SSL certificate error from httpx with LangGraph server

I’m trying to use the LangGraph CLI to serve an agent with langgraph up on a machine in my local network. My langgraph.json is given below.

{
  "$schema": "https://langgra.ph/schema.json",
  "dependencies": ["."],
  "graphs": {
    "joker": {
      "path": "./src/agent.py:get_agent",
      "description": "A silly agent that tells jokes"
    }
  },
  "image_distro": "wolfi",
  "env": "./.env",
  "python_version": "3.13"
}

During the API server process, it reports an SSL certificate error related to the httpx Python package (see below).

langgraph-api-1       | httpx.ConnectError: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: Basic Constraints of CA cert not marked critical (_ssl.c:1032)

After this error occurs, the server and all the services are stopped (see below).

langgraph-postgres-1  | 2026-04-29 16:13:27.784 UTC [81] ERROR:  relation "thread_ttl" does not exist at character 46
langgraph-postgres-1  | 2026-04-29 16:13:27.784 UTC [81] STATEMENT:  SELECT thread_id, strategy, ttl_minutes FROM thread_ttl WHERE expires_at < (CURRENT_TIMESTAMP AT TIME ZONE 'UTC') LIMIT 1000 FOR UPDATE SKIP LOCKED
langgraph-api-1       | time=2026-04-29T16:13:27.784Z level=ERROR _msg="Thread TTL sweep iteration failed" component=thread-ttl-sweeper error="internal: failed to query expired threads; from: ERROR: relation \"thread_ttl\" does not exist (SQLSTATE 42P01)" _err-at=**/persistence/repos/threads_repo.go:2006 _log-at=**/background/threads_sweep.go:90
langgraph-api-1       | time=2026-04-29T16:13:27.785Z level=INFO _msg="All services started, waiting for shutdown signal" _log-at=**/core-server/main.go:188
langgraph-api-1       | time=2026-04-29T16:13:27.785Z level=INFO _msg="Starting PProf server" uri=REDACTED _log-at=**/core-server/main.go:170
langgraph-api-1       | time=2026-04-29T16:13:27.785Z level=INFO _msg="Core API server listening" uri=localhost:50051 _log-at=**/core-server/core-api.go:238
langgraph-postgres-1  | 2026-04-29 16:13:27.786 UTC [82] ERROR:  relation "run" does not exist at character 43
langgraph-postgres-1  | 2026-04-29 16:13:27.786 UTC [82] STATEMENT:  SELECT run_id, thread_id, created_at FROM run WHERE status = $1 AND NOT EXISTS (SELECT 1 FROM run r2 WHERE r2.thread_id = run.thread_id AND r2.status = $2) AND created_at <= NOW()
langgraph-api-1       | time=2026-04-29T16:13:27.786Z level=WARN _msg="Sweep: failed to enqueue pending runs" error="internal: failed to query pending runs; from: ERROR: relation \"run\" does not exist (SQLSTATE 42P01)" _err-at=**/persistence/repos/runs_repo.go:1438 _log-at=**/persistence/repos/runs_repo.go:1066
langgraph-postgres-1  | 2026-04-29 16:13:27.786 UTC [82] ERROR:  relation "run" does not exist at character 20
langgraph-postgres-1  | 2026-04-29 16:13:27.786 UTC [82] STATEMENT:  SELECT run_id FROM run WHERE status = $1
langgraph-api-1       | time=2026-04-29T16:13:27.786Z level=ERROR _msg="Runs sweep iteration failed" component=runs-sweeper error="internal: sweep: failed to list running runs; from: ERROR: relation \"run\" does not exist (SQLSTATE 42P01)" _err-at=**/persistence/repos/runs_repo.go:1468 _log-at=**/background/runs_sweep.go:84
 Compose Stopping Aborting on container exit...
 Container agent-container-langgraph-api-1 Stopping
 Container agent-container-langgraph-api-1 Stopped
 Container agent-container-langgraph-postgres-1 Stopping
 Container agent-container-langgraph-redis-1 Stopping
langgraph-postgres-1  | 2026-04-29 16:13:45.240 UTC [1] LOG:  received fast shutdown request
langgraph-postgres-1  | 2026-04-29 16:13:45.248 UTC [1] LOG:  aborting any active transactions
langgraph-postgres-1  | 2026-04-29 16:13:45.250 UTC [1] LOG:  background worker "logical replication launcher" (PID 72) exited with exit code 1
langgraph-postgres-1  | 2026-04-29 16:13:45.250 UTC [67] LOG:  shutting down
langgraph-postgres-1  | 2026-04-29 16:13:45.256 UTC [67] LOG:  checkpoint starting: shutdown immediate
langgraph-postgres-1  | 2026-04-29 16:13:45.309 UTC [67] LOG:  checkpoint complete: wrote 271 buffers (1.7%); 0 WAL file(s) added, 0 removed, 0 recycled; write=0.003 s, sync=0.042 s, total=0.060 s; sync files=183, longest=0.006 s, average=0.001 s; distance=1892 kB, estimate=1892 kB; lsn=0/16C33E8, redo lsn=0/16C33E8
langgraph-postgres-1  | 2026-04-29 16:13:45.311 UTC [1] LOG:  database system is shut down
 Container agent-container-langgraph-redis-1 Stopped
 Container agent-container-langgraph-postgres-1 Stopped

