Webrequest fails with Curl error 60: Cert verify failed: UNITYTLS_X509VERIFY_FLAG_USER_ERROR1

I have a site located at netlify and just from a simple test it fails using a webrequest.
The simple test i made is shown below. And it is just trying to access the netlify main site but i get this error.

Curl error 60: Cert verify failed: UNITYTLS_X509VERIFY_FLAG_USER_ERROR1

What does that mean? I'm using Unity 2021.2.4f1

Code (CSharp):

1.  
2. using System.Collections;
3. using UnityEngine;
4. using UnityEngine.Networking;
5.  
6. public class TLSTesting : MonoBehaviour
7. {
8.     void Start()
9.     {
10.         StartCoroutine("WebTest");
11.     }
12.  
13.     IEnumerator WebTest()
14.     {
15.         string url = "https://www.netlify.com";
16.  
17.         Debug.Log(url);
18.         var request = new UnityWebRequest(url);
19.    
20.         yield return request.SendWebRequest();
21.  
22.         if (request.result == UnityWebRequest.Result.ConnectionError)
23.         {
24.             Debug.Log("CONNECTION ERROR");
25.             Debug.Log(request.error);
26.         }
27.         else if (request.result == UnityWebRequest.Result.ProtocolError)
28.         {
29.             Debug.Log("PROTOCOL ERROR");
30.             Debug.Log(request.error);
31.         }
32.         else if (request.result == UnityWebRequest.Result.DataProcessingError)
33.         {
34.             Debug.Log("DATA PROCESSING ERROR");
35.             Debug.Log(request.error);
36.         }
37.     }
38. }
39.  

 

I've also started running into this for some reason, but only on HoloLens with Unity 2020.3.24 and only with our application project; in the minimal repro project I can use e.g. HttpClient just fine.

One of the requests is to Amazon Web Services and I highly doubt their certificates are broken, so it's gotta be something else.

EDIT: this seems to be a Unity bug, but I can only reproduce it on UWP when the IL2CPP project is built in release mode (debug and master work fine) for ARM64. Which is unfortunately the config I care about during development because it has profiler support. We upgraded recently from 2020.3.17 so it seems to be a regression.
If anybody from Unity comes by, the bug report is number 1387294.

 

Hello, I'm getting the same error, I'm trying to connect to the WinCC via the REST Protocol. To do that I create the self-signed certificate and in the browser (if I disable the certificate cheking) everything works fine, also in the Postman I can do the same thing, but in Unity it seems, that I can't disable verification of the certificate. If someone have the idea how to solve this problem, please help me.

I'm getting the same error: Curl error 60: Cert verify failed: UNITYTLS_X509VERIFY_FLAG_USER_ERROR1
I use Unity 2020.3.23f1 (64-bit)

If it helps here is my code:

Code (CSharp):

1. using System;
2. using System.Net;
3. using System.IO;
4. using System.Security.Cryptography;
5. using System.Security.Cryptography.X509Certificates;
6. using System.Collections;
7. using System.Collections.Generic;
8. using UnityEngine;
9. using UnityEngine.Networking;
10. using UnityEditor;
11. using Proyecto26;
12. using RSG;
13. using RSG.Exceptions;
14.  
15. // Based on https://www.owasp.org/index.php/Certificate_and_Public_Key_Pinning#.Net
16. class AcceptAllCertificatesSignedWithASpecificPublicKey : CertificateHandler
17. {
18.     // Encoded RSAPublicKey
19.     private static string PUB_KEY = "somepublickey";
20.  
21.     protected override bool ValidateCertificate(byte[] certificateData)
22.     {
23.         //X509Certificate2 certificate = new X509Certificate2(certificateData);
24.  
25.         //string pk = certificate.GetPublicKeyString();
26.         //Debug.Log(pk.ToLower());
27.         //return pk.Equals(PUB_KEY);
28.         return true; // pk.Equals(PUB_KEY);
29.     }
30. }
31.  
32. /*
33. class NoCheckCertificatePolicy : System.Net.ICertificatePolicy
34. {
35.     public bool CheckValidationResult(ServicePoint srvPoint, X509Certificate certificate, WebRequest request, int certificateProblem)
36.     {
37.         return true;
38.     }
39. }
40. // ...
41. System.Net.ServicePointManager.CertificatePolicy = new NoCheckCertificatePolicy();
42. */
43. public class REST : MonoBehaviour
44. {
45.     // https://ESX910XW10X1.sce.ru:34567/WinCCRestService
46.  
47.     public void ButtonClick()
48.     {
49.         StartCoroutine(GetRequest("https://ESX910XWSRVX1.sce.ru:34565/WinCCRestService"));
50.     }
51.    
52.     IEnumerator GetRequest(string uri)
53.     {
54.         using (var www = UnityWebRequest.Get(uri))
55.         {
56.             //www.certificateHandler = new BypassCertificate();
57.             // Or
58.             www.certificateHandler = new AcceptAllCertificatesSignedWithASpecificPublicKey();
59.            
60.             Debug.Log("TEXT" + www.downloadHandler.text);
61.  
62.             yield return www.SendWebRequest();
63.             if (www.isNetworkError)
64.             {
65.                 Debug.Log("NetworkError is: " + www.error);
66.             }
67.             Debug.Log("HTTP Error: " + www.isHttpError);
68.          
69.             //...
70.         }
71.     }
72. }

