Silent crash on untrusted TLS

[devbeard]

Context:

• Managed work laptop, Mac OS, everything up to date
• Many URLs but also https://*.githubusercontent.com/* is intercepted and TLS certificate replaced with root CA for Cisco Umbrella
• This certificate is not trusted by python runtime without additional steps
• Was tricky to find the reason uvx/speckit failed

Command:

uvx --from git+https://github.com/github/spec-kit.git specify init temp123

Actual Behavior

• Once step Fetch latest release is hit, the process stops
• Exit code 1
• Debugging with RUST_LOG=trace uvx -vv --from git+https://github.com/github/spec-kit.git specify init temp123 does not provide an answer to why

Expected Behavior

• Either directly or in "verbose" mode, actually show the issue being TLS related

Screenshot, intercept cert:

[fergoid]

I see the same issue in my work environment, same issue but different proxy.

In fact to get the spec init command to at least run to this point I had to use.

uvx --native-tls ...

[ramusbucket]

Does PR - #128 help?

[fergoid]

Does PR - #128 help?

Looks like it might do the trick :)

[simonwfarrow]

I got it to work by setting the SSL_CERT_FILE env var as defined here - https://docs.astral.sh/uv/concepts/authentication/certificates/#custom-certificates

I pointed it to a pem file which contains my corporate signed certs.

[danieleBennetts]

I have done the above, but it still fails when fetching updates and exit.

[localden]

Covered by #71

[ramusbucket]

Alternatively, you try using --skip-tls flag to skip ssl/tls verification as below -
uvx --from git+https://github.com/github/spec-kit.git specify init --skip-tls <PROJECT_NAME>