github-starred/ollama
2
0
Fork 0
mirror of https://github.com/ollama/ollama.git synced 2026-07-16 05:05:37 -05:00
Code Issues 16.9k Packages Projects Releases 122 Wiki Activity

[GH-ISSUE #9101] tls: failed to verify certificate: x509: certificate signed by unknown authority #67980

New Issue
Closed
opened 2026-05-04 12:10:51 -05:00 by GiteaMirror · 2 comments
GiteaMirror commented 2026-05-04 12:10:51 -05:00
Owner
Copy Link

Originally created by @gongchangsui on GitHub (Feb 14, 2025).
Original GitHub issue: https://github.com/ollama/ollama/issues/9101

Originally assigned to: @bmizerany on GitHub.

What is the issue?

Image
When I add parameter --insecure, an error is still reported.
how to fiexed it?

Relevant log output

Feb 14 10:50:04 localhost.localdomain systemd[1]: Started Ollama Service.
Feb 14 10:50:04 localhost.localdomain ollama[16638]: 2025/02/14 10:50:04 routes.go:1186: INFO server config env="map[CUDA_VISIBLE_DEVICES: GPU_DEVICE_ORDINAL: HIP_VISIBLE_DEVICES: HSA_OVERRIDE_GFX_VERSION: HTTPS_PROXY: HTTP_PROXY: NO_PROXY: OLLAMA_DEBUG:false OLLAMA_FLASH_ATTENTION:false OLLAMA_GPU_OVERHEAD:0 OLLAMA_HOST:http://127.0.0.1:11434 OLLAMA_INTEL_GPU:false OLLAMA_KEEP_ALIVE:5m0s OLLAMA_KV_CACHE_TYPE: OLLAMA_LLM_LIBRARY: OLLAMA_LOAD_TIMEOUT:5m0s OLLAMA_MAX_LOADED_MODELS:0 OLLAMA_MAX_QUEUE:512 OLLAMA_MODELS:/usr/share/ollama/.ollama/models OLLAMA_MULTIUSER_CACHE:false OLLAMA_NOHISTORY:false OLLAMA_NOPRUNE:false OLLAMA_NUM_PARALLEL:0 OLLAMA_ORIGINS:[http://localhost https://localhost http://localhost:* https://localhost:* http://127.0.0.1 https://127.0.0.1 http://127.0.0.1:* https://127.0.0.1:* http://0.0.0.0 https://0.0.0.0 http://0.0.0.0:* https://0.0.0.0:* app://* file://* tauri://* vscode-webview://*] OLLAMA_SCHED_SPREAD:false ROCR_VISIBLE_DEVICES: http_proxy:http://90.255.87.171:3129 https_proxy:http://90.255.87.171:3129 no_proxy:]"
Feb 14 10:50:04 localhost.localdomain ollama[16638]: time=2025-02-14T10:50:04.732Z level=INFO source=images.go:432 msg="total blobs: 0"
Feb 14 10:50:04 localhost.localdomain ollama[16638]: time=2025-02-14T10:50:04.732Z level=INFO source=images.go:439 msg="total unused blobs removed: 0"
Feb 14 10:50:04 localhost.localdomain ollama[16638]: time=2025-02-14T10:50:04.732Z level=INFO source=routes.go:1237 msg="Listening on 127.0.0.1:11434 (version 0.5.10)"
Feb 14 10:50:04 localhost.localdomain ollama[16638]: time=2025-02-14T10:50:04.732Z level=INFO source=gpu.go:217 msg="looking for compatible GPUs"
Feb 14 10:50:06 localhost.localdomain ollama[16638]: time=2025-02-14T10:50:06.272Z level=INFO source=types.go:130 msg="inference compute" id=GPU-a2478148-551c-c74d-644e-f6d1b11660ac library=cuda variant=v12 compute=8.0 driver=12.6 name="NVIDIA A100-PCIE-40GB" total="39.5 GiB" available="39.1 GiB"
Feb 14 10:50:17 localhost.localdomain ollama[16638]: [GIN] 2025/02/14 - 10:50:17 | 200 |        54.1µs |       127.0.0.1 | HEAD     "/"
Feb 14 10:50:17 localhost.localdomain ollama[16638]: [GIN] 2025/02/14 - 10:50:17 | 404 |     1.33253ms |       127.0.0.1 | POST     "/api/show"