 

I put Debug.Log() in the verification and it's working, but the verification itself does not

I'm running this code in the Editor, I tried to use the latest versions, even the 2022 beta, but nothing worked, so I returned to LTS versions (it seemed to me, that it'll be more stabel).

Also the code, that I'm using now (with some correction):

Code (CSharp):

1. using System;
2. using System.Net;
3. using System.IO;
4. using System.Security.Cryptography;
5. using System.Security.Cryptography.X509Certificates;
6. using System.Collections;
7. using System.Collections.Generic;
8. using UnityEngine;
9. using UnityEngine.Networking;
10. using UnityEditor;
11. using Proyecto26;
12. using RSG;
13. using RSG.Exceptions;
14.  
15. // Based on https://www.owasp.org/index.php/Certificate_and_Public_Key_Pinning#.Net
16. class AcceptAllCertificatesSignedWithASpecificPublicKey : CertificateHandler
17. {
18.     // Encoded RSAPublicKey
19.     private static string PUB_KEY = "keyishere";
20.  
21.     protected override bool ValidateCertificate(byte[] certificateData)
22.     {
23.         Debug.Log("I'm here");
24.         //X509Certificate2 certificate = new X509Certificate2(certificateData);
25.  
26.         //string pk = certificate.GetPublicKeyString();
27.         //Debug.Log(pk.ToLower());
28.         //return pk.Equals(PUB_KEY);
29.         return true; // pk.Equals(PUB_KEY);
30.     }
31. }
32.  
33. /*
34. class NoCheckCertificatePolicy : System.Net.ICertificatePolicy
35. {
36.     public bool CheckValidationResult(ServicePoint srvPoint, X509Certificate certificate, WebRequest request, int certificateProblem)
37.     {
38.         return true;
39.     }
40. }
41. // ...
42. System.Net.ServicePointManager.CertificatePolicy = new NoCheckCertificatePolicy();
43. */
44. public class REST : MonoBehaviour
45. {
46.     // https://ESX910XWSRVX1:35665/WinCCRestService
47.  
48.     public void ButtonClick()
49.     {
50.         StartCoroutine(GetRequest("https://ESX910XWSRVX1:35665/WinCCRestService"));
51.     }
52.    
53.     IEnumerator GetRequest(string uri)
54.     {
55.         using (var www = UnityWebRequest.Get(uri))
56.         {
57.             //www.certificateHandler = new BypassCertificate();
58.             // Or
59.             www.certificateHandler = new AcceptAllCertificatesSignedWithASpecificPublicKey();
60.  
61.             yield return www.SendWebRequest();
62.  
63.             if (www.result == UnityWebRequest.Result.Success)
64.             {
65.                 Debug.Log("Here's the needed text: " + www.downloadHandler.text);
66.             }
67.             if (www.isNetworkError)
68.             {
69.                 Debug.Log("NetworkError is: " + www.isNetworkError);
70.             }
71.             if (www.isHttpError)
72.             {
73.                 Debug.Log("HTTP Error: " + www.isHttpError);
74.             }
75.            
76.          
77.             //...
78.         }
79.     }
80. }

Here's the screenshot of what I'm getting in the console:

 

I have same error. Looking for solution.

