Tracked down a Shapecast Engine download failure on Windows which was persistent from the moment I downloaded and activated.
The UI reports “download server can’t be reached” and suggests AV/DNS filtering, but the underlying error in shapecast-core.log is:
[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: certificate has expired (_ssl.c:1016)
Endpoint:
https://pub-44***************.r2.dev
DNS, Windows Firewall and direct HTTPS connectivity are all fine. curl reaches the endpoint successfully.
More importantly, Shapecast's bundled Python behaves differently depending on the SSL implementation:
requests.get() → TLS succeeds
urllib.request.urlopen() → CERTIFICATE_VERIFY_FAILED
The bundled Python default SSL path resolves to:
C:\Program Files\Common Files\SSL\cert.pem
Setting:
SSL_CERT_FILE=D:\Shapecast\core-runtime\python\Lib\site-packages\certifi\cacert.pem
fixes certificate validation — urllib then successfully completes TLS and reaches R2 (403 on the bucket root, as expected).
Looks like the pack downloader is relying on Python/OpenSSL's default CA path rather than Shapecast's bundled certifi CA bundle.
Might also be worth changing the UI error handling so CERTIFICATE_VERIFY_FAILED isn't reported as a generic AV/DNS connectivity issue.
Source: r/gamedev · by /u/ZeroOneUK