Feb 14 10:50:17 localhost.localdomain ollama[16638]: time=2025-02-14T10:50:17.698Z level=INFO source=images.go:669 msg="request failed: Get \"https://registry.ollama.ai/v2/library/deepseek-r1/manifests/1.5b\": tls: failed to verify certificate: x509: certificate signed by unknown authority"
Feb 14 10:50:17 localhost.localdomain ollama[16638]: [GIN] 2025/02/14 - 10:50:17 | 200 |   243.22498ms |       127.0.0.1 | POST     "/api/pull"
Feb 14 10:50:27 localhost.localdomain ollama[16638]: [GIN] 2025/02/14 - 10:50:27 | 200 |       30.69µs |       127.0.0.1 | HEAD     "/"
Feb 14 10:50:27 localhost.localdomain ollama[16638]: [GIN] 2025/02/14 - 10:50:27 | 404 |      111.01µs |       127.0.0.1 | POST     "/api/show"
Feb 14 10:50:27 localhost.localdomain ollama[16638]: time=2025-02-14T10:50:27.478Z level=INFO source=images.go:669 msg="request failed: Get \"https://registry.ollama.ai/v2/library/deepseek-r1/manifests/1.5b\": tls: failed to verify certificate: x509: certificate signed by unknown authority"
Feb 14 10:50:27 localhost.localdomain ollama[16638]: [GIN] 2025/02/14 - 10:50:27 | 200 |   191.69371ms |       127.0.0.1 | POST     "/api/pull"
Feb 14 10:53:51 localhost.localdomain ollama[16638]: [GIN] 2025/02/14 - 10:53:51 | 200 |       28.57µs |       127.0.0.1 | HEAD     "/"
Feb 14 10:53:51 localhost.localdomain ollama[16638]: [GIN] 2025/02/14 - 10:53:51 | 404 |      116.71µs |       127.0.0.1 | POST     "/api/show"
Feb 14 10:53:52 localhost.localdomain ollama[16638]: time=2025-02-14T10:53:52.042Z level=INFO source=images.go:669 msg="request failed: Get \"https://registry.ollama.ai/v2/library/deepseek-r1/manifests/1.5b\": tls: failed to verify certificate: x509: certificate signed by unknown authority"
Feb 14 10:53:52 localhost.localdomain ollama[16638]: [GIN] 2025/02/14 - 10:53:52 | 200 |   211.96173ms |       127.0.0.1 | POST     "/api/pull"
Feb 14 10:55:09 localhost.localdomain ollama[16638]: [GIN] 2025/02/14 - 10:55:09 | 200 |        28.5µs |       127.0.0.1 | HEAD     "/"
Feb 14 10:55:09 localhost.localdomain ollama[16638]: time=2025-02-14T10:55:09.254Z level=INFO source=images.go:669 msg="request failed: Get \"https://registry.ollama.ai/v2/library/deepseek-r1/manifests/1.5b\": tls: failed to verify certificate: x509: certificate signed by unknown authority"
Feb 14 10:55:09 localhost.localdomain ollama[16638]: [GIN] 2025/02/14 - 10:55:09 | 200 |   193.76285ms |       127.0.0.1 | POST     "/api/pull"
Feb 14 11:00:41 localhost.localdomain ollama[16638]: [GIN] 2025/02/14 - 11:00:41 | 200 |       24.07µs |       127.0.0.1 | HEAD     "/"
Feb 14 11:00:41 localhost.localdomain ollama[16638]: time=2025-02-14T11:00:41.841Z level=INFO source=images.go:669 msg="request failed: Get \"https://registry.ollama.ai/v2/library/deepseek-r1/manifests/1.5b\": tls: failed to verify certificate: x509: certificate signed by unknown authority"
Feb 14 11:00:41 localhost.localdomain ollama[16638]: [GIN] 2025/02/14 - 11:00:41 | 200 |   250.36105ms |       127.0.0.1 | POST     "/api/pull"
Feb 14 11:04:15 localhost.localdomain ollama[16638]: [GIN] 2025/02/14 - 11:04:15 | 200 |       36.16µs |       127.0.0.1 | GET      "/api/version"

