The underlying connection was closed: Could not establish trust relationship for the SSL/TLS secure channel.

When I run choco install git or choco install gsudo probably any pkg, I get the error

git not installed. An error occurred during installation: The underlying connection was closed: Could not establish trust relationship for the SSL/TLS secure channel.

The full debug log is below. Any suggestions are very much appreciated. Thanks!

Output Log

Full Log Output

~~~sh choco install git --debug --verbose Chocolatey v0.11.1 Chocolatey is running on Windows v 10.0.18363.0 Attempting to delete file "C:/ProgramData/chocolatey/choco.exe.old". Attempting to delete file "C:\ProgramData\chocolatey\choco.exe.old". Command line: "C:\ProgramData\chocolatey\choco.exe" install git --debug --verbose Received arguments: install git --debug --verbose RemovePendingPackagesTask is now ready and waiting for PreRunMessage. Sending message 'PreRunMessage' out if there are subscribers... [Pending] Removing all pending packages that should not be considered installed... Performing validation checks. Global Configuration Validation Checks: - Package Exit Code / Exit On Reboot = Checked System State Validation Checks: Reboot Requirement Checks: - Pending Computer Rename = Checked - Pending Component Based Servicing = Checked - Pending Windows Auto Update = Checked - Pending File Rename Operations = Checked - Pending Windows Package Installer = Checked - Pending Windows Package Installer SysWow64 = Checked The source 'https://community.chocolatey.org/api/v2/' evaluated to a 'normal' source type NOTE: Hiding sensitive configuration data! Please double and triple check to be sure no sensitive data is shown, especially if copying output to a gist for review. Configuration: CommandName='install'| CacheLocation='C:\Users\SBUDARAJ\AppData\Local\Temp\chocolatey'| ContainsLegacyPackageInstalls='True'| CommandExecutionTimeoutSeconds='2700'|WebRequestTimeoutSeconds='30'| Sources='https://community.chocolatey.org/api/v2/'|SourceType='normal'| Debug='True'|Verbose='True'|Trace='False'|Force='False'|Noop='False'| HelpRequested='False'|UnsuccessfulParsing='False'|RegularOutput='True'| QuietOutput='False'|PromptForConfirmation='True'|AcceptLicense='False'| AllowUnofficialBuild='False'|Input='git'|AllVersions='False'| SkipPackageInstallProvider='False'|PackageNames='git'| Prerelease='False'|ForceX86='False'|OverrideArguments='False'| NotSilent='False'|ApplyPackageParametersToDependencies='False'| ApplyInstallArgumentsToDependencies='False'|IgnoreDependencies='False'| AllowMultipleVersions='False'|AllowDowngrade='False'| ForceDependencies='False'|Information.PlatformType='Windows'| Information.PlatformVersion='10.0.18363.0'| Information.PlatformName='Windows 10'| Information.ChocolateyVersion='0.11.1.0'| Information.ChocolateyProductVersion='0.11.1'| Information.FullName='choco, Version=0.11.1.0, Culture=neutral, PublicKeyToken=79d02ea9cad655eb'| Information.Is64BitOperatingSystem='True'| Information.Is64BitProcess='True'|Information.IsInteractive='True'| Information.UserName='SBUDARAJ'|Information.UserDomainName='xxxxxxxx'| Information.IsUserAdministrator='True'| Information.IsUserSystemAccount='False'| Information.IsUserRemoteDesktop='False'| Information.IsUserRemote='True'| Information.IsProcessElevated='True'| Information.IsLicensedVersion='False'|Information.LicenseType='Foss'| Information.CurrentDirectory='C:\WINDOWS\system32'| Features.AutoUninstaller='True'|Features.ChecksumFiles='True'| Features.AllowEmptyChecksums='False'| Features.AllowEmptyChecksumsSecure='True'| Features.FailOnAutoUninstaller='False'| Features.FailOnStandardError='False'|Features.UsePowerShellHost='True'| Features.LogEnvironmentValues