Altair RISE

A program to recognize and reward our most engaged community members

Nominate Yourself Now!

Dsim 2025.1 trying to make SSL connection despite dsim-license.json provided

Hi, I'm having trouble using DSim via command line as it tries to make an SSL connection to a license server. I have created an environment variable

export DSIM_LICENSE=$HOME/metrics-ca/dsim-license.json

I've verified it with echo $DSIM_LICENSE along with dsim -version returning 2025.1

Please advise.

dsim hello.sv
Copyright (C) 2017-2025 Altair Engineering Inc. All rights reserved.
=N:[UsageMeter (2025-09-04 14:05:47 -0700)] Using SSL_CERT_DIR=/usr/lib/ssl/certs SSL_CERT_FILE=/usr/lib/ssl/certs/ca-certificates.crt as location of CA certificates to verify license server.
=W:[UsageMeter (2025-09-04 14:05:47 -0700)] Not retryable
=W:[UsageMeter (2025-09-04 14:05:47 -0700)] Error making SSL connection to license server: error:0A000086:SSL routines::certificate verify failed
=W:[UsageMeter (2025-09-04 14:05:47 -0700)] cannot communicate with usage server for new session, num session retries left:2

Find more posts tagged with

DSim

Accepted answers

Shaun_Altair

Are you behind a firewall or anti-virus? If so, can you disable them and try again?

What happens when you try the command openssl s_client --connect app.metricsvcloud.com:443 ?

All comments

Shaun_Altair

@CrumbledFoil DSim needs to make an SSL connection to our license server to get authorization to run. The DSIM_LICENCE file just contains information to send to our server.

To successfully make an SSL connection, DSim needs to know where your certificate store is, and your certificate store must have Let's Encrypts ISRG Root X1 certificate as a trusted authority.

https://letsencrypt.org/certificates/

Different flavours of Linux have default locations for the certificate store, and of course, you may have installed it in a non-default location. You may need to point DSim to where your certificate store is with the environment variables SSL_CERT_DIR and SSL_CERT_FILE.

From the error messages, I think you have the SSL_CERT_DIR and SSL_CERT_FILE variables set to /usr/lib/ssl/certs and /usr/lib/ssl/certs/ca-certificates.crt respectively. Is this where your system's certificate store is located? If so, please check if you have Let's Encrypt's ISRG Root X1 certificate as a trusted authority. If not, you may want to look to see if your cert store is at /etc/ssl/certs or /etc/pki/tls and set the SSL_CERT_DIR and SSL_CERT_FILE variables accordingly.

What flavour of Linux are you running? Is it a platform that trusts the ISRG Root X1 certificate?

https://letsencrypt.org/docs/certificate-compatibility/

After you've verified that you have the ISRG Root X1 certificate in your certificate store and your environments variables set accordingly, can you open this webpage in your default internet browser to validate the certificate?

https://valid-isrgrootx2.letsencrypt.org/

It should look like this:

CrumbledFoil

Hi @Shaun_Altair , I am using Ubuntu 22.04.5 LTS as my OS. I have changed the environment variable "SSL_CER_DIR=/etc/ssl/certs" and "SSL_CER_FILE=/etc/ssl/certs/ca-certificates.crt"

I do not have access to a web browser. However through command line "openssl s_client -connect valid-isrgrootx1.letsencrypt.org:443" → returns "Verify Return Code: 0 (ok)."

I still receive the following error —

=N:[UsageMeter (2025-09-05 14:18:41 -0700)] Using SSL_CERT_DIR=/etc/ssl/certs SSL_CERT_FILE=/etc/ssl/certs/ca-certificates.crt as location of CA certificates to verify license server.
=N:[UsageMeter (2025-09-05 14:18:42 -0700)] usage server initial connection
=W:[UsageMeter (2025-09-05 14:18:42 -0700)] cannot communicate with usage server for new session, num session retries left:2
=W:[UsageMeter (2025-09-05 14:18:52 -0700)] cannot communicate with usage server for new session, num session retries left:1
=W:[UsageMeter (2025-09-05 14:19:02 -0700)] SSL error (1) during read or write: error:0A0000CF:SSL routines::protocol is shutdown
=W:[UsageMeter (2025-09-05 14:19:02 -0700)] cannot communicate with usage server for new session, num session retries left:0
=F:[UsageMeter (2025-09-05 14:19:02 -0700)] retries exhausted, exiting

Shaun_Altair

Are you behind a firewall or anti-virus? If so, can you disable them and try again?

What happens when you try the command openssl s_client --connect app.metricsvcloud.com:443 ?

CrumbledFoil

I am on a corporate network, so I cannot disable.

openssl s_client --connect app.metricsvcloud.com:443 → returns "Verify return code: 0 (ok)"

CrumbledFoil

@Shaun_Altair , the issue is resolved. Our IT vendor re-categorized app.metricsvcloud.com, so I suspected it is firewall related.

Thanks