Pub on Windows uses SecurityContext.defaultContext which doesn't work with self signed certificates

[dnfield]

This may be semi-related to #1826

When trying to install Flutter on a Windows machine that has a self-signed SSL certificate, I just get an endless loop like this:

C:\Users\dnfield>flutter doctor
Updating flutter tool...
Got TLS error trying to find package mockito at https://pub.dartlang.org.
Error: Unable to 'pub upgrade' flutter tool. Retrying in five seconds...

On macOS with the same self signed cert, this works fine because Dart looks to the machine's Cert store - but on Windows and Linux it uses the Mozilla list (https://api.dartlang.org/dev/2.0.0-dev.50.0/dart-io/SecurityContext/defaultContext.html). I haven't checked a Linux environment and don't currently have easy access to one, but I imagine Linux users with self signed CAs would face a similar issue.

Could we get an option/environment variable/setting to allow or specify self signed certificates that are acceptable (basically using a custom SecurityContext)? I'm not 100% sure if the issue should be on pub or be on dart-sdk, but my main issue right now is with pub. I think the best solution would be to have the Dart SDK recognize self signed trusted certs in the machine store, but I'm not clear on a timeline for that and it seems like it might be easier to get pub to recognize this short term.

https://github.com/dart-lang/pub/blob/master/lib/src/source/hosted.dart#L133

[nex3]

The default certificate store Dart uses is up to the Dart SDK, not to pub.

[natebosch]

The linked issue has this, but I'll comment here as well

I think you should be able to work around this with DART_VM_OPTIONS=--root-certs-file=some_file pub get. Please comment at dart-lang/sdk#25615 if that doesn't work for you.

[FlareDev0]

Hi Natebosch, can you please explain how to use DART_VM_OPTIONS=--root-certs-file=some_file pub get ....Im new to Flutter....

[natebosch]

replace pub get with flutter packages get and run from the command line:

DART_VM_OPTIONS=--root-certs-file=some_file flutter packages get

[MilindDivre]

and where do we have this pub get ? Sorry but could you please explain step by step, i am naive to flutter

[zoechi]

@MilindDivre pub get is the equivalent of flutter packages get outside Flutter (or what flutter packages get executes behind the scenes).
You can ignore it exists, just use flutter packages get