 

Same here with Unity Pro 2020.3.24f1 in Editor with Android Platform:

Curl error 60: Cert verify failed: UNITYTLS_X509VERIFY_FLAG_USER_ERROR1

I will try downgrading to Unity 2020.3.17 as @holo-krzysztof said =)
[EDIT: NOT TESTED ... It wasn't necessary in my case ...]

 

Here's the issue about it being broken on HoloLens: https://issuetracker.unity3d.com/is...hen-uwp-build-configuration-is-set-to-release

 

I have solved my problem...

I have done some research on the web:
https://www.google.com/search?q=Curl+error+60:+Cert+verify+failed:+UNITYTLS_X509VERIFY_FLAG_USER_ERROR1&oq=Curl+error+60:+Cert+verify+failed:+UNITYTLS_X509VERIFY_FLAG_USER_ERROR1&aqs=chrome..69i57.888j0j7&sourceid=chrome&ie=UTF-8

This error maybe is a Server-side issue:
1. https://stackoverflow.com/questions...ficate-unable-to-get-local-issuer-certificate
2. https://programmerah.com/curl-error-60-ssl-certificate-problem-12740/

I spoke to the backend team today ... Problem solved ...
In my case the problem was the configuration of the endpoints ...
I was integrating the app with new servers, I only knew the main link, where the endpoints were created with different criteria than those of the previous server =P

Cheers,
Luigi =D

 

Hi @Jacob @holo-krzysztof @Nikit_Kalach @MoeSionadeL

I can try to give some suggestions to help others:
1. Add Debug.Log of URLs and parameters
2. Check http, https, "/", "\", space, duplicated words or strange simbols
3. Check on the Server side if the Requests are what they expect on the server side
4. Test in Postman if the Requests are/seem correct

Cheers,
Luigi =D

 

@JeffDUnity3D

My mistake was due to the wrong composition of the URL...
The server replied with:
Curl error 60: Cert verify failed: UNITYTLS_X509VERIFY_FLAG_USER_ERROR1

Today I corrected the URL of the server call and it worked fine.

This is my Console Log with correct URL, No Errors =D

 

You can try to change some chars in the URL... and check if certificate error appear

Example, try to change correct URL like this:

https://service.server.com/backend/etc...

with something like this:

https://backend.service.server.com/etc...
or
https://service.server.com/backend/backend/etc...

 

This is my Console Log with wrong URL, 2 Errors =(

In my case in server name and other parts of the URL are present some minus "-",
like:
test.ser-ver.com/test-te-st/etc...

 

I cannot share my code.
the server is on AWS (I don't know how it is deployed)

 

Same issue happening for me in Unity 2020.3.25f1 when downloading some images from a Netlify host. I noticed the TLS version is 1.3 which might be the cause since Unity doesn't support it.

Is there any way to get around this? I have tried implementing my own certificateHandler but that didn't seem to help.

 

I also noticed this issue recently after updating to 2020.3.25f1 but only when built and run on the device. Changing the address from "https" to "http" makes it work though. Tried to simplify the code used a bit to show the issue

Code (CSharp):

1.  
2.         string wholePath = "https://www.horseserver.com/bundles2022/Android/bitmapsfirstload?a=176285";
3.         //string wholePath_ThisOneWorksOnAndroid = "http://www.horseserver.com/bundles2022/Android/bitmapsfirstload?a=176285";
4.         UnityEngine.Debug.Log("Whole path is: " + wholePath);
5.         UnityWebRequest www = UnityWebRequest.Get(wholePath);
6.         www.SendWebRequest();
7.  

Am making an effort to downgrade back to an earlier version where we last had a working build now.

 

We ran into the same issue. It seems indeed to be connected to TLS 1.3: When we enforced TLS 1.3 in our backend, the UNITYTLS_X509VERIFY_FLAG_USER_ERROR1 showed up. After allowing for lower TLS versions as well, it disappeared.

