When playing in the editor WebSocket connection successful but failed when playing in packaged, why?

Engineer · October 23, 2018, 1:18pm

When playing in the editor WebSocket (from Runtime/Online/WebSocket) connection was successful but failed when playing in packaged project. Why? UE4 versions used were 4.18 and 4.19. Platform is Windows x64.

Here’s the log.

[2018.10.23-08.55.37:666][308]LogTemp: Display: Connecting to wss://localhost/lobby/
[2018.10.23-08.55.38:397][350]LogWebSockets: Warning: Lws(Error): server's cert didn't look good, X509_V_ERR = 20: error:00000014:lib(0):func(0):SSL lib
[2018.10.23-08.55.38:431][352]LogWebSockets: Warning: Lws(Error): server's cert didn't look good, X509_V_ERR = 20: error:00000014:lib(0):func(0):SSL lib
[2018.10.23-08.55.38:443][352]LogTemp: Display: Error connecting: Connection timed out

Upon closer examination, the UE4’s WebSocket library uses Libwebsocket and OpenSSL, and that X509_V_ERR = 20 means X509_V_ERR_UNABLE_TO_GET_ISSUER_CERT_LOCALLY. See here. But I’m sure the certificate is valid, and not self-signed. Can anyone help? Again note that the connection works in the editor but not in packaged project. I’m not sure why.

In 4.20 the log is like this

[2018.10.23-13.28.59:390][399]LogTemp: Display: Connecting to wss://localhost/lobby/
[2018.10.23-13.29.00:119][446]LogWebSockets: Warning: Lws(Error): SSL error: unable to get local issuer certificate (preverify_ok=0;err=20;depth=3)
[2018.10.23-13.29.00:121][446]LogWebSockets: Warning: Lws(Error): SSL connect error 336134278: error:14090086:SSL routines:ssl3_get_server_certificate:certificate verify failed
[2018.10.23-13.29.00:122][446]LogTemp: Display: Error connecting: lws_ssl_client_connect2 failed

Basically the same error, but more verbose.

Engineer · October 24, 2018, 2:06pm

Sigh, turns out UE4 doesn’t automatically copy the certificate file into pak file. Also the SSL module really lacks documentation, but I figured it all out eventually. ISslCertificateManager::AddCertificatesToSslContext | Unreal Engine Documentation

neVeRmind8837 · June 4, 2019, 12:24pm

So how did you solve this? I have the same problem but I´m not a programmer. Feeling a bit lost with this documentation

TripleSMG · September 9, 2020, 4:24pm

Something else to check depending on the platform you’re targeting, make sure that platform is setting WITH_SSL to 1 and including the necessary include paths and third party libraries in SSL.Build.cs. Otherwise, code that you’ll need will not be included in your build causing all sorts of issues.

If your platform isn’t listed in SSL.Build.cs,you’ll need to add a new line like so:

Target.Platform == UnrealTargetPlatform.YourNewPlatform

Good luck!

anonymous_user_51938974 · December 23, 2020, 4:22am

Yes, I’m having this exact issue, would be nice if the actual answer was mentioned instead of “I just figured it out eventually” with a link to raw documentation.

anonymous_user_51938974 · December 23, 2020, 5:14pm

I experienced the same issue when packaging on Mac - I resolved it by adding the default cacerts.pem key that comes with UE4’s source to Project Settings > Packaging > Packaging > Additional Non-Assets Directories to Copy

PolygonArt_WEN · June 14, 2021, 1:36pm

Where is the cacerts.pem located. There is non to be found for me.

PhilSorger · July 12, 2021, 11:06pm

ok so the cacert.pem is found in Engine/Content/Certificates/ThirdParty/cacert.pem
and i copy that to my Content/Certificates folder
and i’m trying to add an additional non-asset directory to the package (by changing Config/DefaultGame.ini)
+DirectoriesToAlwaysStageAsNonUFS=(Path=“Certificates”)
but i still get an error:
[2021.07.12-23.02.20:135][217]LogWebSockets: Warning: Lws(Error): SSL_new failed: error:00000063:lib(0):func(0):reason(99)

ff1450sb · July 19, 2021, 6:08am

I resolved the problem by the same way but I set the “Additional Non-Assets Directories to Copy” value from the Editor menu.

