Error downloading packages from behind the company proxy

[sz3lbi]

Hi,
I would like to use Gleam on my company laptop running Windows 10 Enterprise 22H2. However, like most companies, we are behind a proxy, which I assume is causing the problem with downloading packages.

> gleam run
Downloading packages
error: HTTP error

A HTTP request failed.
The error from the HTTP client was:

    error sending request for url (https://repo.hex.pm/tarballs/gleam_erlang-0.27.0.tar)

When I open the URL from the error message in a browser, it downloads properly. So I think it might be a problem with Gleam not working properly with the proxy.
Do you have any advice on what I can do to make it work?

> gleam --version
gleam 1.5.1

[lpil]

Is software expected to do anything specific to work with these proxies? I'm unfamiliar with them.

Could you run with GLEAM_LOG=trace please.

[sz3lbi]

I am not sure what the software should do to work properly with these proxies. However, all the pages you visit don't show the SSL certificate of the page itself, but the intermediate certificate, in this case from Zscaler Inc.

the Zscaler service establishes a separate SSL tunnel with the destination server and with the user’s browser. This allows the service to decrypt and inspect the HTTPS traffic coming to and from the user’s browser, as well as all traffic coming to and from the destination server

Choosing the CA Certificate for SSL Inspection

I think this is causing the problem.

> gleam run
TRACE download_deps: creating_directory path="C:\\Users\\username\\repos local\\project\\build\\packages"
DEBUG download_deps: locking_build_directory path="C:\\Users\\username\\repos local\\project\\build\\packages"
TRACE download_deps: reading_file path="C:\\Users\\username\\repos local\\project\\gleam.toml"
DEBUG download_deps: reading_manifest_toml
TRACE download_deps: reading_file path="C:\\Users\\username\\repos local\\project\\manifest.toml"
DEBUG download_deps: manifest_up_to_date
TRACE download_deps: creating_directory path="C:\\Users\\username\\repos local\\project\\build\\dev\\erlang"
DEBUG download_deps: locking_build_directory path="C:\\Users\\username\\repos local\\project\\build\\dev\\erlang"
TRACE download_deps: creating_directory path="C:\\Users\\username\\repos local\\project\\build\\dev\\javascript"
DEBUG download_deps: locking_build_directory path="C:\\Users\\username\\repos local\\project\\build\\dev\\javascript"
TRACE download_deps: creating_directory path="C:\\Users\\username\\repos local\\project\\build\\prod\\erlang"
DEBUG download_deps: locking_build_directory path="C:\\Users\\username\\repos local\\project\\build\\prod\\erlang"
TRACE download_deps: creating_directory path="C:\\Users\\username\\repos local\\project\\build\\prod\\javascript"
DEBUG download_deps: locking_build_directory path="C:\\Users\\username\\repos local\\project\\build\\prod\\javascript"
TRACE download_deps: creating_directory path="C:\\Users\\username\\repos local\\project\\build\\lsp\\erlang"
DEBUG download_deps: locking_build_directory path="C:\\Users\\username\\repos local\\project\\build\\lsp\\erlang"
TRACE download_deps: creating_directory path="C:\\Users\\username\\repos local\\project\\build\\lsp\\javascript"
DEBUG download_deps: locking_build_directory path="C:\\Users\\username\\repos local\\project\\build\\lsp\\javascript"
Downloading packages
 INFO download_deps: downloading_package_to_cache package="gleam_erlang" version=0.27.0
TRACE download_deps: checkout waiting for idle connection: ("https", repo.hex.pm)
DEBUG download_deps: starting new connection: https://repo.hex.pm/
TRACE download_deps: Http::connect; scheme=Some("https"), host=Some("repo.hex.pm"), port=None
 INFO download_deps: downloading_package_to_cache package="gleam_http" version=3.7.0
DEBUG resolving host="repo.hex.pm"
TRACE download_deps: checkout waiting for idle connection: ("https", repo.hex.pm)
DEBUG download_deps: starting new connection: https://repo.hex.pm/
TRACE download_deps: Http::connect; scheme=Some("https"), host=Some("repo.hex.pm"), port=None
 INFO download_deps: downloading_package_to_cache package="gleam_httpc" version=3.0.0
TRACE download_deps: checkout waiting for idle connection: ("https", repo.hex.pm)
DEBUG download_deps: starting new connection: https://repo.hex.pm/
TRACE download_deps: Http::connect; scheme=Some("https"), host=Some("repo.hex.pm"), port=None
DEBUG resolving host="repo.hex.pm"
 INFO download_deps: downloading_package_to_cache package="gleam_stdlib" version=0.40.0
DEBUG resolving host="repo.hex.pm"
TRACE download_deps: checkout waiting for idle connection: ("https", repo.hex.pm)
DEBUG download_deps: starting new connection: https://repo.hex.pm/
TRACE download_deps: Http::connect; scheme=Some("https"), host=Some("repo.hex.pm"), port=None
 INFO download_deps: downloading_package_to_cache package="gleeunit" version=1.2.0
TRACE download_deps: checkout waiting for idle connection: ("https", repo.hex.pm)
DEBUG download_deps: starting new connection: https://repo.hex.pm/
TRACE download_deps: Http::connect; scheme=Some("https"), host=Some("repo.hex.pm"), port=None
DEBUG resolving host="repo.hex.pm"
DEBUG resolving host="repo.hex.pm"
DEBUG download_deps: connecting to 151.101.38.2:443
DEBUG download_deps: connecting to 151.101.38.2:443
DEBUG download_deps: connecting to 151.101.38.2:443
DEBUG download_deps: connecting to 151.101.38.2:443
DEBUG download_deps: connecting to 151.101.38.2:443
DEBUG download_deps: connected to 151.101.38.2:443
DEBUG download_deps: connected to 151.101.38.2:443
DEBUG download_deps: connected to 151.101.38.2:443
DEBUG download_deps: connected to 151.101.38.2:443
DEBUG download_deps: connected to 151.101.38.2:443
TRACE download_deps: checkout dropped for ("https", repo.hex.pm)
TRACE download_deps: checkout dropped for ("https", repo.hex.pm)
TRACE download_deps: checkout dropped for ("https", repo.hex.pm)
TRACE download_deps: checkout dropped for ("https", repo.hex.pm)
TRACE download_deps: checkout dropped for ("https", repo.hex.pm)
ERROR Failed error=Http("error sending request for url (https://repo.hex.pm/tarballs/gleam_erlang-0.27.0.tar)")
error: HTTP error

A HTTP request failed.
The error from the HTTP client was:

    error sending request for url (https://repo.hex.pm/tarballs/gleam_erlang-0.27.0.tar)

[lpil]

Would this do what you want? #3246

[sz3lbi]

Oh, I have not come across this issue and discussion mentioned inside! I think it might be the solution, yes.

[sz3lbi]

With the release of Gleam 1.9.0, the functionality mentioned in the previous comments has been implemented.

For anyone coming here later, let me quickly explain how to set things up on Windows.

1. Gleam expects a path to the certificates, so you need to export them from the Windows certificate manager to the files. You can find tutorials on this topic online, but long story short: run the certmgr.msc application, find the certificate you need, right click on it and export it as a Base-64 encoded X.509 (.CER) file.
2. Create a new text file somewhere on your file system and name it cacerts.pem. In its contents, paste the contents of all the exported certificates one below the other.
3. Edit the environment variables for your account, add the GLEAM_CACERTS_PATH one with a value that contains a path directly to the cacerts.pem file you created.

After that, everything should work fine, as it did for me.
I believe the above steps are also applicable to Elixir, since it uses a similar approach.