 

I was having the same error using Unity 2020.3.24f1 for a UWP ARM64 Build for the HoloLens 2, against a CCD bucket.
My initial solution was to move to a AWS S3 (publicly open) and replace the request's uri HTTPS to HTTP.

I updated to 2020.3.28f1 and my CCD requests now work on the device.

I have to thank what was noted in this Unity Answer (which points to issue 1387295), so thank you.

 

This is still happing for us in Unity version 2020.3.28f1 when downloading images in the Editor and Windows builds. This is one of the images that has the issue https://assets.polkamon.com/images/Unimons_T01C04H09B01G00.jpg

We have verified that TLS 1.2 is supported on the server and other file types hosted at the same place work without issue.

Errors:

Curl error 60: Cert verify failed: UNITYTLS_X509VERIFY_FLAG_USER_ERROR1



Error: SSL CA certificate error

 

I have checked with my devs and it occurs on all their machines as well so I don't think it is dependent on device certs.

I have narrowed down that it seems to be caused by netlify hosting. I uploaded a single image to netlify and the same thing occurs.

 

After updating to Unity 2021_2_f1 I am getting same issue, I am using backend https://mysite.azurewebsites.net its working fine on Android and IOS but on Windows Store no so temp workaround is to use http instead of https if windows store compile

 

Any updates on this issue? I encountered this bug when trying to send a POST WebRequest to AWS using Unity 2020.3.26. I learned the bug was fixed in Unity 2020.3.28f1 so I updated the project to the latest 2020.3.30 version and now "Curl error 60: Cert verify failed: UNITYTLS_X509VERIFY_FLAG_USER_ERROR1" appears additionality when sending requests to AWS.

 

I also have the issue with a certificate generated by certbot.
I'm using Unity 2021.3.0f1.

 

Same error.

I'm using Unity 2020.3.33f1

 

Same error.

Code (CSharp):

1. 2022.07.03 20:37:12.128 28105 28207 Error Unity Curl error 60: Cert verify failed: UNITYTLS_X509VERIFY_FLAG_USER_ERROR1
2. 2022.07.03 20:37:12.128 28105 28207 Error Unity  #0 0x7f510fcd5c (libunity.so) ? 0x0
3. 2022.07.03 20:37:12.128 28105 28207 Error Unity  #1 0x7f50f02a84 (libunity.so) ? 0x0
4. 2022.07.03 20:37:12.128 28105 28207 Error Unity  #2 0x7f5114b53c (libunity.so) ? 0x0
5. 2022.07.03 20:37:12.128 28105 28207 Error Unity  #3 0x7f5114c0e4 (libunity.so) ? 0x0
6. 2022.07.03 20:37:12.128 28105 28207 Error Unity  #4 0x7f50b6d2f8 (libunity.so) ? 0x0
7. 2022.07.03 20:37:12.128 28105 28207 Error Unity  #5 0x7f50b6d5b0 (libunity.so) ? 0x0
8. 2022.07.03 20:37:12.128 28105 28207 Error Unity  #6 0x7f50b6d670 (libunity.so) ? 0x0
9. 2022.07.03 20:37:12.128 28105 28207 Error Unity  #7 0x7f50b6d7f0 (libunity.so) ? 0x0
10. 2022.07.03 20:37:12.128 28105 28207 Error Unity  #8 0x7f50b6cd44 (libunity.so) ? 0x0
11. 2022.07.03 20:37:12.128 28105 28207 Error Unity  #9 0x7f50bf406c (libunity.so) ? 0x0
12. 2022.07.03 20:37:12.128 28105 28207 Error Unity  #10 0x7f77d301a4 (libc.so) __pthread_start(void*) 0xc4
13. 2022.07.03 20:37:12.128 28105 28207 Error Unity  #11 0x7f77ce5b80 (libc.so) __start_thread 0x10
14. 2022.07.03 20:37:12.128 28105 28207 Error Unity
15. 2022.07.03 20:37:12.131 28105 28207 Error Unity Curl error 60: Cert verify failed: UNITYTLS_X509VERIFY_FLAG_USER_ERROR1
16. 2022.07.03 20:37:12.131 28105 28207 Error Unity  #0 0x7f510fcd5c (libunity.so) ? 0x0
17. 2022.07.03 20:37:12.131 28105 28207 Error Unity  #1 0x7f50f02a84 (libunity.so) ? 0x0
18. 2022.07.03 20:37:12.131 28105 28207 Error Unity  #2 0x7f5114b53c (libunity.so) ? 0x0
19. 2022.07.03 20:37:12.131 28105 28207 Error Unity  #3 0x7f5114c0e4 (libunity.so) ? 0x0
20. 2022.07.03 20:37:12.131 28105 28207 Error Unity  #4 0x7f50b6d2f8 (libunity.so) ? 0x0
21. 2022.07.03 20:37:12.131 28105 28207 Error Unity  #5 0x7f50b6d5b0 (libunity.so) ? 0x0
22. 2022.07.03 20:37:12.131 28105 28207 Error Unity  #6 0x7f50b6d670 (libunity.so) ? 0x0
23. 2022.07.03 20:37:12.131 28105 28207 Error Unity  #7 0x7f50b6d7f0 (libunity.so) ? 0x0
24. 2022.07.03 20:37:12.131 28105 28207 Error Unity  #8 0x7f50b6cd44 (libunity.so) ? 0x0
25. 2022.07.03 20:37:12.131 28105 28207 Error Unity  #9 0x7f50bf406c (libunity.so) ? 0x0
26. 2022.07.03 20:37:12.131 28105 28207 Error Unity  #10 0x7f77d301a4 (libc.so) __pthread_start(void*) 0xc4
27. 2022.07.03 20:37:12.131 28105 28207 Error Unity  #11 0x7f77ce5b80 (libc.so) __start_thread 0x10
28. 2022.07.03 20:37:12.131 28105 28207 Error Unity
29.  

