Error on mix deps.get prep to try jamdb for oracle access - TLS :client: In state :certify at ssl_handshake.erl:1899 generated CLIENT

Having issue with mix deps.get

Tried dropping back to otp 22 with same result.
tried mix hex.local then mix deps.get same result on both otp24 and otp 22

Thanks in advance for any help

elixir 1.12
erl otp 24

defmodule Ora.MixProject do
use Mix.Project

def project do
[
app: :ora,
version: “0.1.0”,
elixir: “~> 1.12”,
start_permanent: Mix.env() == :prod,
deps: deps()
]
end

Run “mix help compile.app” to learn about applications.

def application do
[
extra_applications: [:logger, :ecto, :jamdb_oracle],
mod: {Ora.Application, []}
]
end

Run “mix help deps” to learn about dependencies.

defp deps do
[
# {:dep_from_hexpm, “~> 0.3.0”},
# {:dep_from_git, git: “https://github.com/elixir-lang/my_dep.git”, tag: “0.1.0”}
{:ecto, “~> 3.0”},
{:jamdb_oracle, “~>0.3.2”}
]
end
end

C:\bwdata\elixirhttp\ora>mix deps.get

11:11:48.506 [info] TLS :client: In state :certify at ssl_handshake.erl:1899 generated CLIENT ALERT: Fatal - Unknown CA

11:11:48.512 [info] TLS :client: In state :certify at ssl_handshake.erl:1899 generated CLIENT ALERT: Fatal - Unknown CA

11:11:48.510 [info] TLS :client: In state :certify at ssl_handshake.erl:1899 generated CLIENT ALERT: Fatal - Unknown CA

Failed to fetch record for ‘hexpm/jamdb_oracle’ from registry (using cache instead)
Failed to check for new Hex version
{:failed_connect, [{:to_address, {‘repo.hex.pm’, 443}}, {:inet, [:inet], {:tls_alert, {:unknown_ca, ‘TLS client: In state certify at ssl_handshake.erl:1899 generated CLIENT ALERT: Fatal - Unknown CA\n’}}}]}
Failed to fetch record for ‘hexpm/ecto’ from registry (using cache instead)
{:failed_connect, [{:to_address, {‘repo.hex.pm’, 443}}, {:inet, [:inet], {:tls_alert, {:unknown_ca, ‘TLS client: In state certify at ssl_handshake.erl:1899 generated CLIENT ALERT: Fatal - Unknown CA\n’}}}]}
{:failed_connect, [{:to_address, {‘repo.hex.pm’, 443}}, {:inet, [:inet], {:tls_alert, {:unknown_ca, ‘TLS client: In state certify at ssl_handshake.erl:1899 generated CLIENT ALERT: Fatal - Unknown CA\n’}}}]}
** (Mix) No package with name jamdb_oracle (from: mix.exs) in registry

C:\bwdata\elixirhttp\ora>erl --version
Eshell V12.0 (abort with ^G)
1>
C:\bwdata\elixirhttp\ora>elixir --version
Erlang/OTP 24 [erts-12.0] [source] [64-bit] [smp:8:8] [ds:8:8:10] [async-threads:1] [jit]

Elixir 1.12.1 (compiled with Erlang/OTP 22)

was trying get and had cert error

looks like default was linux backend channel and doesnt work on windows

rand this on cmd line

git config --global http.sslBackend schannel

can access git now

Jan 2021 - Got around this in VS2019 by setting Menu > Git > Settings > Git Global Settings > Cryptographic Network Provider > [Secure Channel] instead of [OpenSSL]

Git SSL certificate problem unable to get local issuer certificate (fix)

PS: Didn’t need to set --global or --local http.sslVerify false. I was cloning an Azure DevOps repo which wasn’t using any self signed certs… This seems like an issue with either VS2019 or Git for Windows… They need to fix it !!

Share

Improve this answer

Follow

edited Jan 15 at 18:34



Dharman

22k1818 gold badges5757 silver badges108108 bronze badges

answered Jan 15 at 18:28



veenz

4133 bronze badges

  • The command line equivalent (for non VS2019 etc) is : git config --global http.sslBackend schannel – sarin 11 hours ago