Skip to content

Failed to create tunnel: unknown certificate verification error #54250

Closed as not planned

Description

@hearnadam

Description

Setting up remote access; this can take a minute...
OpenTunnelClientError: Failed to create tunnel
    at U (/$bunfs/root/chunk-adabphcr.js:7:8312)
    at ~effect/Utils/internal (/$bunfs/root/chunk-wdasang7.js:8:1710)
    at <anonymous> (/$bunfs/root/chunk-wdasang7.js:24:5603)
    at runLoop (/$bunfs/root/chunk-wdasang7.js:24:2280)
    at evaluate (/$bunfs/root/chunk-wdasang7.js:24:1518)
    at <anonymous> (/$bunfs/root/chunk-wdasang7.js:24:6417)
    at i (/$bunfs/root/chunk-wdasang7.js:24:6087)
    at processTicksAndRejections (native:7:39)
    at OpenTunnelClient.tunnel.create (/$bunfs/root/chunk-adabphcr.js:11:2688)
    at OpenTunnelClient.tunnel.create (definition) (/$bunfs/root/chunk-adabphcr.js:11:2032)
    at OpenTunnelClient.tunnel.ensure (/$bunfs/root/chunk-wk5ff5t4.js:2:1488)
    at OpenTunnelClient.tunnel.ensure (definition) (/$bunfs/root/chunk-adabphcr.js:11:2603)
    at cli.service-config.set (/$bunfs/root/chunk-j1vea4wp.js:2:1212)
    at cli.service-config.set (definition) (/$bunfs/root/chunk-wk5ff5t4.js:3:1095)
    at cli.pair (/$bunfs/root/chunk-4r3q3xdc.js:7:19760)
    at cli.pair (definition) (/$bunfs/root/chunk-j1vea4wp.js:2:914) {
  [cause]: HttpClientError: Transport error (POST https://opentunnel.xyz/api/tunnel)
      at catch (/$bunfs/root/chunk-rgw3twar.js:2:832)
      at ~effect/Utils/internal (/$bunfs/root/chunk-wdasang7.js:8:1710)
      at i (/$bunfs/root/chunk-wdasang7.js:24:6091)
      at processTicksAndRejections (native:7:39) {
    [cause]: TypeError: unknown certificate verification error
  }
}

Plugins

No response

OpenCode version

2.0.26

Steps to reproduce

No response

Screenshot and/or share link

No response

Operating System

No response

Terminal

No response

Activity

  1. opencode-agent commented on Oct 10, 2026

    @opencode-agent
    Contributor

    Thanks for the report! It looks like opencode pair fails while creating the remote-access tunnel: the TLS handshake with https://opentunnel.xyz fails with unknown certificate verification error. The certificate on that host verifies correctly from our side, so we need some details about your setup to reproduce it:

    • Your operating system and how you installed OpenCode (npm @opencode/cli, install script, Homebrew, …)
    • The exact command you ran (opencode pair?)
    • Does it fail every time, or only sometimes?
    • Are you behind a corporate proxy, VPN or TLS-inspecting firewall, or do you use a custom CA (e.g. NODE_EXTRA_CA_CERTS, HTTPS_PROXY)?
    • What do curl -v https://opentunnel.xyz/ and openssl s_client -connect opentunnel.xyz:443 -servername opentunnel.xyz </dev/null | grep -E 'Verify|i:' show on that machine?
    • Do other HTTPS requests from OpenCode work, e.g. talking to your model provider?

    You can reply here with the details or edit the issue. If you edit it, please also leave a comment saying you've updated it, so we know when you're done.

    I didn't find an existing report of this tunnel failure. These related issues show the same TLS error in other places, ordered by likelihood of being related:

  2. opencode-agent commented on Oct 13, 2026

    @opencode-agent
    Contributor

    We haven't heard back about your setup, so I'm closing this for now. The certificate on opentunnel.xyz verifies correctly from our side. Without your OS, how you installed OpenCode, and your network setup (proxy, VPN, custom CA), we can't reproduce the unknown certificate verification error you got from opencode pair.

    If it still happens, please reply here with those details and the output of curl -v https://opentunnel.xyz/, and we can reopen it. Thanks for the report!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

Labels

Type

No type

Projects

No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions