[BUG] Unknown CA when running fossa analyze

[cefengxu]

Important: Bug reports should be directed to [email protected] for faster response and prioritization. Bug reports may still be created here but they may not get immediate attention and may be closed in favor of internally tracked tickets.

Describe the bug
A clear and concise description of what the bug is.

Relevant errors

Error

A socket-level error occurred when accessing the FOSSA API:

    HandshakeFailed (Error_Protocol ("certificate has unknown CA",True,UnknownCa))

These errors are usually related to TLS issues or the host being unreachable.
For troubleshooting steps with TLS issues, please refer to:
    - https://github.com/fossas/fossa-cli/blob/v3.6.5/docs/walkthroughs/ssl-cert.md

If you believe this to be a defect, please report a bug to FOSSA support at https://support.fossa.com

Traceback:
  - Converting fossa-deps to partial API payload
  - fossa-deps
  - fossa-analyze

[github-actions]

Thank you @cefengxu for creating this issue. If this is in regards to a defect, product question or feature request: you should use our support portal at https://support.fossa.com to file a request, as you would receive more immediate support.

[csasarak]

Hi,

I will need some more information in order to see if this issue is indeed related to our CLI or if it's potentially something else.

Can you let me know:

1. Your operating system name and version
2. The version of the CLI you're using. You can get this using fossa --version
3. What was the invocation you used for the CLI.
4. Are you able to access https://app.fossa.com from the same system that you run this from using other programs such as cURL or a browser?
5. Is this an intermittent problem or one that you have seen happening consistently?

[chris-gruenewald]

I had exactly the same bug using Fossa version 3.9.37 on Windows Server 2022. I was able to browse https://app.fossa.com but still got the error. I fixed it by installing / trusting all 5 of the Root CA .cert files from here: https://www.amazontrust.com/repository/