SSLCertVerificationError

[NoahNuoYa]

What version of Kimi CLI is running?

kimi, version 0.51

Which open platform/subscription were you using?

Kimi For Coding

Which model were you using?

kimi-for-coding

What platform is your computer?

Darwin 25.1.0 arm64 arm

What issue are you seeing?

Failed to get models: Cannot connect to host api.kimi.com:443 ssl:True [SSLCertVerificationError: (1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: unable to get local issuer certificate (_ssl.c:1028)')]

What steps can reproduce the bug?

每次我的本地连接都会复现这个问题，cc，roo和kimi都无法连接成功，但是相同的配置方式，按照glm4.6的文档就是可以正常使用cc的。

What is the expected behavior?

请尽快修复

Additional information

No response

[cperion]

I encounter the same issue. I already tried setting SSL_CERT_FILE and REQUESTS_CA_BUNDLE in env to point to my organisation pem cert file but it still does not work. I installed with uv.

[bczhaoa]

我也碰到了,把证书验证出开作为参数项吧。 让用可以自己关掉。

---

I also encountered it, turn on certificate verification as a parameter. Allow users to turn it off themselves.

[aaraujodata]

We’re running into the same problem with the certificate. Has anyone else already fixed it? I’m not seeing this issue in tools like Claude Code and Codex.

What version of Kimi CLI is running?
kimi, version 1.3

Which open platform/subscription were you using?
Kimi For Coding

Which model were you using?
kimi-for-coding

What platform is your computer?
Darwin 25.1.0 arm64 arm

[xiaoju111a]

install/upgrade certifi

uv pip install --upgrade certifi
python3 -m pip install --upgrade certifi

or (not recommended)

export KIMI_DISABLE_SSL_VERIFY=1

[aaraujodata]

Hello team, good morning. I'm really interested in fixing the issue and what I did was modify the file aiohttp.py and it was already fixed.

Here I leave you the issue that I opened with the recommendations.

#760

[aaraujodata]

@NoahNuoYa The PR #762

[Lynskylate]

export KIMI_DISABLE_SSL_VERIFY=1

Not work.

所有用了稍微hack点的方法绕过

python的应用依赖certifi做证书校验，确认下你的kimi使用的解释器，比如我的

cat `which kimi`

#!/Users/xxxx/.local/share/uv/tools/kimi-cli/bin/python
# -*- coding: utf-8 -*-
import sys
from kimi_cli.cli import cli
if __name__ == "__main__":
    if sys.argv[0].endswith("-script.pyw"):
        sys.argv[0] = sys.argv[0][:-11]
    elif sys.argv[0].endswith(".exe"):
        sys.argv[0] = sys.argv[0][:-4]
    sys.exit(cli())

cat `ca.crt` >> `/Users/xxxx/.local/share/uv/tools/kimi-cli/bin/python -m certifi` # 把ca.crt 替换成你公司拦截的证书