Fetch Error: unable to verify the first certificate during deploy/upload to Arduino.

[nkrkv]

A weird SSL bug which affects newcomers and makes XOD look like malware which gladly reports itself 😃

Environment

• Scope: desktop IDE
• Version: 0.21.0
• OS: Windows 10

Steps to reproduce

On a fresh install, try to upload to trigger toolchain download

Expected behavior

The toolchain is installed, the upload goes on

Actual behavior

Error:

Fetch Error: request to https://storage.googleapis.com/releases.xod.io/packages/win32-avr-tools.tar.gz failed, reason: unable to verify the first certificate”, during deploy/upload to Arduino.

Details

The bug was reported by several users with Windows machines. In one particular case, it was due to Kaspersky enabled.

The hypothesis is that something wrong with cert for googleapis.com (which we have no influence on) and the CA data on Windows is somewhat stale (a user did not update for a long time).

How to fix

Try to use the latest CA list explicitly: https://stackoverflow.com/questions/31673587/error-unable-to-verify-the-first-certificate-in-nodejs

[nkrkv]

Closed by switching to arduino-cli since 0.25.0