search

AUTOMATIC1111 / stable-diffusion-webui

Stable Diffusion web UI
GNU Affero General Public License v3.0
140.57k stars 26.6k forks source link

SSL Cert Expired, can't load available extensions list #8883

Open JaRail opened 1 year ago

JaRail commented 1 year ago

Is there an existing issue for this?

What happened?

The cert for the extensions list here has expired.

https://raw.githubusercontent.com/AUTOMATIC1111/stable-diffusion-webui-extensions/master/index.json

I'm getting this error in the UI

URLError: <urlopen error [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: certificate has expired (_ssl.c:997)> [object Object]

Steps to reproduce the problem

  1. Go to Available Extensions
  2. Press Load From

What should have happened?

List loads

Commit where the problem happens

Not a code issue. Just had this happen to me for the first time.

What platforms do you use to access the UI ?

Windows

What browsers do you use to access the UI ?

Mozilla Firefox

Command Line Arguments

N/A

List of extensions

N/A

Console logs

N/A

Additional information

No response

JaRail commented 1 year ago

Actually, just putting the pieces together. A bunch of images weren't loading for me on github, like profile pics. Gonna guess this is a major github issue that will get resolved by them.

huizne commented 1 year ago

This happened to me a few weeks ago. I had to run the install certificates command in my application folder for python. I did it for each version I had installed just in case.

Browse to

Applications/Python 3.10 and double-click

Install Certificates.command

I did this and cleared that error for me. Got the steps from this reddit post (Quiet-Service5625 comment). Hope this helps.

https://www.reddit.com/r/StableDiffusion/comments/y7uqgv/help_request_using_automatic1111_certificate/

Auvere commented 1 year ago

This could be related to GitHub updating their RSA SSH host keys.

https://github.blog/2023-03-23-we-updated-our-rsa-ssh-host-key/

The cert expired error was happening throughout GitHub, but it's been resolved now.

JaRail commented 1 year ago

When I recheck the link, the cert I'm getting now expires a year from now. So it's been updated and I'll close this.

ghost commented 1 year ago

When I recheck the link, the cert I'm getting now expires a year from now. So it's been updated and I'll close this.

open please i have the same error

JaRail commented 1 year ago

When I recheck the link, the cert I'm getting now expires a year from now. So it's been updated and I'll close this.

open please i have the same error

What happens when you open the link in the original description in a browser? Do you see all the JSON or does the browser produce a certificate error?

I'm still seeing the link work fine. So I'm guessing you have a different problem that might look the same.

ghost commented 1 year ago

When I recheck the link, the cert I'm getting now expires a year from now. So it's been updated and I'll close this.

open please i have the same error.

What happens when you open the link in the original description in a browser? Do you see all the JSON or does the browser produce a certificate error?

I'm still seeing the link work fine. So I'm guessing you have a different problem that might look the same.

On my browser i see the json without error. I only have the error using automatic 1111. I can recreate a ticket but it's exactly the same issue.

JaRail commented 1 year ago

Okay, I'll reopen. I'm not sure how you could be getting a cert error in the webui but not when opening directly. Maybe there's some caching or something I'm unaware of. Hopefully someone has some ideas.

ghost commented 1 year ago

idk i tested on 3 browsers to be sure, only the web ui catch the error

BreakNecks commented 1 year ago

Adding --no-gradio-queue to the webui-user script seems to fix the issue for me. Looks like the WebSocket used by the queue won't accept TLS.

Neonize commented 1 year ago

Had the same problem and @BreakNecks info works for me. As an alternativ workaround that worked, for me, was to disable the stable-diffusion-webui-auto-tls-https extension.

Cacciapaglio commented 1 year ago

I am also using Windows system. Stable Diffusion is located in E:\MyProjects\ and the virtual environment is located in E:\MyProjects\stable-diffusion-webui\venv. Here is how I resolved the issue:

  1. Switch to the stable diffusion environment and update/download certifi by running "pip install -U certifi" (either through cmd.exe or PyCharm's Terminal).
  2. Note the path for cacert.pem, which can be found in venv\Lib\site-packages\certifi directory (ps: venv is the root directory of stable diffusion's virtual environment).
  3. Create a new folder called "ssl" in C:\Program Files\Common Files to store the certificate.
  4. Run cmd.exe as an administrator and create a soft link by running the command "mklink C:\Program Files\Common Files\ssl\cert.pem E:\MyProjects\stable-diffusion-webui\venv\Lib\site-packages\certifi\cacert.pem".
narfel commented 1 year ago

For me it got fixed by simply installing certifi with "conda install certifi" in the automatic env. Win11/wsl

JimmyChou1729 commented 1 year ago

This happened to me a few weeks ago. I had to run the install certificates command in my application folder for python. I did it for each version I had installed just in case.

Browse to

Applications/Python 3.10 and double-click

Install Certificates.command

I did this and cleared that error for me. Got the steps from this reddit post (Quiet-Service5625 comment). Hope this helps.

https://www.reddit.com/r/StableDiffusion/comments/y7uqgv/help_request_using_automatic1111_certificate/

It works for me! thx

pixelaviator commented 3 months ago

I am also using Windows system. Stable Diffusion is located in E:\MyProjects\ and the virtual environment is located in E:\MyProjects\stable-diffusion-webui\venv. Here is how I resolved the issue:

1. Switch to the stable diffusion environment and update/download certifi by running "pip install -U certifi" (either through cmd.exe or PyCharm's Terminal).

2. Note the path for cacert.pem, which can be found in venv\Lib\site-packages\certifi directory (ps: venv is the root directory of stable diffusion's virtual environment).

3. Create a new folder called "ssl" in C:\Program Files\Common Files to store the certificate.

4. Run cmd.exe as an administrator and create a soft link by running the command "mklink C:\Program Files\Common Files\ssl\cert.pem E:\MyProjects\stable-diffusion-webui\venv\Lib\site-packages\certifi\cacert.pem".

I have tried above and I'm getting C:\Users\User>mklink C:\Program Files\Common Files\ssl\cert.pem D:\stable-diffusion\stable-diffusion-webui\venv\Lib\site-packages\certifi\cacert.pem The syntax of the command is incorrect.

C:\Users\User>C:\Program Files\Common Files\ssl\cert.pem D:\stable-diffusion\stable-diffusion-webui\venv\Lib\site-packages\certifi\cacert.pem 'C:\Program' is not recognized as an internal or external command, operable program or batch file.

Could you help with what I'm doing wrong? I am a complete noobie