Error: failed to retrieve USD exchange rate: invalid peer certificate: UnknownIssuer: invalid peer certificate: UnknownIssuer

[meesam4687]

Getting this after updating when trying to run currency conversion:
Error: failed to retrieve USD exchange rate: invalid peer certificate: UnknownIssuer: invalid peer certificate: UnknownIssuer

[printfn]

I've just checked, but the currency exchange API fend uses seems to be up. Can you check if you're able to load the url 'https://www.ecb.europa.eu/stats/eurofxref/eurofxref-daily.xml', say with curl?

fend uses your operating system trust store to validate certificates, so you may be missing a CA certificate bundle. What OS/setup are you running?

[meesam4687]

I've just checked, but the currency exchange API fend uses seems to be up. Can you check if you're able to load the url 'https://www.ecb.europa.eu/stats/eurofxref/eurofxref-daily.xml', say with curl?

It gives the output normally with curl

fend uses your operating system trust store to validate certificates, so you may be missing a CA certificate bundle. What OS/setup are you running?

Windows 11 24H2, I recently updated fend using winget if that helps

[meesam4687]

Just checked right now and it seems to be working, not sure what the issue was

[printfn]

Odd. I guess I’ll close the issue for now.

[k0dat]

I performed a fresh install of Windows 10 recently and received the 'invalid peer certificate' error when doing currency conversion. Similarly with a fresh install of Windows 11 24H2, I received below. Slightly different error not mentioning 'invalid peer certificate'.

Error: failed to retrieve AUD exchange rate: failed to load exchange rate data: [error sending request for url (https://www.ecb.europa.eu/stats/eurofxref/eurofxref-daily.xml), error sending request for url (https://treasury.un.org/operationalrates/xsql2XML.php)]

In both cases this was fixed by opening the two urls with curl.

For both the Windows 10 and 11 installs, I used winget to install fend.

[printfn]

When you say "this was fixed by opening the two urls with curl", I assume curl can load the urls while fend still errors? I'll do some testing on this in the next couple days.

[k0dat]

To clarify, yes curl will successfully open the URLs and download the data. Once this is done fend will not error any more and load the data. My assumption is curl opening the URLs must be updating the certificates in Windows and fend can now load them without errors.