OS

Linux

GPU

Nvidia

CPU

Other

Ollama version

0.5.10

Originally created by @gongchangsui on GitHub (Feb 14, 2025). Original GitHub issue: https://github.com/ollama/ollama/issues/9101 Originally assigned to: @bmizerany on GitHub. ### What is the issue? ![Image](https://github.com/user-attachments/assets/43d6f189-4cc7-4bfd-abd2-7b734898621f) When I add parameter `--insecure`, an error is still reported. how to fiexed it? ### Relevant log output ```shell Feb 14 10:50:04 localhost.localdomain systemd[1]: Started Ollama Service. Feb 14 10:50:04 localhost.localdomain ollama[16638]: 2025/02/14 10:50:04 routes.go:1186: INFO server config env="map[CUDA_VISIBLE_DEVICES: GPU_DEVICE_ORDINAL: HIP_VISIBLE_DEVICES: HSA_OVERRIDE_GFX_VERSION: HTTPS_PROXY: HTTP_PROXY: NO_PROXY: OLLAMA_DEBUG:false OLLAMA_FLASH_ATTENTION:false OLLAMA_GPU_OVERHEAD:0 OLLAMA_HOST:http://127.0.0.1:11434 OLLAMA_INTEL_GPU:false OLLAMA_KEEP_ALIVE:5m0s OLLAMA_KV_CACHE_TYPE: OLLAMA_LLM_LIBRARY: OLLAMA_LOAD_TIMEOUT:5m0s OLLAMA_MAX_LOADED_MODELS:0 OLLAMA_MAX_QUEUE:512 OLLAMA_MODELS:/usr/share/ollama/.ollama/models OLLAMA_MULTIUSER_CACHE:false OLLAMA_NOHISTORY:false OLLAMA_NOPRUNE:false OLLAMA_NUM_PARALLEL:0 OLLAMA_ORIGINS:[http://localhost https://localhost http://localhost:* https://localhost:* http://127.0.0.1 https://127.0.0.1 http://127.0.0.1:* https://127.0.0.1:* http://0.0.0.0 https://0.0.0.0 http://0.0.0.0:* https://0.0.0.0:* app://* file://* tauri://* vscode-webview://*] OLLAMA_SCHED_SPREAD:false ROCR_VISIBLE_DEVICES: http_proxy:http://90.255.87.171:3129 https_proxy:http://90.255.87.171:3129 no_proxy:]" Feb 14 10:50:04 localhost.localdomain ollama[16638]: time=2025-02-14T10:50:04.732Z level=INFO source=images.go:432 msg="total blobs: 0" Feb 14 10:50:04 localhost.localdomain ollama[16638]: time=2025-02-14T10:50:04.732Z level=INFO source=images.go:439 msg="total unused blobs removed: 0" Feb 14 10:50:04 localhost.localdomain ollama[16638]: time=2025-02-14T10:50:04.732Z level=INFO source=routes.go:1237 msg="Listening on 127.0.0.1:11434 (version 0.5.10)" Feb 14 10:50:04 localhost.localdomain ollama[16638]: time=2025-02-14T10:50:04.732Z level=INFO source=gpu.go:217 msg="looking for compatible GPUs" Feb 14 10:50:06 localhost.localdomain ollama[16638]: time=2025-02-14T10:50:06.272Z level=INFO source=types.go:130 msg="inference compute" id=GPU-a2478148-551c-c74d-644e-f6d1b11660ac library=cuda variant=v12 compute=8.0 driver=12.6 name="NVIDIA A100-PCIE-40GB" total="39.5 GiB" available="39.1 GiB" Feb 14 10:50:17 localhost.localdomain ollama[16638]: [GIN] 2025/02/14 - 10:50:17 | 200 | 54.1µs | 127.0.0.1 | HEAD "/" Feb 14 10:50:17 localhost.localdomain ollama[16638]: [GIN] 2025/02/14 - 10:50:17 | 404 | 1.33253ms | 127.0.0.1 | POST "/api/show" Feb 14 10:50:17 localhost.localdomain ollama[16638]: time=2025-02-14T10:50:17.698Z level=INFO source=images.go:669 msg="request failed: Get \"https://registry.ollama.ai/v2/library/deepseek-r1/manifests/1.5b\": tls: failed to verify certificate: x509: certificate signed by unknown authority" Feb 14 10:50:17 localhost.localdomain ollama[16638]: [GIN] 2025/02/14 - 10:50:17 | 200 | 243.22498ms | 127.0.0.1 | POST "/api/pull" Feb 14 10:50:27 localhost.localdomain ollama[16638]: [GIN] 2025/02/14 - 10:50:27 | 200 | 30.69µs | 127.0.0.1 | HEAD "/" Feb 14 10:50:27 localhost.localdomain ollama[16638]: [GIN] 2025/02/14 - 10:50:27 | 404 | 111.01µs | 127.0.0.1 | POST "/api/show" Feb 14 10:50:27 localhost.localdomain ollama[16638]: time=2025-02-14T10:50:27.478Z level=INFO source=images.go:669 msg="request failed: Get \"https://registry.ollama.ai/v2/library/deepseek-r1/manifests/1.5b\": tls: failed to verify certificate: x509: certificate signed by unknown authority" Feb 14 10:50:27 localhost.localdomain ollama[16638]: [GIN] 2025/02/14 - 10:50:27 | 200 | 191.69371ms | 127.0.0.1 | POST "/api/pull" Feb 14 10:53:51 localhost.localdomain ollama[16638]: [GIN] 2025/02/14 - 10:53:51 | 200 | 28.57µs | 127.0.0.1 | HEAD "/" Feb 14 10:53:51 localhost.localdomain ollama[16638]: [GIN] 2025/02/14 - 10:53:51 | 404 | 116.71µs | 127.0.0.1 | POST "/api/show" Feb 14 10:53:52 localhost.localdomain ollama[16638]: time=2025-02-14T10:53:52.042Z level=INFO source=images.go:669 msg="request failed: Get \"https://registry.ollama.ai/v2/library/deepseek-r1/manifests/1.5b\": tls: failed to verify certificate: x509: certificate signed by unknown authority" Feb 14 10:53:52 localhost.localdomain ollama[16638]: [GIN] 2025/02/14 - 10:53:52 | 200 | 211.96173ms | 127.0.0.1 | POST "/api/pull" Feb 14 10:55:09 localhost.localdomain ollama[16638]: [GIN] 2025/02/14 - 10:55:09 | 200 | 28.5µs | 127.0.0.1 | HEAD "/" Feb 14 10:55:09 localhost.localdomain ollama[16638]: time=2025-02-14T10:55:09.254Z level=INFO source=images.go:669 msg="request failed: Get \"https://registry.ollama.ai/v2/library/deepseek-r1/manifests/1.5b\": tls: failed to verify certificate: x509: certificate signed by unknown authority" Feb 14 10:55:09 localhost.localdomain ollama[16638]: [GIN] 2025/02/14 - 10:55:09 | 200 | 193.76285ms | 127.0.0.1 | POST "/api/pull" Feb 14 11:00:41 localhost.localdomain ollama[16638]: [GIN] 2025/02/14 - 11:00:41 | 200 | 24.07µs | 127.0.0.1 | HEAD "/" Feb 14 11:00:41 localhost.localdomain ollama[16638]: time=2025-02-14T11:00:41.841Z level=INFO source=images.go:669 msg="request failed: Get \"https://registry.ollama.ai/v2/library/deepseek-r1/manifests/1.5b\": tls: failed to verify certificate: x509: certificate signed by unknown authority" Feb 14 11:00:41 localhost.localdomain ollama[16638]: [GIN] 2025/02/14 - 11:00:41 | 200 | 250.36105ms | 127.0.0.1 | POST "/api/pull" Feb 14 11:04:15 localhost.localdomain ollama[16638]: [GIN] 2025/02/14 - 11:04:15 | 200 | 36.16µs | 127.0.0.1 | GET "/api/version" ``` ### OS Linux ### GPU Nvidia ### CPU Other ### Ollama version 0.5.10
GiteaMirror added the bug label 2026-05-04 12:10:51 -05:00
GiteaMirror commented 2026-05-04 12:11:06 -05:00
Author
Owner
Copy Link

