Paket.bootstrapper.exe unable to communicate with GitHub (5.138.5)

[kirasglimmer]

Description

GitHub shut down an old insecure encryption cypher, and paket.bootstrapper.exe is not able to talk to their servers. More info here:
https://githubengineering.com/crypto-removal-notice/

Repro steps

Please provide the steps required to reproduce the problem

1. Download latest paket.bootstrapper.exe

2. Try to run it. Observe error.

Checking Paket version (downloading latest stable)...
The request was aborted: Could not create SSL/TLS secure channel. (Github - cached)

Expected behavior

The bootstrapper downloads the latest version of paket.exe.

Actual behavior

Checking Paket version (downloading latest stable)...
The request was aborted: Could not create SSL/TLS secure channel. (Github - cached)

Known workarounds

None.

[ptrstpp950]

Workaround
Add registry keys to force NET framework to use strong encryption. For example PowerShell commands:

new-itemproperty -path "HKLM:\SOFTWARE\Microsoft\.NETFramework\v4.0.30319" -name "SchUseStrongCrypto" -Value 1 -PropertyType "DWord";
new-itemproperty -path "HKLM:\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\v4.0.30319" -name "SchUseStrongCrypto" -Value 1 -PropertyType "DWord"

[ppatino]

Any idea on expected resolution timeline? Workaround is easy enough locally but needs more work for CI servers.

[ptrstpp950]

As you can see pull request is in progress #3066
Still, it will need to changes in source after the owner of this repository release it (commit new bootstrapper). I'm just an unlucky user, who need workaround ASAP 😄

[BlythMeister]

Also, all source code branches would need an updated bootstrap if you add the bootstrapper into your repo...

[egracer]

You can also force the download from nuget using --force-nuget or by configuring paket.bootstrapper.exe.config as described in the bootstrapper documentation.

[samhanes]

If you're using magic mode, you can use the following paket.exe.config:

<?xml version="1.0" encoding="utf-8" ?>
<configuration>
  <appSettings>
    <add key="ForceNuget" value="True"/>
  </appSettings>
</configuration>

[csmager]

I've updated to the bootstrapper in the 5.141.0 release (with the fix from #3066), I now get a different error in 'magic mode':

The request was aborted: The connection was closed unexpectedly. (Github - cached (temporarily ignore updates))

In normal mode, I see this:

Checking Paket version (downloading latest stable)...
Hash file of version 5.141.0 not found in cache.
Starting download from https://github.com/fsprojects/Paket/releases/download/5.141.0/paket-sha256.txt
'Github - cached' download failed. If using Mono, you may need to import trusted certificates using the 'mozroots' tool as none are contained by default. Trying fallback download from 'Nuget - cached'.

[ptrstpp950]

No only paket.exe.config helps

[forki]

Any ideas what's still going wrong?

[csmager]

Updated VS this morning and now VS and Rider both claim I don't have .NET Framework 4.5 SDK, so Paket won't build anymore. Once I've shaved that yak I'll see if I can debug and get more info...

[BlythMeister]

the release is missing the sha256.txt file...don't know if that helps

[csmager]

Ah, yeah. Clicking the link in the error message I posted gives you a 404.

[forki]

uploaded in 5.142.0

[BlythMeister]

Seem good now for me.

and in magic mode