='False'|Features.LogWithoutColor='False'| Features.VirusCheck='False'| Features.FailOnInvalidOrMissingLicense='False'| Features.IgnoreInvalidOptionsSwitches='True'| Features.UsePackageExitCodes='True'| Features.UseEnhancedExitCodes='False'| Features.UseFipsCompliantChecksums='False'| Features.ShowNonElevatedWarnings='True'| Features.ShowDownloadProgress='True'| Features.StopOnFirstPackageFailure='False'| Features.UseRememberedArgumentsForUpgrades='False'| Features.IgnoreUnfoundPackagesOnUpgradeOutdated='False'| Features.SkipPackageUpgradesWhenNotInstalled='False'| Features.RemovePackageInformationOnUninstall='False'| Features.ExitOnRebootDetected='False'| Features.LogValidationResultsOnWarnings='True'| Features.UsePackageRepositoryOptimizations='True'| Features.ScriptsCheckLastExitCode='False'| ListCommand.LocalOnly='False'| ListCommand.IdOnly='False'|ListCommand.IncludeRegistryPrograms='False'| ListCommand.PageSize='25'|ListCommand.Exact='False'| ListCommand.ByIdOnly='False'|ListCommand.ByTagOnly='False'| ListCommand.IdStartsWith='False'|ListCommand.OrderByPopularity='False'| ListCommand.ApprovedOnly='False'| ListCommand.DownloadCacheAvailable='False'| ListCommand.NotBroken='False'| ListCommand.IncludeVersionOverrides='False'| UpgradeCommand.FailOnUnfound='False'| UpgradeCommand.FailOnNotInstalled='False'| UpgradeCommand.NotifyOnlyAvailableUpgrades='False'| UpgradeCommand.ExcludePrerelease='False'| NewCommand.AutomaticPackage='False'| NewCommand.UseOriginalTemplate='False'|SourceCommand.Command='unknown'| SourceCommand.Priority='0'|SourceCommand.BypassProxy='False'| SourceCommand.AllowSelfService='False'| SourceCommand.VisibleToAdminsOnly='False'| FeatureCommand.Command='unknown'|ConfigCommand.Command='unknown'| ApiKeyCommand.Remove='False'|PinCommand.Command='unknown'| OutdatedCommand.IgnorePinned='False'| ExportCommand.IncludeVersionNumbers='False'|Proxy.BypassOnLocal='True'| _ Chocolatey:ChocolateyInstallCommand - Normal Run Mode _ Installing the following packages: git By installing, you accept licenses for the packages. Using 'https://community.chocolatey.org/api/v2/'. - Supports prereleases? 'True'. - Is ServiceBased? 'True'. Package 'git' found on source 'https://community.chocolatey.org/api/v2/' [NuGet] Attempting to resolve dependency 'git.install (= 2.33.0.2)'. git not installed. An error occurred during installation: The underlying connection was closed: Could not establish trust relationship for the SSL/TLS secure channel. git package files install failed with exit code 1. Performing other installation steps. No package information as package is null. No package information to save as package is null. Sending message 'HandlePackageResultCompletedMessage' out if there are subscribers... The install of git was NOT successful. git not installed. An error occurred during installation: The underlying connection was closed: Could not establish trust relationship for the SSL/TLS secure channel. Chocolatey installed 0/1 packages. 1 packages failed. See the log for details (C:\ProgramData\chocolatey\logs\chocolatey.log). Failures - git (exited 1) - git not installed. An error occurred during installation: The underlying connection was closed: Could not establish trust relationship for the SSL/TLS secure channel. Sending message 'PostRunMessage' out if there are subscribers... Exiting with 1 ~~~

@sbudaraj-vcc thanks for raising this. There should be no need to set the SecurityProtocol directly, as Chocolatey will take care of this internally.

Can you confirm that the machine that you are running on has the correct date/time set?

Thanks for looking into this @gep13. Yes I can confirm that the time and date are correct.

What happens if you try choco install git.install?