@gongchangsui commented on GitHub (Feb 15, 2025):

Adding certificate of registry.ollama.ai to /etc/ssl/certs/ can avoid this issue, but why didn’t --insecure take effect?

<!-- gh-comment-id:2660820317 --> @gongchangsui commented on GitHub (Feb 15, 2025): Adding certificate of `registry.ollama.ai` to `/etc/ssl/certs/` can avoid this issue, but why didn’t `--insecure` take effect?
GiteaMirror commented 2026-05-04 12:11:07 -05:00
Author
Owner
Copy Link

@bmizerany commented on GitHub (Feb 16, 2025):

The insecure flag allows non-TLS http URLs. It does not mean "skip TLS verification". It is misleading and I'm hoping to fix this soon.

<!-- gh-comment-id:2661197484 --> @bmizerany commented on GitHub (Feb 16, 2025): The insecure flag allows non-TLS http URLs. It does not mean "skip TLS verification". It is misleading and I'm hoping to fix this soon.
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
Clear labels
amd
api
app
bug
build
cli
cloud
compatibility
context-length
create
docker
documentation
embeddings
feature request
feedback wanted
good first issue
gpt-oss
gpu
harmony
help wanted
image
install
intel
js
launch
linux
macos
memory
mlx
model
needs more info
networking
nvidia
ollama.com
performance
pull-request
Mirrored from GitHub Pull Request
 python
question
registry
rendering
thinking
tools
top
vulkan
windows
wsl
No Label bug
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
GiteaMirror ninjasurge
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: github-starred/ollama#67980
Delete Branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?