Curl error 51: Cert verify failed: UNITYTLS_X509VERIFY_FLAG_EXPIRED

Yeah, the way to comply is to write a privacy policy that says "We don't gather data, but Unity probably does, we don't know".

 

Hi all, my project got this error last Friday.
Curl error 51: Cert verify failed: UNITYTLS_X509VERIFY_FLAG_CN_MISMATCH
The found this issue inside our editor and in our android app but somehow our iOS app works fine.
We have tried re-issue our SSL certification but it didn't work.

Does anyone have any idea? @Unity is there a specific SSL certification that we need to use?

 

But you still collect data if we turn off analytics right ? Since a few people here mentioned having the certificate error wile the analytics turned off if i'm not mistaken.

 

Well I checked the whole thread again. The certificate error without using the analytics was a misunderstanding. He didn't use the analytics but he also didn't "turned them off" in the settings.


@Charles_Beauchemin
I guess analytics is not the only function inside Unity, which is trying to get a connection to somewhere: https://forum.unity.com/threads/completely-disabling-analytics-at-runtime.520827/ In this thread is also mentioned, that only Plus/Pro users can turn them off completely.
Could you please provide some kind of manual, which describes in detail what steps have to be done, to stop a Unity build performing any outbound network connections and if there are any exceptions? All existing exceptions, like being a non Plus/Pro user, have to be listed, so that the developer has a chance to mention these points in the privacy policy. Otherwise, the build does not fully supports the regulation of GDPR.

 

Any updates on this? I am suddenly getting this error and it was working the day before:

Curl error 51: Cert verify failed: UNITYTLS_X509VERIFY_FLAG_EXPIRED

2018.4.13f1 is my verison. Happening in editor as well as OSX build

 

Same -- triggers when I try to do web requests.

 

Think my problem might be related to this:

https://support.sectigo.com/article...ddTrust-External-CA-Root-Expiring-May-30-2020

https://www.agwa.name/blog/post/fixing_the_addtrust_root_expiration

Is the Unity Editor somehow using the legacy system? Doesn't seem to happen in builds, only in editor (macOS) v2018.4.13 and v2019.2.12. Is there a way I can fix it?

edti: my fix was to self validate when running in editor

Code (CSharp):

1. www.certificateHandler = new AcceptAllCertificatesSignedWithASpecificKeyPublicKey();

then setup the override method like here: https://docs.unity3d.com/ScriptReference/Networking.CertificateHandler.ValidateCertificate.html where you replace it with the key you need (can print out the key if you don't know it and use that)

I'm not a security expert so I don't know what vulnerabilities this may have and I'm only doing this when running in editor because iOS doesn't seem to have this problem, so use at your own risk.

 

regedit.exe

add key

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\SystemCertificates\AuthRoot]
"DisableRootAutoUpdate"=dword:00000000

close all web browser

check web sites

https://aaacertificateservices.test.certificatetest.com/ AAA Certificate Services Root Test
https://addtrustaia.test.certificatetest.com/ USERTrust RSA Certification Authority Root Test
https://comodorsa.test.certificatetest.com/ COMODO RSA Certification Authority Root Test

 

Curl error 51: Cert verify failed: UNITYTLS_X509VERIFY_CN_MISMATCH - any idea if this is similar issue or I need to do something else

 

Error Unity Curl error 51: Cert verify failed: UNITYTLS_X509VERIFY_FLAG_CN_MISMATCH

Is there a reason this gets triggered randomly in my app, generally fixes itself by restarting the app.
It used to work fine until a couple of months ago, I use UnityWebRequest to download asset bundles.

How am I even supposed to find out what is causing this? this is not easily reproducible so I won't even bother with submitting a bug report

 

Any updates about the error ?

 

My project was working perfectly last week and suddenly I am encountering
UNITYTLS_X509VERIFY_FLAG_EXPIRED in my logs and my asset bundles are failing to be downloaded from amazon S3

What am I supposed to do about this?

 

+1

 

solved for me
I encountered with this error because i was sending Post request to an url that has expired SSL certificate
also sometimes this error is because of redirected url to expired SSL certificate.
you have to provide valid SSL certificate from your hosting.

 

Curl error 51: Cert verify failed: UNITYTLS_X509VERIFY_FLAG_CN_MISMATCH
Unity 2020.1.3f1 & 2020.1.0b4 Android happens after request to the server.