[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: unable to get local issuer certificate (_ssl.c:1029)'

[audricd]

Hello,

I am trying to set soular up

I am running the manual install (not docker)

ive git cloned the repo. set up python3, pip, installed requirements.txt, configured config.ini as such:

[Lidarr]
api_key = 8bb7fc65d83946c3a767247469179070
host_url = http://192.168.236.251:8686
download_dir = /mnt/nas/slskd/downloads
disable_sync = False

[Slskd]
api_key = meJe2vGNLDPt6rH0QaQhc
host_url = http://192.168.236.9/:5030
url_base = /
download_dir = /mnt/nas/slskd/downloads
delete_searches = False
stalled_timeout = 3600

[Release Settings]
use_most_common_tracknum = True
allow_multi_disc = True
accepted_countries = Europe,Japan,United Kingdom,United States,[Worldwide],Australia,Canada
skip_region_check = False
accepted_formats = CD,Digital Media,Vinyl

[Search Settings]
search_timeout = 5000
maximum_peer_queue = 50
minimum_peer_upload_speed = 0
minimum_filename_match_ratio = 0.8
allowed_filetypes = flac 24/192,flac 16/44.1,flac,mp3 320,mp3
ignored_users = User1,User2,Fred,Bob
search_for_tracks = True
album_prepend_artist = False
track_prepend_artist = True
search_type = incrementing_page
number_of_albums_to_grab = 10
remove_wanted_on_failure = False
title_blacklist = BlacklistWord1,blacklistword2
search_source = missing
enable_search_denylist = False
max_search_failures = 3

[Download Settings]
download_filtering = True
use_extension_whitelist = False
extensions_whitelist = lrc,nfo,txt

[Logging]
level = INFO
# https://docs.python.org/3/library/logging.html#logrecord-attributes
format = [%(levelname)s|%(module)s|L%(lineno)d] %(asctime)s: %(message)s
# https://docs.python.org/3/library/time.html#time.strftime
datefmt = %Y-%m-%dT%H:%M:%S%z

root@soulseek:/srv/soulseek# ip a
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
    inet 127.0.0.1/8 scope host lo
       valid_lft forever preferred_lft forever
    inet6 ::1/128 scope host noprefixroute 
       valid_lft forever preferred_lft forever
2: eth0@if237: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default qlen 1000
    link/ether bc:24:11:75:53:26 brd ff:ff:ff:ff:ff:ff link-netnsid 0
    inet 192.168.236.9/24 scope global eth0
       valid_lft forever preferred_lft forever
    inet6 fe80::be24:11ff:fe75:5326/64 scope link proto kernel_ll 
       valid_lft forever preferred_lft forever
3: br-405a064a2c76: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default 
    link/ether 8e:ac:f0:20:b8:06 brd ff:ff:ff:ff:ff:ff
    inet 172.18.0.1/16 brd 172.18.255.255 scope global br-405a064a2c76
       valid_lft forever preferred_lft forever
    inet6 fe80::8cac:f0ff:fe20:b806/64 scope link proto kernel_ll 
       valid_lft forever preferred_lft forever
4: docker0: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc noqueue state DOWN group default 
    link/ether 6e:fc:95:fb:ef:f0 brd ff:ff:ff:ff:ff:ff
    inet 172.17.0.1/16 brd 172.17.255.255 scope global docker0
       valid_lft forever preferred_lft forever
5: veth9ab30a1@if2: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue master br-405a064a2c76 state UP group default 
    link/ether 76:84:ea:1f:48:c7 brd ff:ff:ff:ff:ff:ff link-netnsid 1
    inet6 fe80::7484:eaff:fe1f:48c7/64 scope link proto kernel_ll 
       valid_lft forever preferred_lft forever
6: veth84d3bf3@if2: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue master br-405a064a2c76 state UP group default 
    link/ether ea:44:91:4a:54:27 brd ff:ff:ff:ff:ff:ff link-netnsid 2
    inet6 fe80::e844:91ff:fe4a:5427/64 scope link proto kernel_ll 
       valid_lft forever preferred_lft forever
root@soulseek:/srv/soulseek# docker ps
CONTAINER ID   IMAGE                COMMAND                  CREATED        STATUS                 PORTS                                                                                             NAMES
e980f3a3cc86   caddy:latest         "caddy run --config _"   18 hours ago   Up 4 hours             0.0.0.0:80->80/tcp, [::]:80->80/tcp, 0.0.0.0:443->443/tcp, [::]:443->443/tcp, 443/udp, 2019/tcp   caddy
3c0f629fcf13   slskd/slskd:latest   "/usr/bin/tini -- ./_"   18 hours ago   Up 4 hours (healthy)   0.0.0.0:5030->5030/tcp, [::]:5030->5030/tcp, 0.0.0.0:50300->50300/tcp, [::]:50300->50300/tcp      slskd

root@soulseek:/srv/soulseek# cat docker-compose.yml 
version: "3.8"

services:
  slskd:
    image: slskd/slskd:latest
    container_name: slskd
    ports:
      - "5030:5030"   # HTTP Web UI
      - "50300:50300" # Soulseek listening port
    environment:
      - SLSKD_REMOTE_CONFIGURATION=true
      - SLSKD_HTTP_PORT=5030
    volumes:
      - /srv/soulseek/data:/app
      - /mnt/nas/musicz:/mnt/nas/musicz
      - /mnt/nas/slskd/downloads:/downloads
      - /mnt/nas/slskd/incomplete:/incomplete
    restart: unless-stopped

  caddy:
    image: caddy:latest
    container_name: caddy
    ports:
      - "443:443"
      - "80:80"
    volumes:
      - ./caddy/Caddyfile:/etc/caddy/Caddyfile:ro
      - ./caddy/root_ca.crt:/etc/caddy/certs/root_ca.crt:ro
      - caddy_data:/data
      - caddy_config:/config
    depends_on:
      - slskd
    restart: unless-stopped

networks:
  soulseek-net:
    driver: bridge

volumes:
  caddy_data:
  caddy_config:

but when i run soular.py:

