[GH-ISSUE #23672] issue: Openwebui ignores AIOHTTP_CLIENT_SESSION_SSL for STT engine URL #35572

Closed
opened 2026-04-25 09:45:38 -05:00 by GiteaMirror · 3 comments
Owner

Originally created by @orKL3mlz on GitHub (Apr 13, 2026).
Original GitHub issue: https://github.com/open-webui/open-webui/issues/23672

Check Existing Issues

  • I have searched for any existing and/or related issues.
  • I have searched for any existing and/or related discussions.
  • I have also searched in the CLOSED issues AND CLOSED discussions and found no related items (your issue might already be addressed on the development branch!).
  • I am using the latest version of Open WebUI.

Installation Method

Git Clone

Open WebUI Version

v0.8.12

Ollama Version (if applicable)

0.20.3

Operating System

Docker

Browser (if applicable)

No response

Confirmation

  • I have read and followed all instructions in README.md.
  • I am using the latest version of both Open WebUI and Ollama.
  • I have included the browser console logs.
  • I have included the Docker container logs.
  • I have provided every relevant configuration, setting, and environment variable used in my setup.
  • I have clearly listed every relevant configuration, custom setting, environment variable, and command-line option that influences my setup (such as Docker Compose overrides, .env values, browser settings, authentication configurations, etc).
  • I have documented step-by-step reproduction instructions that are precise, sequential, and leave nothing to interpretation. My steps:
  • Start with the initial platform/version/OS and dependencies used,
  • Specify exact install/launch/configure commands,
  • List URLs visited, user input (incl. example values/emails/passwords if needed),
  • Describe all options and toggles enabled or changed,
  • Include any files or environmental changes,
  • Identify the expected and actual result at each stage,
  • Ensure any reasonably skilled user can follow and hit the same issue.

Expected Behavior

Openwebui should ignore self signed certificate errors if AIOHTTP_CLIENT_SESSION_SSL = False when making calls to the speech to text engine.

Actual Behavior

When configuring Speech to text to OpenAI, and setting the URL to https://x.x.x.x/v1, and if the certificate is self-signed, we have

requests.exceptions.SSLError: HTTPSConnectionPool(host='x.x.x.x', port=443): Max retries exceeded with url: /v1/audio/transcriptions (Caused by SSLError(SSLCertVerificationError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: self-signed certificate (_ssl.c:1016)')))

Steps to Reproduce

Set AIOHTTP_CLIENT_SESSION_SSL = False and REQUESTS_VERIFY = False inside .env
Configure stt backend to use a self-signed certificate
Configure the connection inside Openwebui Audio STT endpoint : https://x.x.x.x/speech
Save the settings and try use the voice feature from a new conversation (mic logo, to transcript voice to text)

Logs & Screenshots

requests.exceptions.SSLError: HTTPSConnectionPool(host='x.x.x.x', port=443): Max retries exceeded with url: /v1/audio/transcriptions (Caused by SSLError(SSLCertVerificationError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: self-signed certificate (_ssl.c:1016)')))