It seems to throw the same error. I have a doubt if this is related to using it through organization network, I am not very knowledgeable in network related stuff.

Adding to that for complete record, I got similar errors to install choco. I downloaded the install script, 'had' to set the below commands and only then, I was able to install choco. But they dont seem to help install packages using choco

[System.Net.ServicePointManager]::SecurityProtocol.HasFlag([Net.SecurityProtocolType]::Tls12)
PS C:\Users\SBUDARAJ>  [System.Net.ServicePointManager]::ServerCertificateValidationCallback = {$true}

Same issue is present on Windows Server 2019 1809 for me when building a docker image with the same base os. With no changes to the base image a few weeks ago i could build images normally. Can confirm that on my personal PC Windows 10 21H1 i can install packages with choco normally.

@sbudaraj-vcc can you provide a debug log to this issue? I'm wondering if you have a proxy in play here, and your system isn't trusting a certificate properly through it.

Thanks for the reply @steviecoaster. The debug log for choco install git is already included in the very first comment under "Output Log" as a collapsible as required in the guidelines. I can add another one for choco install git.install if you think its different.

Yes the laptop belongs to my company and runs windows 10 enterprise. Please let me know if I can provide any specifics on it. Thanks

Edit: I know people using the same network and dont have any problem. Not sure what is missing.

Oh you know what. I'm sorry. Debug doesn't give us the .Net stuff I'm looking for.

Can you run choco install git --debug --trace --log-file="'C:\temp\GH2350.log'" -y for me, and provide the output? I want to see the certificate chain Chocolatey is attempting to traverse.

@steviecoaster I can provide the log for my issue, which i believe is extremely similar to what @sbudaraj-vcc has. GH2350.log GH2350 with debug.log

Sorry for the slow response @steviecoaster, heres the debug log. And thanks @FrdAlex, probably they are quite the same.

Debug Log Output

~~~sh 2021-09-15 08:11:22,313 2888 [INFO ] - Chocolatey v0.11.1 2021-09-15 08:11:22,347 2888 [DEBUG] - Chocolatey is running on Windows v 10.0.18363.0 2021-09-15 08:11:22,358 2888 [DEBUG] - Attempting to delete file "C:/ProgramData/chocolatey/choco.exe.old". 2021-09-15 08:11:22,359 2888 [DEBUG] - Attempting to delete file "C:\ProgramData\chocolatey\choco.exe.old". 2021-09-15 08:11:22,372 2888 [DEBUG] - Command line: "C:\ProgramData\chocolatey\choco.exe" install git --debug --trace --log-file='C:\temp\GH2350.log' -y 2021-09-15 08:11:22,375 2888 [DEBUG] - Received arguments: install git --debug --trace --log-file='C:\temp\GH2350.log' -y 2021-09-15 08:11:22,413 2888 [DEBUG] - RemovePendingPackagesTask is now ready and waiting for PreRunMessage. 2021-09-15 08:11:22,421 2888 [DEBUG] - Sending message 'PreRunMessage' out if there are subscribers... 2021-09-15 08:11:22,428 2888 [DEBUG] - [Pending] Removing all pending packages that should not be considered installed... 2021-09-15 08:11:22,462 2888 [DEBUG] - Performing validation checks. 