** 8
**Page:** 2

<div class="post-metadata">

### Author: ![nandoconde](https://sea2.discourse-cdn.com/julialang/user_avatar/discourse.julialang.org/nandoconde/32/19497_2.png) [@nandoconde](https://discourse.julialang.org/u/nandoconde)
#### Post date: [September 6, 2024, 10:31am UTC](https://discourse.julialang.org/t/badcert-not-trusted-error-while-updating-the-registry/119040/21 "2024-09-06T10:31:50Z")

</div>

Do you think this could be documented? In my experience while researching this, the globals of HTTP, Downloads and Curl are very deeply hidden.

---

<div class="post-metadata">

### Author: ![nandoconde](https://sea2.discourse-cdn.com/julialang/user_avatar/discourse.julialang.org/nandoconde/32/19497_2.png) [@nandoconde](https://discourse.julialang.org/u/nandoconde)
#### Post date: [September 6, 2024, 10:33am UTC](https://discourse.julialang.org/t/badcert-not-trusted-error-while-updating-the-registry/119040/22 "2024-09-06T10:33:44Z")

</div>

Yeah, thanks!

I’ll keep doing this everytime it fails. I think it may be related to my organization’s outgoing connections (VPN and whatnot), so I don’t know if I could talk the IT guys into investing time to solve this.

Anyway, it works, and I’ll check the answer in case anyone else suffers from this!

---

<div class="post-metadata">

### Author: ![oheil](https://sea2.discourse-cdn.com/julialang/user_avatar/discourse.julialang.org/oheil/32/220745_2.png) [@oheil](https://discourse.julialang.org/u/oheil)
#### Post date: [September 6, 2024, 10:42am UTC](https://discourse.julialang.org/t/badcert-not-trusted-error-while-updating-the-registry/119040/23 "2024-09-06T10:42:06Z")

</div>

> [@nandoconde](#):
>
> Do you think this could be documented?

Of course it could and it should be. As far as I can see we only have the Readme of [GitHub - JuliaLang/Downloads.jl](https://github.com/JuliaLang/Downloads.jl) and the official [Downloads · The Julia Language](https://docs.julialang.org/en/v1.10/stdlib/Downloads/)

Both are very short and we had some questions about downloads and certificates in the past and everytime it wasn’t straight forward to find a solution. I believe the reason for this somehow not optimal documentation is, that downloading or accessing resources over the network was a kind of work in progress in the past and using curl/libcurl maybe not the last word on this.

---

<div class="post-metadata">

### Author: ![nandoconde](https://sea2.discourse-cdn.com/julialang/user_avatar/discourse.julialang.org/nandoconde/32/19497_2.png) [@nandoconde](https://discourse.julialang.org/u/nandoconde)
#### Post date: [September 6, 2024, 10:48am UTC](https://discourse.julialang.org/t/badcert-not-trusted-error-while-updating-the-registry/119040/24 "2024-09-06T10:48:32Z")

</div>

I found that my past me had solved this and left the temporary solution in a `WORKAROUND.jl` file, which I was conveniently going to create with this new solution. Not super secure also, and not super well documented ([only here](https://github.com/JuliaLang/NetworkOptions.jl)).

Anyway, the old solution was:

```julia
julia> ENV["JULIA_NO_VERIFY_HOSTS"] = "pkg.julialang.org,storage.julialang.org"

```

---

<div class="post-metadata">

### Author: ![oheil](https://sea2.discourse-cdn.com/julialang/user_avatar/discourse.julialang.org/oheil/32/220745_2.png) [@oheil](https://discourse.julialang.org/u/oheil)
#### Post date: [September 6, 2024, 10:54am UTC](https://discourse.julialang.org/t/badcert-not-trusted-error-while-updating-the-registry/119040/25 "2024-09-06T10:54:50Z")

</div>

> [@nandoconde](#):
>
> `julia> ENV["JULIA_NO_VERIFY_HOSTS"] = "pkg.julialang.org,storage.julialang.org"`

For a manual call to `Downloads.download` this still works. Have you tried this for the `Pkg.update`?

---

<div class="post-metadata">

### Author: ![nandoconde](https://sea2.discourse-cdn.com/julialang/user_avatar/discourse.julialang.org/nandoconde/32/19497_2.png) [@nandoconde](https://discourse.julialang.org/u/nandoconde)
#### Post date: [September 6, 2024, 10:56am UTC](https://discourse.julialang.org/t/badcert-not-trusted-error-while-updating-the-registry/119040/26 "2024-09-06T10:56:07Z")

</div>

Yeah, I did the full try with it!

---

<div class="post-metadata">

### Author: ![oheil](https://sea2.discourse-cdn.com/julialang/user_avatar/discourse.julialang.org/oheil/32/220745_2.png) [@oheil](https://discourse.julialang.org/u/oheil)
#### Post date: [September 6, 2024, 11:02am UTC](https://discourse.julialang.org/t/badcert-not-trusted-error-while-updating-the-registry/119040/27 "2024-09-06T11:02:40Z")

</div>

Hmm, perhaps it doesn’t work because some servers are missing like [eu-central.pkg.julialang.org](http://eu-central.pkg.julialang.org), [storage.julialang.net](http://storage.julialang.net) (probably because of load balancers).  
Is a wildcard allowed like:

```julia
ENV["JULIA_NO_VERIFY_HOSTS"] = "*"

```

?  
This would be the easiest if it would work.

---

<div class="post-metadata">

### Author: ![nandoconde](https://sea2.discourse-cdn.com/julialang/user_avatar/discourse.julialang.org/nandoconde/32/19497_2.png) [@nandoconde](https://discourse.julialang.org/u/nandoconde)
#### Post date: [September 6, 2024, 11:19am UTC](https://discourse.julialang.org/t/badcert-not-trusted-error-while-updating-the-registry/119040/28 "2024-09-06T11:19:43Z")

</div>

No no, I think I expressed badly. I meant that it _works_!

So yeah, this is the simplest solution. Anyway, more documentation on the Dowloads package is still a good output from this thread.

[Previous page](https://discourse.julialang.org/t/badcert-not-trusted-error-while-updating-the-registry/119040.md?page=1)
