# Elm can't fetch the package list with a HTTPS error

**URL:** <https://discourse.elm-lang.org/t/elm-cant-fetch-the-package-list-with-a-https-error/8912>\
**Category:** Learn\
**Created:** [January 28, 2023, 1:47pm UTC](https://discourse.elm-lang.org/t/elm-cant-fetch-the-package-list-with-a-https-error/8912 "2023-01-28T13:47:05Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![mbartlett21](https://avatars.discourse-cdn.com/v4/letter/m/f17d59/32.png) [@mbartlett21](https://discourse.elm-lang.org/u/mbartlett21)\
**Post date:** [January 28, 2023, 1:47pm UTC](https://discourse.elm-lang.org/t/elm-cant-fetch-the-package-list-with-a-https-error/8912/1 "2023-01-28T13:47:05Z")

</div>

I tried to start a new project with `elm init`, but it says it can’t reach the package list.

Is there any way I can tell elm to use the system certificate store?  
(The firewall for work adds its certificates there)

I have verified that I can access that URL through the browser.

> I need the list of published packages before I can start initializing projects,  
> so I tried to fetch:
> 
> [https://package.elm-lang.org/all-packages](https://package.elm-lang.org/all-packages)
> 
> But my HTTP library is giving me the following error message:
> 
> InternalException (HandshakeFailed (Error\_Protocol (“certificate rejected: [InvalidSignature SignatureInvalid]”,True,CertificateUnknown)))
> 
> Are you somewhere with a slow internet connection? Or no internet? Does the link  
> I am trying to fetch work in your browser? Maybe the site is down? Does your  
> internet connection have a firewall that blocks certain domains? It is usually  
> something like that!

---

<div class="post-metadata">

**Author:** ![lydell](https://yyz1.discourse-cdn.com/flex035/user_avatar/discourse.elm-lang.org/lydell/32/178_2.png) [@lydell](https://discourse.elm-lang.org/u/lydell)\
**Post date:** [January 28, 2023, 2:22pm UTC](https://discourse.elm-lang.org/t/elm-cant-fetch-the-package-list-with-a-https-error/8912/2 "2023-01-28T14:22:37Z")

</div>

How do you tell other tools to use the system certificate store?

For example, what do you need to do to make `curl https://package.elm-lang.org/all-packages` work?

---

<div class="post-metadata">

**Author:** ![mbartlett21](https://avatars.discourse-cdn.com/v4/letter/m/f17d59/32.png) [@mbartlett21](https://discourse.elm-lang.org/u/mbartlett21)\
**Post date:** [January 29, 2023, 9:35pm UTC](https://discourse.elm-lang.org/t/elm-cant-fetch-the-package-list-with-a-https-error/8912/3 "2023-01-29T21:35:40Z")

</div>

@lydell

In order to get `curl https://package.elm-lang.org/all-packages` to work, I have to pass `--ssl-no-revoke` (Disabling certificate revocation checks with Schannel)

Otherwise, it gives this:

```plaintext
C:\> curl https://package.elm-lang.org/all-packages
curl: (35) schannel: next InitializeSecurityContext failed: Unknown error (0x80092012) - The revocation function was unable to check revocation for the certificate.

```

I am on Windows.

Just looking at the error further, it appears to be a problem with the signature, not the actual root CA.

---

<div class="post-metadata">

**Author:** ![system](https://canada1.discourse-cdn.com/flex035/uploads/elm_lang/original/1X/50a05e53677a2c3b47776d7abd0f113eb50193a1.png) [@system](https://discourse.elm-lang.org/u/system)\
**Post date:** [February 8, 2023, 9:35pm UTC](https://discourse.elm-lang.org/t/elm-cant-fetch-the-package-list-with-a-https-error/8912/4 "2023-02-08T21:35:45Z")

</div>

Closed on February 8, 2023, 9:35pm UTC

This topic was automatically closed 10 days after the last reply. New replies are no longer allowed.