[bug] Cannot connect to API: self signed certificate in certificate chain

[ahmedaisar]

Bug Description (required)

I just installed dyad and initiated my first app and prompt. but received an error "Sorry, there was an error from the AI: Failed after 3 attempts. Last error: Cannot connect to API: self signed certificate in certificate chain"

Steps to Reproduce (required)

Install Dyad
Create first app
Then Chat "Hey"

Expected Behavior (required)

Response for my chat request

Actual Behavior (required)

"Sorry, there was an error from the AI: Failed after 3 attempts. Last error: Cannot connect to API: self signed certificate in certificate chain"

System Information

• Dyad Version: 0.21.0
• Platform: win32
• Architecture: x64
• Node Version: v22.12.0
• PNPM Version: 10.14.0
• Node Path: C:\laragon\bin\nodejs\node-v22\node.exe
• Telemetry ID: c3c5c2df-d344-47b9-96c5-0061b232c9bb
• Model: google:gemini-2.5-flash | customId: undefined

Logs

╭ Warning ─────────────────────────────────────────────────────────────────────╮
│                                                                              │
│   Ignored build scripts: @swc/core, esbuild.                                 │
│   Run "pnpm approve-builds" to pick which dependencies should be allowed     │
│   to run scripts.                                                            │
│                                                                              │
╰──────────────────────────────────────────────────────────────────────────────╯



> vite_react_shadcn_ts@0.0.0 dev C:\Users\Aisar\dyad-apps\magical-shiba-snore
> vite "--port" "32100"


  VITE v6.3.4  ready in 953 ms


  ➜  Network: http://10.2.5.125:32100/

[github-actions[bot]]

This issue might be a duplicate of existing issues. Please check:

• Issue with using OpenRouter in VPN #895: Contains very similar certificate error "unable to get local issuer certificate" in a corporate VPN environment, also affecting API connections with Google Gemini working fine (confidence: high)

Feel free to ignore if none of these address your specific case.

[wwwillchen]

I haven't seen this before and I think there's something off about your internet connection - i'll turn this into a discussion in case anyone else has ideas.

[pgarciaq]

@wwwillchen no, there's nothing off with @ahmedaisar 's Internet connection. I'm seeing that too. My company is serving models (using our own OpenRouter instance IIRC) over an HTTPS connection with a self-signed SSL certificate. That's what triggers this issue.

What we need is something like this in the custom provider creation:

Or even more elaborate, where you could say exactly what's the CA certificate that you trust.

I opened issue #1460 yesterday about this.