Additional Information

No response

Originally created by @orKL3mlz on GitHub (Apr 13, 2026). Original GitHub issue: https://github.com/open-webui/open-webui/issues/23672 ### Check Existing Issues - [x] I have searched for any existing and/or related issues. - [x] I have searched for any existing and/or related discussions. - [x] I have also searched in the CLOSED issues AND CLOSED discussions and found no related items (your issue might already be addressed on the development branch!). - [x] I am using the latest version of Open WebUI. ### Installation Method Git Clone ### Open WebUI Version v0.8.12 ### Ollama Version (if applicable) 0.20.3 ### Operating System Docker ### Browser (if applicable) _No response_ ### Confirmation - [x] I have read and followed all instructions in `README.md`. - [x] I am using the latest version of **both** Open WebUI and Ollama. - [x] I have included the browser console logs. - [x] I have included the Docker container logs. - [x] I have **provided every relevant configuration, setting, and environment variable used in my setup.** - [x] I have clearly **listed every relevant configuration, custom setting, environment variable, and command-line option that influences my setup** (such as Docker Compose overrides, .env values, browser settings, authentication configurations, etc). - [x] I have documented **step-by-step reproduction instructions that are precise, sequential, and leave nothing to interpretation**. My steps: - Start with the initial platform/version/OS and dependencies used, - Specify exact install/launch/configure commands, - List URLs visited, user input (incl. example values/emails/passwords if needed), - Describe all options and toggles enabled or changed, - Include any files or environmental changes, - Identify the expected and actual result at each stage, - Ensure any reasonably skilled user can follow and hit the same issue. ### Expected Behavior Openwebui should ignore self signed certificate errors if `AIOHTTP_CLIENT_SESSION_SSL = False` when making calls to the speech to text engine. ### Actual Behavior When configuring Speech to text to `OpenAI`, and setting the URL to `https://x.x.x.x/v1`, and if the certificate is self-signed, we have ``` requests.exceptions.SSLError: HTTPSConnectionPool(host='x.x.x.x', port=443): Max retries exceeded with url: /v1/audio/transcriptions (Caused by SSLError(SSLCertVerificationError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: self-signed certificate (_ssl.c:1016)'))) ``` ### Steps to Reproduce Set AIOHTTP_CLIENT_SESSION_SSL = False and REQUESTS_VERIFY = False inside .env Configure stt backend to use a self-signed certificate Configure the connection inside Openwebui Audio STT endpoint : https://x.x.x.x/speech Save the settings and try use the voice feature from a new conversation (mic logo, to transcript voice to text) ### Logs & Screenshots requests.exceptions.SSLError: HTTPSConnectionPool(host='x.x.x.x', port=443): Max retries exceeded with url: /v1/audio/transcriptions (Caused by SSLError(SSLCertVerificationError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: self-signed certificate (_ssl.c:1016)'))) ### Additional Information _No response_
GiteaMirror added the bug label 2026-04-25 09:45:38 -05:00
Author
Owner

@Classic298 commented on GitHub (Apr 13, 2026):

could you verify if this is fixed in dev?

<!-- gh-comment-id:4236756158 --> @Classic298 commented on GitHub (Apr 13, 2026): could you verify if this is fixed in dev?
Author
Owner

@tjbck commented on GitHub (Apr 13, 2026):

Likely addressed in dev.

<!-- gh-comment-id:4239128942 --> @tjbck commented on GitHub (Apr 13, 2026): Likely addressed in dev.
Author
Owner

@orKL3mlz commented on GitHub (Apr 15, 2026):

Hi, tried this image : open-webui/open-webui:git-1860874-slim, but the issue is still there for STT

requests.exceptions.SSLError: HTTPSConnectionPool(host='x.x.x.x', port=443): Max retries exceeded with url: /v1/audio/transcriptions (Caused by SSLError(SSLCertVerificationError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: self-signed certificate (_ssl.c:1016)')))

There is also an issue with TTS when Openwebui is trying to get models and voices

ERROR    | open_webui.routers.audio:get_available_voices:1355 - Error fetching voices from custom endpoint: HTTPSConnectionPool(host='x.x.x.x', port=443): Max retries exceeded with url: /v1/audio/voices (Caused by SSLError(SSLCertVerificationError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: self-signed certificate (_ssl.c:1016)')))
ERROR    | open_webui.routers.audio:get_available_models:1309 - Error fetching models from custom endpoint: HTTPSConnectionPool(host='x.x.x.x', port=443): Max retries exceeded with url: /v1/audio/models (Caused by SSLError(SSLCertVerificationError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: self-signed certificate (_ssl.c:1016)')))
<!-- gh-comment-id:4251553099 --> @orKL3mlz commented on GitHub (Apr 15, 2026): Hi, tried this image : `open-webui/open-webui:git-1860874-slim`, but the issue is still there for STT ``` requests.exceptions.SSLError: HTTPSConnectionPool(host='x.x.x.x', port=443): Max retries exceeded with url: /v1/audio/transcriptions (Caused by SSLError(SSLCertVerificationError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: self-signed certificate (_ssl.c:1016)'))) ``` There is also an issue with TTS when Openwebui is trying to get models and voices ``` ERROR | open_webui.routers.audio:get_available_voices:1355 - Error fetching voices from custom endpoint: HTTPSConnectionPool(host='x.x.x.x', port=443): Max retries exceeded with url: /v1/audio/voices (Caused by SSLError(SSLCertVerificationError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: self-signed certificate (_ssl.c:1016)'))) ERROR | open_webui.routers.audio:get_available_models:1309 - Error fetching models from custom endpoint: HTTPSConnectionPool(host='x.x.x.x', port=443): Max retries exceeded with url: /v1/audio/models (Caused by SSLError(SSLCertVerificationError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: self-signed certificate (_ssl.c:1016)'))) ```
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: github-starred/open-webui#35572