DAX Package Manager not working (SSL connection failed)

[mrubinitor]

Hi everybody!

I’m having trouble getting the DAX Package Manager to work. I have a 'Desktop' license.
It doesn’t seem to run correctly, and I’m not sure if it’s due to a configuration issue on my side.

Here's a screenshot of the error message I get:

Could someone please confirm if this might be related to a wrong setup or if there’s something specific I need to configure to make it work?

Thanks in advance.
Massimo

[mlonsk]

Hi @mrubinitor
The error seems to indicate an issue connecting to the API (api.daxlib.org) to retrieve the packages. Could you check if you have a firewal or proxy blocking the connection?
I will ask one of our engineers to take a look. As they are based in Europe, the reply is likely to first come on Monday.
Best
Morten
TE3 Support

[otykier]

@mrubinitor
From the error message, this indeed seems most likely to be a proxy related issue. Could you try to change the proxy settings in Tabular Editor 3, under Tools > Preferences > Proxy Settings?

• Change the Proxy Type from "None" to "System" (or vice versa)

Restart Tabular Editor 3 after making a change to these settings, then try to connect to DaxLib again.

If the issue persists, could you try to run the following C# script and reply here with the output? This should give us a bit more information about what's going on.

using DaxLib.Client;

var source = new Uri("https://api.daxlib.org");
var version = typeof(Model).Assembly.GetName().Version;
var client = new DaxLibClient(new ProductInformation("Tabular_Editor", version.ToString()), source);

try
{
    _ = await client.SearchAsync("test", 0, 20, true);
    Info("Test succeeded!");
}
catch(Exception ex)
{
    Output(ex.ToString());
}

[mrubinitor]

@mlonsk @otykier thanks for your support!

I tried changing the proxy settings as suggested (from "None" to "System" and vice versa), but the connection issue persists.

I'm attaching the message generated by the C# script:

System.Net.Http.HttpRequestException: The SSL connection could not be established, see inner exception.
 ---> System.Security.Authentication.AuthenticationException: The remote certificate is invalid because of errors in the certificate chain: RevocationStatusUnknown
   at System.Net.Security.SslStream.CompleteHandshake(SslAuthenticationOptions sslAuthenticationOptions)
   at System.Net.Security.SslStream.ForceAuthenticationAsync[TIOAdapter](Boolean receiveFirst, Byte[] reAuthenticationData, CancellationToken cancellationToken)
   at System.Net.Http.ConnectHelper.EstablishSslConnectionAsync(SslClientAuthenticationOptions sslOptions, HttpRequestMessage request, Boolean async, Stream stream, CancellationToken cancellationToken)
   --- End of inner exception stack trace ---
   at System.Net.Http.ConnectHelper.EstablishSslConnectionAsync(SslClientAuthenticationOptions sslOptions, HttpRequestMessage request, Boolean async, Stream stream, CancellationToken cancellationToken)
   at System.Net.Http.HttpConnectionPool.ConnectAsync(HttpRequestMessage request, Boolean async, CancellationToken cancellationToken)
   at System.Net.Http.HttpConnectionPool.CreateHttp11ConnectionAsync(HttpRequestMessage request, Boolean async, CancellationToken cancellationToken)
   at System.Net.Http.HttpConnectionPool.AddHttp11ConnectionAsync(QueueItem queueItem)
   at System.Threading.Tasks.TaskCompletionSourceWithCancellation`1.WaitWithCancellationAsync(CancellationToken cancellationToken)
   at System.Net.Http.HttpConnectionPool.SendWithVersionDetectionAndRetryAsync(HttpRequestMessage request, Boolean async, Boolean doRequestAuth, CancellationToken cancellationToken)
   at System.Net.Http.RedirectHandler.SendAsync(HttpRequestMessage request, Boolean async, CancellationToken cancellationToken)
   at System.Net.Http.DecompressionHandler.SendAsync(HttpRequestMessage request, Boolean async, CancellationToken cancellationToken)
   at System.Net.Http.HttpClient.<SendAsync>g__Core|83_0(HttpRequestMessage request, HttpCompletionOption completionOption, CancellationTokenSource cts, Boolean disposeCts, CancellationTokenSource pendingRequestsCts, CancellationToken originalCancellationToken)
   at DaxLib.Client.Infrastructure.QueryClient.QueryPackagesAsync(String search, Int32 skip, Int32 take, Boolean prerelease, CancellationToken cancellationToken) in /home/vsts/work/1/s/src/DaxLib.Client/Infrastructure/QueryClient.cs:line 14
   at DaxLib.Client.DaxLibClient.SearchAsync(String search, Int32 skip, Int32 take, Boolean prerelease, CancellationToken cancellationToken) in /home/vsts/work/1/s/src/DaxLib.Client/DaxLibClient.cs:line 132
   at Submission#0.<<Initialize>>d__0.MoveNext() in :line 9

Could this be a firewall issue at this point? May I kindly ask where I can find information about which firewall port needs to be enabled to allow the connection to DAX Package Manager?