No HoloLens used in project.
Unity 2020.3.35
Android 7.0
MIUI Global 11.0.2
Redmi Note 4

 

@JeffDUnity3D

I was able to create a pretty simple reproduction on this one by setting the system clock ahead by a year. If you're hitting a URL that requires certificate verification (e.g. any https url) having your device out of range of the certificate's valid range causes the error to hit.

 

meet the problem on 2021.3.x (Linux)





but only in editor mode, after build, application running fine....


i have write a CertificateWhore, and apply a certificateHandler before call SendWebRequest()
but still meet such error.............

 

One of my users is also experiencing this... Was there ever a fix?

 

i found some things..... i launch unityhub with http proxy, some http proxy get strange ssl error, so meet the problem,

i change other node, it's fine now...

 

Looks like some of players from China are getting this error. Will check with them if it's some kind of regional issue with Let's Encrypt certificates or Unity bug.

 

I have the same issue with a public file: https://www.inmobi.com/skadnetworkids.json
Unity 2020.3.38f1
Postman and browser are showing the request fine. CertificateWhore did not help.
I'm just using

UnityWebRequest.Get();

 

What is a fallback? I cannot see mention of it in your docs?

 

I have the same error. I tried loading Unity ads with Unity Advertisement package but I got the same error. How could you explain that? I'm using Unity 2022.2

 

Thanks so musch, it helped me!
Replaced "https://worldtimeapi.org/api/ip" to "https://api.worldtimeapi.org/api/ip"

 

Facing the same with 2021.3.14 on mac m1 while connecting to localhost asp.net 7 web api with a dev certificate.
All the bug reports says "not reproducible" or "fixed" while there're example projects attached and seems that nothing has been fixed actually

 

In my case it was an issue with the Unity Hub certificates, I assume. All I had to do is to restart the Unity Editor.

 

I have same bug! Unity 2021.3.16f1

Curl error 60: Cert verify failed: UNITYTLS_X509VERIFY_FLAG_USER_ERROR1

 

Just got it today.

 

Welcome to the club!

 

One of our players reported this issue too (unsure of total affected). Most players do not have the issue. Unity 2020.3.37. Unable to update the LTS version because Unity introduced game breaking issues to it.

We have previously downgraded the TLS protocol on our webservices from 1.3 to 1.2 to get around this issue (yikes but necessary) when way more of our players were having the problem. Now it's popping up for this user with TLS 1.2 too.

 

Getting more reports on this now. Would really want to know what steps we could take to help our users out!