Does anyone else have this problem? Any suggestions on how to fix it?

I tried to build the Docker image then use the Docker compose file from here to run the container but I still get the SSL certificate error. However, I noticed the following output which might help someone fix this problem:

langgraph-api-1       | 2026-04-29T17:51:15.646314Z [info     ] Starting checkpointer ingestion loop [langgraph_runtime_postgres.checkpoint] api_revision=67d6599 api_variant=licensed langgraph_api_version=0.8.3 thread_name=ThreadPoolExecutor-1_0
langgraph-api-1       | 2026-04-29T17:51:15.698847Z [warning  ] HTTP GET request attempt 1 to https://api.smith.langchain.com/auth?langgraph-api=true failed: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: Basic Constraints of CA cert not marked critical (_ssl.c:1032). Retrying in 0.5 seconds... [langgraph_api.utils.retriable_client] api_revision=67d6599 api_variant=licensed langgraph_api_version=0.8.3 thread_name=MainThread
langgraph-api-1       | 2026-04-29T17:51:16.280679Z [warning  ] HTTP GET request attempt 2 to https://api.smith.langchain.com/auth?langgraph-api=true failed: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: Basic Constraints of CA cert not marked critical (_ssl.c:1032). Retrying in 1.0 seconds... [langgraph_api.utils.retriable_client] api_revision=67d6599 api_variant=licensed langgraph_api_version=0.8.3 thread_name=MainThread
langgraph-api-1       | 2026-04-29T17:51:17.344732Z [warning  ] HTTP GET request attempt 3 to https://api.smith.langchain.com/auth?langgraph-api=true failed: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: Basic Constraints of CA cert not marked critical (_ssl.c:1032). Retrying in 2.0 seconds... [langgraph_api.utils.retriable_client] api_revision=67d6599 api_variant=licensed langgraph_api_version=0.8.3 thread_name=MainThread
langgraph-api-1       | 2026-04-29T17:51:19.422125Z [warning  ] HTTP GET request attempt 4 to https://api.smith.langchain.com/auth?langgraph-api=true failed: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: Basic Constraints of CA cert not marked critical (_ssl.c:1032). Retrying in 4.0 seconds... [langgraph_api.utils.retriable_client] api_revision=67d6599 api_variant=licensed langgraph_api_version=0.8.3 thread_name=MainThread
langgraph-api-1       | 2026-04-29T17:51:23.490091Z [warning  ] HTTP GET request attempt 5 to https://api.smith.langchain.com/auth?langgraph-api=true failed: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: Basic Constraints of CA cert not marked critical (_ssl.c:1032). Retrying in 8.0 seconds... [langgraph_api.utils.retriable_client] api_revision=67d6599 api_variant=licensed langgraph_api_version=0.8.3 thread_name=MainThread
langgraph-api-1       | 2026-04-29T17:51:31.575925Z [error    ] HTTP GET request to https://api.smith.langchain.com/auth?langgraph-api=true failed after 6 attempts. Last error: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: Basic Constraints of CA cert not marked critical (_ssl.c:1032) [langgraph_api.utils.retriable_client] api_revision=67d6599 api_variant=licensed langgraph_api_version=0.8.3 thread_name=MainThread

I found some information about SSL errors in the httpx documentation. You can disable SSL verification in the httpx code but the API server is running from a Docker image, so I don’t have direct access to the code.