heivoll · October 12, 2021, 1:05am

For anyone else looking, VE1977’s comment below solves it. The exact steps to fix it is:

Copy [Engine directory]/Engine/Content/Certificates/ThirdParty/cacert.pem to [Project directory]/Content/Certificates/cacert.pem
In your project settings, under Packaging, add an array item to “Additional Non-Asset Directories to Package”, with the value Certifications

That’s it, no need to do anything in C++. You may need to copy this again when you update engine version.

panjianxing · March 10, 2022, 4:15pm

Hello, I operated according to the method you used, but I can’t link after packaging

heivoll · March 10, 2022, 5:51pm

Bah, I see I have a typo in my post here. The value to put in the config should be Certificates (the same as the folder you created). Does fixing that help? If not, what kind of errors are you getting?

panjianxing · March 11, 2022, 7:55am

Still can’t ~ ~ it’s available in editing status, but after it’s packaged, it can’t link websockt

S_Q_R · March 19, 2023, 3:19pm

Hi. Suggested solution does not work on my PC. Do anyone know if there is any other way of fixing certificate? And just to be sure. Does this fix also helps with editor behaviour or its only for packaged build? Thanks!

EDIT:
Found this forum entry. This one helped me so if coping certifcates does not work for you here is different solution to try

heivoll · March 24, 2023, 11:49am

Hi. We got something similar to this on one of the machines at our company. For that specific one, all HTTP requests were blocked by one request failing; more specifically, the usage tracking request of the ExpressiveText plugin. So it’s worth checking the logs and looking for warnings about the HTTP module processing requests. Disabling the plugin worked.

lehuan5062 · August 23, 2023, 8:37am

I have the “SSL error: unable to get local issuer certificate (preverify_ok=0;err=20;depth=0)”, but when playing in editor.

eggapple1220 · January 23, 2024, 1:21pm

copy cacert.pem to [unrealProject]/Content/Certificates
project setting > packaging > Additional Non-Asset Directories to Package > add item “Certificates”

it works ~

my env
unreal version = 5.0.3
use webSocket ( c++ )
win or mac no issue
but packaging ios has issue
issue = LogWebSockets: Warning: Lws(Error): SSL error: unable to get local issuer certificate (preverify_ok=0;err=20;depth=2)

chevyhuang · June 27, 2024, 3:34am

可以在DefaultEngine.ini中添加：
[LwsWebSocket]
bDisableCertValidation=True

zhaojunmeng · July 2, 2024, 12:45pm

Solution:

Just add the follow setting in DefaultEngine.ini, and when packaging the game, the cacert.pem file will be staged automatically.

[/Script/Engine.NetworkSettings]
n.VerifyPeer=True

The logic is in /Engine/Source/Programs/AutomationTool/Scripts
/CopyBuildToStagingDirectory.Automation.cs:
https://github.com/EpicGames/UnrealEngine/blob/11ea386451b0beaff2ab34ad3d222def138fcd29/Engine/Source/Programs/AutomationTool/Scripts/CopyBuildToStagingDirectory.Automation.cs#L1204

Why it’s working in editor?

In FSslCertificateManager::BuildRootCertificateArray(), CertificateBundlePath is searched in in the order of ProjectContentDir, EngineContentDir. In editor, EngineContentDir alwarys has the Certificates/ThirdParty/cacert.pem file, so it’s working in editor.
https://github.com/EpicGames/UnrealEngine/blob/c830445187784f1269f43b56f095493a27d5a636/Engine/Source/Runtime/Online/SSL/Private/SslCertificateManager.cpp#L337

How to check it’s really working

On Winddows, you can delete all entries in HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\ in regedit, and see if the packaged game really using the cacert.pem file(and not using the system cached one).

IMPrloggini · July 11, 2024, 1:15pm

I just want to say thank you for this thread, it saved us A LOT of time!
We had issues with a third party plugin not able to perform SSL verification on cooked builds on MacOS and UE 5.3.
The solution for us was settings those certificates as RuntimeDependencies for the plugin, so after cook, those non USF files will be staged with the build.
That being said, the other mentioned solutions can possibly work as well.