Certificate Path Error During ONNX Runtime Compilation

Symptom

ONNX Runtime compilation fails with error message "SSL certificate problem."

Key Process and Cause Analysis

No valid certificate of the requested target is available when dependencies are downloaded.

Conclusion and Solution

1. Export the certificate using a browser.

   Use a browser (for example Google Chrome) to visit https://github.com, and export and save the certificate, as illustrated in the following figure. The certificate file name extension is crt, for example, ca.crt.

   

2. Install the ca-certificates package.

   yum install ca-certificates

3. Enable dynamic certificate trust storage.

   update-ca-trust force-enable

4. Upload the certificate to the /etc/pki/ca-trust/source/anchors/ directory on the server.
5. Obtain certificate files.

   update-ca-trust extract

6. Recompile and verify. For details, see Compiling the Source Code and Running and Verification.