"Script Extender update Failed; make sure you're connected to the internet and try again. Unable to download manifest: (35) SSL connect error"

[KamikazeTacos]

I have attempted solutions to common problems

Yes

I have checked that my game version is supported

Yes

OS

Windows 10

Platform

Steam

Description

I have done a clean install of BG3 according to https://wiki.bg3.community/Tutorials/Mod-Use/How-to-remove-mods. I run the game with no added files and everything works perfectly. However, as soon as I install the .dll file for SE, I receive a popup saying

"Script Extender update Failed; make sure you're connected to the internet and try again.
Unable to download manifest: (35) SSL connect error"

The game launches after that, but SE is clearly not running as I do not see the build number under the Larian Studios build number on the main screen. I can still create new saves and load old ones. As soon as I remove the .dll, things work again. I have tried manualling downloading SE through the github and the vortex site (I know that is no the official one, but I was trying different solutions) and through the tool tab in Mod Manager. They all produce the same result.

I have done a lot of digging on the internet and found no results that resolve things for me.

Indications

I have been doing this with no other mods installed, so I am pretty certain that my problem is with SE, not another mod.

Diagnostic Files

BG3 Diagnostic Data.txt

Steps to Reproduce

No response

Expected Behavior

No response

Actual Behavior

No response

[SkebbZ]

Probably a DNS issue. Are you running Pihole or anything like that?
Otherwise, try https://developers.cloudflare.com/1.1.1.1/setup/windows/
(use 1.1.1.1 resolver).

Other possible reasons:

Since your error mentions SSL, is your computer date, year, day, clock, timezone, et cetera correct? If not, fix that.
Are you running any firewall software?

Also, duplicate of #447

[KamikazeTacos]

Sorry about the duplicate, I would have looked at that if I had found it (I promise I did a lot of searching).

I tried the 1.1.1.1 resolver, however it did not fix it. (I am on school internet so I might not be able to manipulate that in the proper way, though it did seem to save when I clicked on it again). I am not running Pihole or anything like that. I don't actually know what that is.

I just synced my computer's date and time and that was not the problem.

I am not personally running any firewalls, but again, I am on college internet so they could be running things on their end. Is it worth talking to their IT department or are there other things I can try first?

[SkebbZ]

The IT department won't be able to help you unless you know what domain/IP address is failing to resolve, unless they are feeling extremely helpful and go to look up your queries.

If you open a terminal (searching CMD should find it) and write
nslookup bg3se-updates.norbyte.dev
Do you get the address?

[KamikazeTacos]

This is what comes back when I use that line.

C:\Users(name)>nslookup bg3se-updates.norbyte.dev
Server: UnKnown
Address: 2606:4700:4700::1111

*** UnKnown can't find bg3se-updates.norbyte.dev: No response from server

[SkebbZ]

Definitely seems like a DNS issue then, make sure you completed the previous link I sent successfully.

If that doesn't work, try Google DNS or a VPN.

When done correctly, you should get something like this

(red crossed out lines are unique to my setup, ignore)

Note: if you are on a WiFi network using 802.1x (requires both username and password to connect), then they may be blocking you from manually defining your DNS-server outside of using a VPN. In that case, set DNS back to auto and use a VPN.

[KamikazeTacos]

Ok, I am looking into Google DNS for now (and a VPN later if this doesn't work). Once I configure it to Google DNS, should it theoretically just work or is there more I have to do with this? I have really no experience in this area so I wasn't sure what to do after I configured it properly.

[SkebbZ]

Run the nslookup command again once you configure it and see.

[WakeXT]

Speaking of having no connection, is there a configuration variable to add in ScriptExtenderSettings.json that suppresses this error dialogue-window so it doesn't show each time BG3 is started?

[KamikazeTacos]

SkebbZ, I attempted to get Google DNS running, but as it turned out, I am on a network using 802.1x so I will have to look into a VPN. It may take me a day or two to have time for that though, but I wanted to say thank you for your patience and willingness to help me figure this out. I wouldn't be anywhere closer to a solution without your help.

WakeXT, I am not sure. I created a ScriptExtenderSettings.json so that it would run the console, but since SE has yet to launch at all, there is no console or really any other files to be heard of.

[SkebbZ]

SkebbZ, I attempted to get Google DNS running, but as it turned out, I am on a network using 802.1x so I will have to look into a VPN. It may take me a day or two to have time for that though, but I wanted to say thank you for your patience and willingness to help me figure this out. I wouldn't be anywhere closer to a solution without your help.

WakeXT, I am not sure. I created a ScriptExtenderSettings.json so that it would run the console, but since SE has yet to launch at all, there is no console or really any other files to be heard of.