Thank you very much for your help 🙂

[otykier]

So full disclaimer: SSL/certificate issues are unfortunately outside of the kind of support we can normally provide. But with the help of ChatGPT, it sounds like it could indeed still be a firewall issue, as the .NET stack attempts to make a few HTTP calls to verify the validity of a digital certificate. If your company firwall blocks outbound non-browser HTTP calls by default, it could explain the error you're seeing.

CC @albertospelta (in case other DAX Lib users report the same issue)

Here's the answer from ChatGPT with more details:

---

The SSL connection could not be established, see inner exception
 ---> The remote certificate is invalid because of errors in the certificate chain: RevocationStatusUnknown

indicates that your system is unable to verify the revocation status of the SSL certificate presented by https://api.daxlib.org.
In other words, the certificate itself is valid and trusted, but your environment could not reach the certificate authority’s revocation server (CRL/OCSP endpoint) to confirm it hasn’t been revoked.

This is usually caused by one of the following:

• A corporate firewall or proxy blocking access to the certificate revocation URLs (these are plain http:// endpoints such as http://ocsp.digicert.com/).
• Antivirus or SSL inspection software intercepting HTTPS traffic and re-signing it with a local certificate.
• Outdated Windows certificate store (especially on older or offline systems) missing newer root/intermediate certificates.
• Offline environments without general Internet access.

The API endpoint https://api.daxlib.org is using a valid DigiCert certificate and reports an “A” grade on SSL Labs, so this is almost certainly an environmental/network issue on the affected machine.

Suggested steps:

1. From the same machine, try opening the following URLs in a browser:
   • http://ocsp.digicert.com/
   • http://crl3.digicert.com/
   • http://crl4.digicert.com/
   • http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
   • http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt
2. Also test with PowerShell (as firewalls could allow outbound http traffic only in browsers):
   • Test-NetConnection ocsp.digicert.com -Port 80
   • Test-NetConnection crl3.digicert.com -Port 80
   • Test-NetConnection crl4.digicert.com -Port 80
   • Test-NetConnection cacerts.digicert.com -Port 80
     If any of these fail to load, it confirms that CRL/OCSP checks are being blocked.
3. Check if any antivirus, proxy, or VPN is intercepting SSL traffic.
4. Make sure Windows is fully updated so that the latest root certificates are installed.

[albertospelta]

@mrubinitor As Daniel mentioned, it seems the DaxLib client cannot verify the TLS certificate chain. This is a check the DaxLib client enforces to ensure the connection can be trusted. Could you please open this link in your browser and let us know what you see? This is the same address used by the DaxLib client and allows you to simulate the same request directly from the browser.

https://api.daxlib.org/v1/query-packages?q=sample

Do you get a JSON response, a certificate warning, or another error? In your browser, if you click View Site Information > Connection is Secure > Show Certificate, you should see the certificate hierarchy as shown in the image below.

[mrubinitor]

@albertospelta thank you for your support, and apologies for the delayed response.
I can confirm that I see the JSON response and that the certificate appears to be valid.
Here's the JSON:

{
  "data": [
    {
      "id": "DaxLib.Sample",
      "version": "0.1.7",
      "authors": [
        "SQLBI",
        "albertospelta"
      ],
      "description": "DaxLib sample library",
      "tags": [
        "DAX",
        "SAMPLE"
      ],
      "releaseNotes": "Update metadata with new project and repository URLs",
      "projectUrl": "https://github.com/sql-bi/dev-daxlib-sample",
      "repositoryUrl": "https://github.com/sql-bi/dev-daxlib-sample",
      "published": "2025-10-10T17:11:40.2546518+00:00",
      "downloads": 2141,
      "hasIcon": false,
      "owners": [
        "SQLBI",
        "albertospelta"
      ],
      "hasReadme": true
    },
    {
      "id": "DataGoblins.SampleData",
      "version": "0.1.0-beta",
      "authors": [
        "Kurt Buhler"
      ],
      "description": "A set of functions that can be used in calculated tables to generate random sample data for experimentation, prototypes, and testing. During beta, functions and parameters are likely to evolve and change dramatically.",
      "tags": [
        "DAX",
        "UDF",
        "FUNCTION",
        "LIB",
        "SAMPLE DATA",
        "DATA"
      ],
      "releaseNotes": "Initial beta release of DataGoblins.SampleData library. Provides 6 functions for generating realistic sample data: Orders (fact table with line-level variations), Inventory (warehouse snapshots), Customer/Product/Store (dimension tables with configurable data quality issues), and Dates (comprehensive calendar table). Functions support configurable parameters for volume, date ranges, data quality, and reproducible seeding. Note that Power BI may complain with syntax errors, but the functions should work in calculated tables, regardless.",
      "projectUrl": "https://github.com/data-goblin/DataGoblin.SampleData",
      "repositoryUrl": "https://github.com/data-goblin/DataGoblin.SampleData",
      "published": "2025-09-22T12:38:21.5725122+00:00",
      "downloads": 838,
      "hasIcon": true,
      "owners": [
        "kurtbuhler"
      ],
      "hasReadme": false
    }
  ]
}

Certificate:

I’ll check with our IT team to verify access to the firewall port mentioned in the previous messages.
I’ll update you here if this resolves the issue.

Thanks for your help!