NixOS: Certificate Verify Failed. Unable to Get Local Issuer Certificate

Warning

This post is more than a year old. Information may be outdated.

NixOS: Certificate Verify Failed. Unable to Get Local Issuer Certificate

Why the same error shows up on NixOS

On "plain" NixOS the CA bundle is already on-disk ( /etc/ssl/certs/ca-bundle.crt , from pkgs.cacert) and nixos-rebuild writes two environment variables that most software respects:

variable	who sets it	example value
`NIX_SSL_CERT_FILE`	`/etc/profile` & systemd units	`/run/current-system/sw/etc/ssl/certs/ca-bundle.crt`
`SSL_CERT_FILE`	`cacert` setup-hook inside nix-shell/devShells	same path

If you run a Python that came from nixpkgs (e.g. pkgs.python3 or a withPackages environment) the OpenSSL in that interpreter is patched to look at , so downloads work out of the box ().

NixOS: Certificate Verify Failed. Unable to Get Local Issuer Certificate

NixOS: Certificate Verify Failed. Unable to Get Local Issuer Certificate

Why the same error shows up on NixOS

Fix