CA certs bundle error in 1.11.4-alpine

[sebasortiz-dev]

trafficstars

After upgrading to 1.11.4-alpine I started to get CA Unknown errors from Amazon CA root.

20:06:22.377 [warn] ExAws: HTTP ERROR: {:tls_alert, {:unknown_ca, 'TLS client: In state certify at ssl_handshake.erl:1887 generated CLIENT ALERT: Fatal - Unknown CA\n'}} for URL: "https://email.us-east-1.amazonaws.com/" ATTEMPT: 1

[sebasortiz-dev]

Looks like is an elixir 1.11.4 issue.

[rhblind]

Yes, same issue here. Breaks all my builds 😅

** (ArgumentError) argument error
    :erlang.apply({nil, {:tls_alert, {:unknown_ca, 'TLS client: In state certify at ssl_handshake.erl:1887 generated CLIENT ALERT: Fatal - Unknown CA\n'}}}, :status_code, [])
    (relay_service 0.1.0) lib/relay_service/support/token_cache.ex:73: RelayService.Support.TokenCache.handle_info/2
    (stdlib 3.14) gen_server.erl:689: :gen_server.try_dispatch/4
    (stdlib 3.14) gen_server.erl:765: :gen_server.handle_msg/6
    (stdlib 3.14) proc_lib.erl:226: :proc_lib.init_p_do_apply/3
Last message: {#Reference<0.1846549007.4229431299.196914>, {:error, {:rot, {nil, {:tls_alert, {:unknown_ca, 'TLS client: In state certify at ssl_handshake.erl:1887 generated CLIENT ALERT: Fatal - Unknown CA\n'}}}}}}

[dolfinus]

It could be connected to certifi package issue: https://github.com/certifi/erlang-certifi/issues/46