During handling of the above exception, another exception occurred:

Traceback (most recent call last):
  File "/opt/soularr/soularr.py", line 977, in <module>
    failed = grab_most_wanted(wanted_records)
  File "/opt/soularr/soularr.py", line 451, in grab_most_wanted
    success = search_and_download(grab_list, query, all_tracks, all_tracks[0], artist_name, release)
  File "/opt/soularr/soularr.py", line 292, in search_and_download
    search = slskd.searches.search_text(searchText = query,
                                        searchTimeout = config.getint('Search Settings', 'search_timeout', fallback=5000),
                                        filterResponses = True,
                                        maximumPeerQueueLength = config.getint('Search Settings', 'maximum_peer_queue', fallback=50),
                                        minimumPeerUploadSpeed = config.getint('Search Settings', 'minimum_peer_upload_speed', fallback=0))
  File "/usr/local/lib/python3.13/dist-packages/slskd_api/apis/searches.py", line 69, in search_text
    response = self.session.post(url, json=data)
  File "/usr/local/lib/python3.13/dist-packages/requests/sessions.py", line 637, in post
    return self.request("POST", url, data=data, json=json, **kwargs)
           ~~~~~~~~~~~~^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/usr/local/lib/python3.13/dist-packages/requests/sessions.py", line 589, in request
    resp = self.send(prep, **send_kwargs)
  File "/usr/local/lib/python3.13/dist-packages/requests/sessions.py", line 724, in send
    history = [resp for resp in gen]
                                ^^^
  File "/usr/local/lib/python3.13/dist-packages/requests/sessions.py", line 265, in resolve_redirects
    resp = self.send(
        req,
    ...<6 lines>...
        **adapter_kwargs,
    )
  File "/usr/local/lib/python3.13/dist-packages/requests/sessions.py", line 703, in send
    r = adapter.send(request, **kwargs)
  File "/usr/local/lib/python3.13/dist-packages/slskd_api/client.py", line 32, in send
    return super().send(*args, **kwargs)
           ~~~~~~~~~~~~^^^^^^^^^^^^^^^^^
  File "/usr/local/lib/python3.13/dist-packages/requests/adapters.py", line 675, in send
    raise SSLError(e, request=request)
requests.exceptions.SSLError: HTTPSConnectionPool(host='192.168.236.9', port=443): Max retries exceeded with url: /:5030/api/v0/searches (Caused by SSLError(SSLError(1, '[SSL: TLSV1_ALERT_INTERNAL_ERROR] tlsv1 alert internal error (_ssl.c:1029)')))

[ERROR|soularr|L980] 2026-01-04T13:10:46+0000: 
 Fatal error! Exiting...

it also happens when i connect via caddy:

urllib3.exceptions.MaxRetryError: HTTPSConnectionPool(host='soulseek.lab', port=443): Max retries exceeded with url: /api/v0/searches (Caused by SSLError(SSLCertVerificationError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: unable to get local issuer certificate (_ssl.c:1029)')))

During handling of the above exception, another exception occurred:

Traceback (most recent call last):
  File "/opt/soularr/soularr.py", line 977, in <module>
    failed = grab_most_wanted(wanted_records)
  File "/opt/soularr/soularr.py", line 470, in grab_most_wanted
    success = search_and_download(grab_list, query, tracks, track, artist_name, release)
  File "/opt/soularr/soularr.py", line 292, in search_and_download
    search = slskd.searches.search_text(searchText = query,
                                        searchTimeout = config.getint('Search Settings', 'search_timeout', fallback=5000),
                                        filterResponses = True,
                                        maximumPeerQueueLength = config.getint('Search Settings', 'maximum_peer_queue', fallback=50),
                                        minimumPeerUploadSpeed = config.getint('Search Settings', 'minimum_peer_upload_speed', fallback=0))
  File "/usr/local/lib/python3.13/dist-packages/slskd_api/apis/searches.py", line 69, in search_text
    response = self.session.post(url, json=data)
  File "/usr/local/lib/python3.13/dist-packages/requests/sessions.py", line 637, in post
    return self.request("POST", url, data=data, json=json, **kwargs)
           ~~~~~~~~~~~~^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/usr/local/lib/python3.13/dist-packages/requests/sessions.py", line 589, in request
    resp = self.send(prep, **send_kwargs)
  File "/usr/local/lib/python3.13/dist-packages/requests/sessions.py", line 703, in send
    r = adapter.send(request, **kwargs)
  File "/usr/local/lib/python3.13/dist-packages/slskd_api/client.py", line 32, in send
    return super().send(*args, **kwargs)
           ~~~~~~~~~~~~^^^^^^^^^^^^^^^^^
  File "/usr/local/lib/python3.13/dist-packages/requests/adapters.py", line 675, in send
    raise SSLError(e, request=request)
requests.exceptions.SSLError: HTTPSConnectionPool(host='soulseek.lab', port=443): Max retries exceeded with url: /api/v0/searches (Caused by SSLError(SSLCertVerificationError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: unable to get local issuer certificate (_ssl.c:1029)')))

[ERROR|soularr|L980] 2026-01-04T13:09:23+0000: 
 Fatal error! Exiting...

what i honestly dont understand if that if i specify the port 5030, the error says it failed to connect to 443?

[insanemal]

This is wrong host_url = http://192.168.236.9/:5030

It should be host_url = http://192.168.236.9:5030/

[audricd]

oh wow that was stupid from me. thank you very much!