TlsException on Windows

[wismill]

Hi, I tried stack on Windows 7 64 bits and I got the following error: TlsException (HandshakeFailed (Error_Protocol ("certificate has unknown CA",True,UnknownCa))).

To reproduce this:

1. Download the zip file containing stack.exe and unzip it in a directory.
2. Open Powershell and go to the directory containing the previous file.
3. cabal init (assuming cabal is already installed).
4. stack build

Edit 1: I am using minghc 7.10.1 64 bits.

[3noch]

To whom it may concern, the tls package did not work on Windows 64-bit until crypto-random was fixed in version 0.0.9. However, I think stack is built as 32-bit for Windows.

[3noch]

For what it's worth, I'm running Windows 8 64-bit and I'm not getting any errors.

[chrisdone]

I believe I've seen this issue elsewhere for the tls package and windows before. Let me see if I can find it.

[chrisdone]

@snoyberg We had this exception with fpco-api in the past; do you remember anything from that can be helpful here?

[snoyberg]

@wismill Can you follow the TLS debugging instructions at:

https://github.com/vincenthz/hs-tls#common-issues

Also, can you test out from a regular command prompt instead of powershell? I don't think that's important, but it's good to rule out other factors.

[wismill]

I am testing now with Windows 8 64 bits (as admin): same error.
Using the shell cmd.exe does not solve the issue.
I have installed tls-debug but I do not know what host to test. Could you indicate me the complete commands to run?

[snoyberg]

I can't tell without more of the output from your process, can you copy in everything from calling stack till that exception?

[wismill]

I got only this single line as output.

Adding option --verbosity debug gave me this:

2015-06-09 20:40:47.8047871: [debug] Checking for project config at: C:\Users\Administrateur\Downloads\test-stack\stack.yaml @(stack-0.0.1:Stack.Config src/Stack\Config.hs:345:9)
2015-06-09 20:40:47.8047871: [debug] Checking for project config at: C:\Users\Administrateur\Downloads\stack.yaml @(stack-0.0.1:Stack.Config src/Stack\Config.hs:345:9)
2015-06-09 20:40:47.8047871: [debug] Checking for project config at: C:\Users\Administrateur\stack.yaml @(stack-0.0.1:Stack.Config src/Stack\Config.hs:345:9)
2015-06-09 20:40:47.8047871: [debug] Checking for project config at: C:\Users\stack.yaml @(stack-0.0.1:Stack.Config src/Stack\Config.hs:345:9)
2015-06-09 20:40:47.8047871: [debug] Checking for project config at: C:\stack.yaml @(stack-0.0.1:Stack.Config src/Stack\Config.hs:345:9)
2015-06-09 20:40:47.8047871: [debug] No project config file found, using defaults. @(stack-0.0.1:Stack.Config src/Stack\Config.hs:370:13)
TlsException (HandshakeFailed (Error_Protocol ("certificate has unknown CA",True,UnknownCa)))

[snoyberg]

It's probably failing when trying to download the snapshot info, can you try with the URL:

https://www.stackage.org/download/snapshots.json

[wismill]

(Back with Windows 7)
So I tried: tls-retrievecertificate -d https://www.stackage.org/download/snapshots.json -v -c and I got errors about options -d,-v and -c not being recognized.

I tried tls-retrievecertificate https://www.stackage.org/download/snapshots.json and it gave me the help menu of tls-retrievecertificate.

I finally tried tls-simpleclient -d -v https://www.stackage.org/download/snapshots.json and I got the following:

sending query:
GET / HTTP/1.0



tls-simpleclient: getHostByName: does not exist (no such host entry)

I tried these commands at home (win 8) and at work (win 7) with the same result.

[snoyberg]

The arguments are supposed to be the host, not the full URL

tls-simpleclient -d -v <www.myserver.com>

For example, I was able to run:

stack exec -- tls-simpleclient -d -v www.stackage.org 443

Though you'll likely want to leave off the stack exec -- bit.