[GH-ISSUE #2076] [Bug] SSL: CERTIFICATE_VERIFY_FAILED when installing nodes in ComfyUI Manager (Windows Portable) #861

Open
opened 2026-10-27 21:23:14 +00:00 by bsakaguchi · 1 comment
Owner

Originally created by @eugene001teb-gif on GitHub (Aug 12, 2025).
Original GitHub issue: https://github.com/Comfy-Org/ComfyUI-Manager/issues/2076

Describe the bug
When trying to install missing components or nodes using ComfyUI Manager in the Windows portable version, installation fails with an SSL certificate verification error:

This happens because the embedded Python in ComfyUI_windows_portable is not configured to use an up-to-date CA certificate bundle.


Environment:

  • OS: Windows 10/11
  • ComfyUI Version: (Portable, NVIDIA build)
  • Python: Embedded (comes with ComfyUI portable)

Steps to reproduce:

  1. Use ComfyUI Windows Portable
  2. Open ComfyUI Manager
  3. Try to install/update a node from CDN (e.g., cdn.comfy.org)
  4. Installation fails with SSL error

Solution / Workaround:

The fix is to point the embedded Python to the existing certifi CA bundle:

  1. Open Command Prompt
  2. Run:

setx SSL_CERT_FILE "<PATH_TO_COMFYUI>\python_embeded\Lib\site-packages\certifi\cacert.pem"

  1. Restart ComfyUI

Why this works:
The embedded Python ships with certifi, which has a current CA store, but by default it may not be used.
Setting the SSL_CERT_FILE environment variable forces Python to use the correct certificate bundle, allowing HTTPS downloads to succeed.


Possible improvement:

  • Have ComfyUI Manager automatically detect and use the certifi CA bundle in the embedded Python environment.
  • Or bundle updated CA certs by default and point SSL_CERT_FILE on startup.
Originally created by @eugene001teb-gif on GitHub (Aug 12, 2025). Original GitHub issue: https://github.com/Comfy-Org/ComfyUI-Manager/issues/2076 **Describe the bug** When trying to install missing components or nodes using ComfyUI Manager in the Windows portable version, installation fails with an SSL certificate verification error: This happens because the embedded Python in `ComfyUI_windows_portable` is not configured to use an up-to-date CA certificate bundle. --- **Environment:** - OS: Windows 10/11 - ComfyUI Version: (Portable, NVIDIA build) - Python: Embedded (comes with ComfyUI portable) --- **Steps to reproduce:** 1. Use ComfyUI Windows Portable 2. Open ComfyUI Manager 3. Try to install/update a node from CDN (e.g., `cdn.comfy.org`) 4. Installation fails with SSL error --- **Solution / Workaround:** The fix is to point the embedded Python to the existing `certifi` CA bundle: 1. Open Command Prompt 2. Run: setx SSL_CERT_FILE "<PATH_TO_COMFYUI>\python_embeded\Lib\site-packages\certifi\cacert.pem" 3. Restart ComfyUI --- **Why this works:** The embedded Python ships with `certifi`, which has a current CA store, but by default it may not be used. Setting the `SSL_CERT_FILE` environment variable forces Python to use the correct certificate bundle, allowing HTTPS downloads to succeed. --- **Possible improvement:** - Have ComfyUI Manager automatically detect and use the `certifi` CA bundle in the embedded Python environment. - Or bundle updated CA certs by default and point `SSL_CERT_FILE` on startup.
Author
Owner

@ltdrdata commented on GitHub (Aug 27, 2025):

Is this an issue that cannot be resolved with pip install --upgrade certifi?

<!-- gh-comment-id:3228996037 --> @ltdrdata commented on GitHub (Aug 27, 2025): Is this an issue that cannot be resolved with `pip install --upgrade certifi`?
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
Comfy-Org/ComfyUI-Manager#861
No description provided.