You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
{{ message }}
Repository navigation
Failed to create tunnel: unknown certificate verification error #54250
Setting up remote access; this can take a minute...
OpenTunnelClientError: Failed to create tunnel
at U (/$bunfs/root/chunk-adabphcr.js:7:8312)
at ~effect/Utils/internal (/$bunfs/root/chunk-wdasang7.js:8:1710)
at <anonymous> (/$bunfs/root/chunk-wdasang7.js:24:5603)
at runLoop (/$bunfs/root/chunk-wdasang7.js:24:2280)
at evaluate (/$bunfs/root/chunk-wdasang7.js:24:1518)
at <anonymous> (/$bunfs/root/chunk-wdasang7.js:24:6417)
at i (/$bunfs/root/chunk-wdasang7.js:24:6087)
at processTicksAndRejections (native:7:39)
at OpenTunnelClient.tunnel.create (/$bunfs/root/chunk-adabphcr.js:11:2688)
at OpenTunnelClient.tunnel.create (definition) (/$bunfs/root/chunk-adabphcr.js:11:2032)
at OpenTunnelClient.tunnel.ensure (/$bunfs/root/chunk-wk5ff5t4.js:2:1488)
at OpenTunnelClient.tunnel.ensure (definition) (/$bunfs/root/chunk-adabphcr.js:11:2603)
at cli.service-config.set (/$bunfs/root/chunk-j1vea4wp.js:2:1212)
at cli.service-config.set (definition) (/$bunfs/root/chunk-wk5ff5t4.js:3:1095)
at cli.pair (/$bunfs/root/chunk-4r3q3xdc.js:7:19760)
at cli.pair (definition) (/$bunfs/root/chunk-j1vea4wp.js:2:914) {
[cause]: HttpClientError: Transport error (POST https://opentunnel.xyz/api/tunnel)
at catch (/$bunfs/root/chunk-rgw3twar.js:2:832)
at ~effect/Utils/internal (/$bunfs/root/chunk-wdasang7.js:8:1710)
at i (/$bunfs/root/chunk-wdasang7.js:24:6091)
at processTicksAndRejections (native:7:39) {
[cause]: TypeError: unknown certificate verification error
}
}
Thanks for the report! It looks like opencode pair fails while creating the remote-access tunnel: the TLS handshake with https://opentunnel.xyz fails with unknown certificate verification error. The certificate on that host verifies correctly from our side, so we need some details about your setup to reproduce it:
Your operating system and how you installed OpenCode (npm @opencode/cli, install script, Homebrew, …)
The exact command you ran (opencode pair?)
Does it fail every time, or only sometimes?
Are you behind a corporate proxy, VPN or TLS-inspecting firewall, or do you use a custom CA (e.g. NODE_EXTRA_CA_CERTS, HTTPS_PROXY)?
What do curl -v https://opentunnel.xyz/ and openssl s_client -connect opentunnel.xyz:443 -servername opentunnel.xyz </dev/null | grep -E 'Verify|i:' show on that machine?
Do other HTTPS requests from OpenCode work, e.g. talking to your model provider?
You can reply here with the details or edit the issue. If you edit it, please also leave a comment saying you've updated it, so we know when you're done.
I didn't find an existing report of this tunnel failure. These related issues show the same TLS error in other places, ordered by likelihood of being related:
We haven't heard back about your setup, so I'm closing this for now. The certificate on opentunnel.xyz verifies correctly from our side. Without your OS, how you installed OpenCode, and your network setup (proxy, VPN, custom CA), we can't reproduce the unknown certificate verification error you got from opencode pair.
If it still happens, please reply here with those details and the output of curl -v https://opentunnel.xyz/, and we can reopen it. Thanks for the report!
Activity
opencode-agent commentedon Oct 10, 2026
Thanks for the report! It looks like
opencode pairfails while creating the remote-access tunnel: the TLS handshake withhttps://opentunnel.xyzfails withunknown certificate verification error. The certificate on that host verifies correctly from our side, so we need some details about your setup to reproduce it:@opencode/cli, install script, Homebrew, …)opencode pair?)NODE_EXTRA_CA_CERTS,HTTPS_PROXY)?curl -v https://opentunnel.xyz/andopenssl s_client -connect opentunnel.xyz:443 -servername opentunnel.xyz </dev/null | grep -E 'Verify|i:'show on that machine?You can reply here with the details or edit the issue. If you edit it, please also leave a comment saying you've updated it, so we know when you're done.
I didn't find an existing report of this tunnel failure. These related issues show the same TLS error in other places, ordered by likelihood of being related:
opencode-agent commentedon Oct 13, 2026
We haven't heard back about your setup, so I'm closing this for now. The certificate on
opentunnel.xyzverifies correctly from our side. Without your OS, how you installed OpenCode, and your network setup (proxy, VPN, custom CA), we can't reproduce theunknown certificate verification erroryou got fromopencode pair.If it still happens, please reply here with those details and the output of
curl -v https://opentunnel.xyz/, and we can reopen it. Thanks for the report!