Ckan: Could not establish trust relationship for the SSL/TLS secure channel

[uniybee]

im trying to download [x] science but i says "Failed to download "https://spacedock.info/mod/234/[x] Science!/download/v5.11" - error: The underlying connection was closed: Could not establish trust relationship for the SSL/TLS secure channel"

i have win 10 64-bit ckan 1.22.6 .NET 4.5

[PapaOscar90]

Having same problem. For several mods it cannot connect. RemoteTech, Scatterer, kOS to name a couple.

[nevercast]

SpaceDock SSL certificate expired. Setting your clock back in time to the 12th/13th is a workaround (before expiration date). If you don't mind the added risk of using an expired certificate.

Overall, this is a problem with SpaceDock. However CKAN could offer a setting to disregard SSL errors, though it's implications should be explained, after all you are downloading executable code.

[viperfan7]

The fact that a faulty SSL cert causes a hardcrash in CKAN means it needs an option to ignore SSL certs

https://stackoverflow.com/questions/2675133/c-sharp-ignore-certificate-errors

[uniybee]

@nevercast Thanks! That worked for me.

[HebaruSan]

Please remember to check previous issues before adding a new one: #2249, KSP-CKAN/NetKAN#6168

Master issue is KSP-SpaceDock/SpaceDock#181.

The fact that a faulty SSL cert causes a hardcrash in CKAN means it needs an option to ignore SSL certs

@viperfan7, I'm not seeing a hard crash. There's just an error message explaining why the download failed, and then the app is usable again. Does it actually stop running for you?

[TheDanMan2]

Having same problem. Sometimes for a short time the download started, but a second later there was an error. Sometimes for a short time the download started, but a second later there was an error. What is the reason?

[HebaruSan]

@TheDanMan2, see above, the reason is a problem with SpaceDock's server. You can confirm this problem by trying to visit the SpaceDock site with a browser.

[alrabe]

Bug - after SSL error:
Either I choose to close the app form the dialog after the SSL error pop-up, than this will result in a Windows dialog a'la "CKAN is not reacting" (in German here). Or I choose to continue CKAN, than I'm not able to close the application later.

[TheCryptek]

Wouldn't it just be easier to contact spacedock support and tell them they need to update their certificate?

[HebaruSan]

@alrabe, can you please try the 1.24 pre-release and let us know if you still have the "CKAN is not reacting (in German)" problem? I tested this earlier and I did not see that problem; maybe this exception is now handled as a side effect of one of the other changes.

[7ranceaddic7]

The certificate has been updated.

[HebaruSan]

Till next time, then...

[nevercast]

Friendly reminder! Any of you that set your clocks back, you'll need to set them to real time again ;)

[Blu3wolf]

I get the same error when trying to get the list of mods in CKAN. Fresh install, cant connect.

Oddly, I can browse to the location it looks for with my browser just fine.

[dxeh]

@Blu3wolf I Second that. Also cannot connect to CKAN even after reinstall..

"Connection to https://github.com/KSP-CKAN/CKAN-meta/archive/master.tar.gz could not be established."

[VladoPortos]

Same issue as @dxeh , there really should be option not to use SSL as its more times broken than working...

[sundhaug92]

Solved: Use 1.24 or later

[i20100]

Download the new ckan.exe, run it. And problem should be solved.
Link to exe: https://github.com/KSP-CKAN/CKAN/releases/latest
This worked for me.