oh man, I still get TLS :client: In state :wait_cert at ssl_handshake.erl:2177 generated CLIENT ALERT: Fatal - Unknown CA.
The only difference seems to be the cert itself. what kind of a cert are you using? the name says “bundle” - what is that? I just got the CA version from Microsoft docs, is that not correct?
edit: it works! those SSL settings were exactly correct! and “bundle” means you put the 3 certs together:
cat DigiCertGlobalRootCA.pem DigiCertGlobalRootG2.crt.pem MicrosoftRSARoot2017.pem > combined_ca.pem
thank you so much! what a pain this was.
