SSL exception on a fresh installation

[kiprok]

What happened?

The App crashes when trying to download a new package or a new model. This happens on a fresh fedora 44 installation, and freshly downloaded stability matrix appimage.

Exception Details

Exception

HttpRequestException: The SSL connection could not be established, see inner exception.
AuthenticationException: The remote certificate is invalid because of errors in the certificate chain: PartialChain

Sentry ID

2bbc9ce3

Stack Trace

   at System.Net.Http.HttpConnectionPool.ConnectAsync(HttpRequestMessage request, Boolean async, CancellationToken cancellationToken)
   at System.Net.Http.HttpConnectionPool.CreateHttp11ConnectionAsync(HttpRequestMessage request, Boolean async, CancellationToken cancellationToken)
   at System.Net.Http.HttpConnectionPool.InjectNewHttp11ConnectionAsync(QueueItem queueItem)
   at System.Threading.Tasks.TaskCompletionSourceWithCancellation`1.WaitWithCancellationAsync(CancellationToken cancellationToken)
   at System.Net.Http.HttpConnectionPool.SendWithVersionDetectionAndRetryAsync(HttpRequestMessage request, Boolean async, Boolean doRequestAuth, CancellationToken cancellationToken)
   at System.Net.Http.RedirectHandler.SendAsync(HttpRequestMessage request, Boolean async, CancellationToken cancellationToken)
   at Microsoft.Extensions.Http.Logging.LoggingHttpMessageHandler.<SendCoreAsync>g__Core|4_0(HttpRequestMessage request, Boolean useAsync, CancellationToken cancellationToken)
   at Microsoft.Extensions.Http.Logging.LoggingScopeHttpMessageHandler.<SendCoreAsync>g__Core|4_0(HttpRequestMessage request, Boolean useAsync, CancellationToken cancellationToken)
   at System.Net.Http.HttpClient.<SendAsync>g__Core|83_0(HttpRequestMessage request, HttpCompletionOption completionOption, CancellationTokenSource cts, Boolean disposeCts, CancellationTokenSource pendingRequestsCts, CancellationToken originalCancellationToken)
   at StabilityMatrix.Core.Services.DownloadService.DownloadToFileAsync(String downloadUrl, String downloadPath, IProgress`1 progress, String httpClientName, CancellationToken cancellationToken)
   at StabilityMatrix.Core.Services.DownloadService.DownloadToFileAsync(String downloadUrl, String downloadPath, IProgress`1 progress, String httpClientName, CancellationToken cancellationToken)
   at StabilityMatrix.Avalonia.Helpers.UnixPrerequisiteHelper.InstallPythonIfNecessary(PyVersion version, IProgress`1 progress)
   at StabilityMatrix.Avalonia.Helpers.UnixPrerequisiteHelper.InstallPythonIfNecessary(IProgress`1 progress)
   at StabilityMatrix.Avalonia.ViewModels.Settings.MainSettingsViewModel.CheckPythonVersion()
   at CommunityToolkit.Mvvm.Input.AsyncRelayCommand.AwaitAndThrowIfFailed(Task executionTask)
   at System.Threading.Tasks.Task.<>c.<ThrowAsync>b__128_0(Object state)
   at Avalonia.Threading.SendOrPostCallbackDispatcherOperation.InvokeCore()```
```   at System.Net.Security.SslStream.CompleteHandshake(SslAuthenticationOptions sslAuthenticationOptions)
   at System.Net.Security.SslStream.ForceAuthenticationAsync[TIOAdapter](Boolean receiveFirst, Byte[] reAuthenticationData, CancellationToken cancellationToken)
   at System.Net.Http.ConnectHelper.EstablishSslConnectionAsync(SslClientAuthenticationOptions sslOptions, HttpRequestMessage request, Boolean async, Stream stream, CancellationToken cancellationToken)```


### Version

v2.16.1

### What Operating System are you using?

Linux

[NeuralFault]

Test with this to rule out OS-side from the issue (SM may rely on host cert store local on the distro):

curl -I https://github.com

In your terminal run these and then relaunch SM:

sudo dnf update

Then,

sudo dnf reinstall ca-certificates

Then,

sudo update-ca-trust extract

[kiprok]

Thank you for the response!

The curl command gave me normal output back.

I tried the other commands but still the issue remains sadly.

[NeuralFault]

Thank you for the response!

The curl command gave me normal output back.

I tried the other commands but still the issue remains sadly.

I've seeing that there are some core changes made in fedora 44 in how it's ssl certificates are stored, their not a monolithic cert.pem file (and accompanying .CRT files) anymore in it?, this my be preventing the .net bundled SSL libraries from working on the connection level.

I'm having a F44 VM spun up on my end and look at it in the morning after I wake up.

Potential workarounds:

Launch SM from terminal or modify its launcher shortcut to use this as its command using this env variable to direct to where the certs in f44 are stored now : SSL_CERT_FILE=/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem <path/to/StabilityMatrix.AppImage>

Or, symlink it:

sudo ln -s /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem /etc/pki/tls/cert.pem

[kiprok]

I tried the symlink and this fixed the issue.

But when i tried to install a package, like forge neo, i get the following error:

2026-07-29 17:34:43.2938|INFO|StabilityMatrix.Core.Python.PyInstallationManager|Python 3.13.12 not found. Attempting to install with UV.
