[Bug] Getting spammed with SSL Handshake Error when ru

[leehanchung]

trafficstars

The web application runs, but on the terminal I am getting spammed with SSL Certificate Verify Failed errors.

0608 23:35:42.397180000 6108459008 ssl_transport_security.cc:1420] Handshake failed with fatal error SSL_ERROR_SSL: error:1000007d:SSL routines:OPENSSL_internal:CERTIFICATE_VERIFY_FAILED.

[willydouhard]

Are you running it locally or deployed somewhere?

[SurachaiJaisan]

https://github.com/Chainlit/chainlit/issues/46#issue-1749227601

[leehanchung]

Running locally, behind VPN.

Whats this SSL thing about?

[willydouhard]

I am not entirely sure. Could you try to install from the wheel in this PR (at the end of the description) https://github.com/Chainlit/chainlit/pull/40 and just run chainlit hello? This version is not released but curious to see if it fixes the issue. Can you also try the current version without the VPN?

[leehanchung]

This package currently would not pass security audit and will prevent wider adoption.

Specifically,

• telemetry is coupled to uptrace instead of letting user choice/implement their own
• deployment/auth seems to be coupled to chainlit service.

I cannot run it without VPN for work purposes. The PR looks better but telemetry problem continue to exist.

[willydouhard]

Thank you for your feedback. I agree these things are coupled for now and we definitely want to decouple them to make sure everyone could drop in their own solution!

[willydouhard]

Should be fixed in the latest version 0.3.0. Please note that it contains breaking changes. We prepared a migration guide to make it easy for everyone.

[Kyle0936]

I'm still get spammed with the latest version 0.6.0:

E0803 10:24:54.236101000 123145547419648 ssl_transport_security.cc:1455] Handshake failed with fatal error SSL_ERROR_SSL: error:1000007d:SSL routines:OPENSSL_internal:CERTIFICATE_VERIFY_FAILED.

which I don't know if it leads to a pop-up saying "Could not reach the server."

[willydouhard]

Are you using chroma db by any chance?

[Kyle0936]

I don't think so. The spam will start when I only run "chainlit hello".

For the pop-up that appeared, I was trying to run this project: https://github.com/AIAnytime/Llama2-Medical-Chatbot

[willydouhard]

Did you try to disable the telemetry? You can set the enable_telemetry in your .chainlit/config.toml file to false.

[Kyle0936]

That did solve the problem for me. Thanks.