Good luck :)

[KamikazeTacos]

So, I have not had a smooth experience. I did some digging and found NordVPN was the most popular one out there. I would prefer to resolve this without paying though. I found ProtonVPN as well, but anytime I would click directly on their link or any other free VPN link, it would tell me
"An application is stopping Chrome from safely connecting to this site
"Fortinet" wasn’t installed properly on your computer or network. Ask your IT administrator to resolve this issue.
net::ERR_CERT_AUTHORITY_INVALID"

Well I found a way around that through the chrome extensions and downloaded it there. I connected to a new network and basically had no internet through my browser, though running the prompt in CMD gave me the results you were showing and in my window's settings, it does say I am connected to the internet. However, naturally, trying to run BG3 with SE did not work. I am assuming the school's network is blocking me from going on many of these VPN websites, however, I do not know why then connecting to a VPN gives me no browser internet access. I made sure to return the DNS back to auto.

[SkebbZ]

Many browsers have their own DNS settings internally, which can be set to ignore your OS DNS.
I don't use Chrome, but I assume it also supports DNS-over-HTTPS or similar. It may be trying to use it's own DNS if the OS DNS fails to reach certain domains.

Anyway, the error you mention is related to security certificate authority.

Sounds like your school is trying really hard to block all access to other countries if they somehow blocked you from verifying certificates.

Free VPNs are mostly scams that steal your data or sell it, and should normally be avoided.

You can probably still use OpenVPN as it can be found in many places, but you'll still need a login for a VPN server.

[KamikazeTacos]

Well, after a long talk with a customer support rep, I got a vpn downloaded and it worked great! BG3SE is running and I am very glad to have this figured out. Thank you so much for your help!

[Grayoops]

I've got a simulate situation like you a few days ago. While I trying to load a mod name "Appearance Edit Enhanced" which can change your character's body type and race. And it also requires Norbyte's Script Extender. I darg the .dll files into \bin folder and try to load the "Appearance Edit Enhanced" mod with BG3MM. There's a warning after the mod name when you import the mod into BG3MM. I dont remember how exactly it says but it barely means that the "Appearance Edit Enhanced" mod require at least v20 version with Norbyte's Script Extender and now I'm loading v20 version. Which really confused me cause I literaly do what the warning ask and it still keep warning me. So I left the warning along and try to launch the game to see if it's a fake warning or sth. Then it's the story we all knows like "Script Extender update Failed; make sure you're connected to the internet and try again.
Unable to download manifest: (35) SSL connect error". (PS: a VPN cannot help in my situation.I'v tried.)And the game lunch after that but the mod didn't work. So I presume the Norbyte's Script Extender didn't load correctly. But I can actually play without the "Appearance Edit Enhanced" mod. So I just quit it and delete the .dll files in \bin folder. Then everything works find. And after couple days playing I realize what a pity if I cant play with those amazing mod which all requires Norbyte's Script Extender. And I know it won't works if I keep loading the mod like before. So I try to search if there is another way to load Norbyte's Script Extender. Well they do. There's a easy way to load the Norbyte's Script Extender in BG3MM. You open BG3MM, click "Tools" on the bar, click "Download & Exrtract Script Extender", click "yes". And it actually work! There's no warning after mod name when you import those mod requires Norbyte's Script Extender. That's how I solve the promble. I know I've kind of verbose but hope this solution can help you a little bit.

[WakeXT]

You confuse the .dll being the whole Script Extender - it's not, it is only the updater (or "Launcher") which queries for updates every time you start BG3.
So of course BG3MM is gonna throw out a warning if you never started the game once to download the newest (or I should say appropriate, since for example it downloads an older version if you're on Patch #6 still) version as it detects that Script Extender isn't installed completely yet.

Then it's the same connection error this topic is all about.

After that you describe how installing it via BG3MM somehow fixed it but unless the MM takes an older .dll which for some reason doesn't have the connectivity problem, it would be the same result in an error as BG3MM also just downloads the .dll of the Launcher and puts it into \bin iirc (can't access my gaming PC atm to check).

[Grayoops]

You confuse the .dll being the whole Script Extender - it's not, it is only the updater (or "Launcher") which queries for updates every time you start BG3. So of course BG3MM is gonna throw out a warning if you never started the game once to download the newest (or I should say appropriate, since for example it downloads an older version if you're on Patch #6 still) version as it detects that Script Extender isn't installed completely yet.

Then it's the same connection error this topic is all about.

After that you describe how installing it via BG3MM somehow fixed it but unless the MM takes an older .dll which for some reason doesn't have the connectivity problem, it would be the same result in an error as BG3MM also just downloads the .dll of the Launcher and puts it into \bin iirc (can't access my gaming PC atm to check).

So that's how it work, I was taught. Thank you:)