2026-07-29 17:34:43.2938|DEBUG|StabilityMatrix.Core.Python.UvManager|Setting UV_PYTHON_INSTALL_DIR to central path '/home/kiprok/Documents/stability-matrix/Data/Assets/Python' for Python 3.13.12 installation.
2026-07-29 17:34:43.2938|DEBUG|StabilityMatrix.Core.Processes.ProcessRunner|Starting process '/home/kiprok/Documents/stability-matrix/Data/Assets/uv/uv' with arguments 'python install 3.13.12'
2026-07-29 17:34:43.2941|DEBUG|StabilityMatrix.Core.Processes.ProcessRunner|Setting environment variables: ["UV_PYTHON_INSTALL_DIR"]
2026-07-29 17:34:48.4127|WARN|StabilityMatrix.Core.Python.PyInstallationManager|UV failed to install Python 3.13.12. Result from UV manager was null or had no path.
2026-07-29 17:34:48.4127|WARN|StabilityMatrix.Core.Python.PyInstallationManager|Python 3.13.12 not found and UV installation was not attempted or failed. Returning prospective legacy PyInstallation object.
2026-07-29 17:34:48.4195|ERROR|StabilityMatrix.Avalonia.Extensions.NotificationServiceExtensions|Error Installing Package|StabilityMatrix.Core.Exceptions.MissingPrerequisiteException: Python 3.13.12 was not found and/or failed to install. Please check the logs for more details.


   at StabilityMatrix.Avalonia.Helpers.UnixPrerequisiteHelper.InstallPackageRequirements(List`1 prerequisites, Nullable`1 pyVersion, IProgress`1 progress)
   at StabilityMatrix.Core.Models.PackageModification.SetupPrerequisitesStep.ExecuteAsync(IProgress`1 progress)
   at StabilityMatrix.Core.Models.PackageModification.PackageModificationRunner.ExecuteSteps(IEnumerable`1 steps)

[NeuralFault]

I tried the symlink and this fixed the issue.

But when i tried to install a package, like forge neo, i get the following error:

2026-07-29 17:34:43.2938|INFO|StabilityMatrix.Core.Python.PyInstallationManager|Python 3.13.12 not found. Attempting to install with UV.
2026-07-29 17:34:43.2938|DEBUG|StabilityMatrix.Core.Python.UvManager|Setting UV_PYTHON_INSTALL_DIR to central path '/home/kiprok/Documents/stability-matrix/Data/Assets/Python' for Python 3.13.12 installation.
2026-07-29 17:34:43.2938|DEBUG|StabilityMatrix.Core.Processes.ProcessRunner|Starting process '/home/kiprok/Documents/stability-matrix/Data/Assets/uv/uv' with arguments 'python install 3.13.12'
2026-07-29 17:34:43.2941|DEBUG|StabilityMatrix.Core.Processes.ProcessRunner|Setting environment variables: ["UV_PYTHON_INSTALL_DIR"]
2026-07-29 17:34:48.4127|WARN|StabilityMatrix.Core.Python.PyInstallationManager|UV failed to install Python 3.13.12. Result from UV manager was null or had no path.
2026-07-29 17:34:48.4127|WARN|StabilityMatrix.Core.Python.PyInstallationManager|Python 3.13.12 not found and UV installation was not attempted or failed. Returning prospective legacy PyInstallation object.
2026-07-29 17:34:48.4195|ERROR|StabilityMatrix.Avalonia.Extensions.NotificationServiceExtensions|Error Installing Package|StabilityMatrix.Core.Exceptions.MissingPrerequisiteException: Python 3.13.12 was not found and/or failed to install. Please check the logs for more details.


   at StabilityMatrix.Avalonia.Helpers.UnixPrerequisiteHelper.InstallPackageRequirements(List`1 prerequisites, Nullable`1 pyVersion, IProgress`1 progress)
   at StabilityMatrix.Core.Models.PackageModification.SetupPrerequisitesStep.ExecuteAsync(IProgress`1 progress)
   at StabilityMatrix.Core.Models.PackageModification.PackageModificationRunner.ExecuteSteps(IEnumerable`1 steps)

Fixing this is actually on my to-do list along with fixing this SSL issue here, and some Windows Rocm helper stuff, and will have a PR soon.

Reason being is the UV provided by SM's internal Assets directory is being passed to package pre-install in windows... but was left out of unix (linux/macos) OS condition path.

Can try installing UV at the system level in your fedora via dnf if possible, I had never caught this issue until just recently on a fresh endevourOS install where I hadn't installed UV via the package manager yet (as i dont use forge-neo, so my own checks and experience on it are sporadic). This can also explain why a similar error happens in SD.Next on linux installs... but it wasn't a hard blocker like with forge-neo.

In regards to the SSL cert issue specifically, going to add in a directory check at the start of launch before any http calls are made in SM to scan the possible directories the cert store is at, as several of the different main distros place them differently, and have it set SSL_CERT_FILE internally so it is used for the whole SM execution session and any processes ran under it.

The release builds of SM are built using Ubuntu in the github jobs path, so the cert store where DotNet's internal SSL libraries look for it are based on that, which is different from where Fedora is storing them now.

[kiprok]

I want to thank you again for all the help.

I installed uv via dnf, but the same error persisted. I also tried different packages, the same error happened when i tried to install comfyUI, SD.Next and reForge.