[GH-ISSUE #10625] curl: (60) SSL certificate problem: certificate has expired #6990

Closed
opened 2026-04-12 18:53:04 -05:00 by GiteaMirror · 1 comment
Owner

Originally created by @szd1106 on GitHub (May 9, 2025).
Original GitHub issue: https://github.com/ollama/ollama/issues/10625

What is the issue?

root@root1:~/ollama# curl -fsSL https://ollama.com/install.sh | sh
curl: (60) SSL certificate problem: certificate has expired
More details here: https://curl.haxx.se/docs/sslcerts.html

curl failed to verify the legitimacy of the server and therefore could not
establish a secure connection to it. To learn more about this situation and
how to fix it, please visit the web page mentioned above.

Relevant log output


OS

No response

GPU

No response

CPU

No response

Ollama version

No response

Originally created by @szd1106 on GitHub (May 9, 2025). Original GitHub issue: https://github.com/ollama/ollama/issues/10625 ### What is the issue? root@root1:~/ollama# curl -fsSL https://ollama.com/install.sh | sh curl: (60) SSL certificate problem: certificate has expired More details here: https://curl.haxx.se/docs/sslcerts.html curl failed to verify the legitimacy of the server and therefore could not establish a secure connection to it. To learn more about this situation and how to fix it, please visit the web page mentioned above. ### Relevant log output ```shell ``` ### OS _No response_ ### GPU _No response_ ### CPU _No response_ ### Ollama version _No response_
GiteaMirror added the bug label 2026-04-12 18:53:04 -05:00
Author
Owner

@galoisgroupcn commented on GitHub (May 10, 2025):

The error you’re seeing (curl: (60) SSL certificate problem: certificate has expired) means your system doesn’t trust the SSL certificate for ollama.com, usually because your root CA certificates are out of date or missing.

How to fix:

  1. Update your system’s CA certificates:
    On most Debian/Ubuntu-based systems, run:

    sudo apt-get update
    sudo apt-get install --reinstall ca-certificates
    sudo update-ca-certificates

On Red Hat/CentOS:

sudo yum update ca-certificates
  1. Check your system clock:
    If your computer's date/time is wrong (especially if it's far in the past), SSL validation can fail. Make sure your system clock is correct.

  2. Retry the istall command:
    curl -fsSl https://ollama.com/install.sh | sh

  3. If you’re in a container or very old OS:

You may need to update your base image or manually update certificates.

Avoid using curl --insecure unless absolutely necessary as it disables SSL checks and exposes you to security risks.

For more details, see curl’s SSL certs documentation.

Let me know if you need step-by-step help for your specific OS!

<!-- gh-comment-id:2868393266 --> @galoisgroupcn commented on GitHub (May 10, 2025): The error you’re seeing (curl: (60) SSL certificate problem: certificate has expired) means your system doesn’t trust the SSL certificate for ollama.com, usually because your root CA certificates are out of date or missing. How to fix: 1. Update your system’s CA certificates: On most Debian/Ubuntu-based systems, run: sudo apt-get update sudo apt-get install --reinstall ca-certificates sudo update-ca-certificates On Red Hat/CentOS: sudo yum update ca-certificates 2. Check your system clock: If your computer's date/time is wrong (especially if it's far in the past), SSL validation can fail. Make sure your system clock is correct. 3. Retry the istall command: curl -fsSl https://ollama.com/install.sh | sh 4. If you’re in a container or very old OS: You may need to update your base image or manually update certificates. Avoid using curl --insecure unless absolutely necessary as it disables SSL checks and exposes you to security risks. For more details, see [curl’s SSL certs documentation](https://curl.haxx.se/docs/sslcerts.html). Let me know if you need step-by-step help for your specific OS!
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: github-starred/ollama#6990