2021-09-15 08:11:22,468 2888 [DEBUG] - Global Configuration Validation Checks: 2021-09-15 08:11:22,470 2888 [DEBUG] - - Package Exit Code / Exit On Reboot = Checked 2021-09-15 08:11:22,472 2888 [DEBUG] - System State Validation Checks: 2021-09-15 08:11:22,475 2888 [DEBUG] - Reboot Requirement Checks: 2021-09-15 08:11:22,477 2888 [DEBUG] - - Pending Computer Rename = Checked 2021-09-15 08:11:22,482 2888 [DEBUG] - - Pending Component Based Servicing = Checked 2021-09-15 08:11:22,484 2888 [DEBUG] - - Pending Windows Auto Update = Checked 2021-09-15 08:11:22,486 2888 [DEBUG] - - Pending File Rename Operations = Checked 2021-09-15 08:11:22,487 2888 [DEBUG] - - Pending Windows Package Installer = Checked 2021-09-15 08:11:22,489 2888 [DEBUG] - - Pending Windows Package Installer SysWow64 = Checked 2021-09-15 08:11:22,494 2888 [INFO ] - 2 validations performed. 2 success(es), 0 warning(s), and 0 error(s). 2021-09-15 08:11:22,496 2888 [DEBUG] - The source 'https://community.chocolatey.org/api/v2/' evaluated to a 'normal' source type 2021-09-15 08:11:22,499 2888 [DEBUG] - NOTE: Hiding sensitive configuration data! Please double and triple check to be sure no sensitive data is shown, especially if copying output to a gist for review. 2021-09-15 08:11:22,508 2888 [DEBUG] - Configuration: CommandName='install'| CacheLocation='C:\Users\SBUDARAJ\AppData\Local\Temp\chocolatey'| ContainsLegacyPackageInstalls='True'| CommandExecutionTimeoutSeconds='2700'|WebRequestTimeoutSeconds='30'| Sources='https://community.chocolatey.org/api/v2/'|SourceType='normal'| Debug='True'|Verbose='False'|Trace='True'|Force='False'|Noop='False'| HelpRequested='False'|UnsuccessfulParsing='False'|RegularOutput='True'| QuietOutput='False'|PromptForConfirmation='False'|AcceptLicense='True'| AllowUnofficialBuild='False'| AdditionalLogFileLocation='C:\temp\GH2350.log'|Input='git'| AllVersions='False'|SkipPackageInstallProvider='False'| PackageNames='git'|Prerelease='False'|ForceX86='False'| OverrideArguments='False'|NotSilent='False'| ApplyPackageParametersToDependencies='False'| ApplyInstallArgumentsToDependencies='False'|IgnoreDependencies='False'| AllowMultipleVersions='False'|AllowDowngrade='False'| ForceDependencies='False'|Information.PlatformType='Windows'| Information.PlatformVersion='10.0.18363.0'| Information.PlatformName='Windows 10'| Information.ChocolateyVersion='0.11.1.0'| Information.ChocolateyProductVersion='0.11.1'| Information.FullName='choco, Version=0.11.1.0, Culture=neutral, PublicKeyToken=79d02ea9cad655eb'| Information.Is64BitOperatingSystem='True'| Information.Is64BitProcess='True'|Information.IsInteractive='True'| Information.UserName='SBUDARAJ'|Information.UserDomainName='VCCNET'| Information.IsUserAdministrator='True'| Information.IsUserSystemAccount='False'| Information.IsUserRemoteDesktop='False'| Information.IsUserRemote='True'| Information.IsProcessElevated='True'| Information.IsLicensedVersion='False'|Information.LicenseType='Foss'| Information.CurrentDirectory='C:\Users\SBUDARAJ'| Features.AutoUninstaller='True'|Features.ChecksumFiles='True'| Features.AllowEmptyChecksums='False'| Features.AllowEmptyChecksumsSecure='True'| Features.FailOnAutoUninstaller='False'| Features.FailOnStandardError='False'|Features.UsePowerShellHost='True'| Features.LogEnvironmentValues='False'|Features.LogWithoutColor='False'| Features.VirusCheck='False'| Features.FailOnInvalidOrMissingLicense='False'| Features.IgnoreInvalidOptionsSwitches='True'| Features.UsePackageExitCodes='True'| Features.UseEnhancedExitCodes='False'| Features.UseFipsCompliantChecksums='False'| Features.ShowNonElevatedWarnings='True'| Features.ShowDownloadProgress='True'| Features.StopOnFirstPackageFailure='False'| Features.UseRememberedArgumentsForUpgrades='False'| Features.IgnoreUnfoundPackagesOnUpgradeOutdated='False'| Features.SkipPackageUpgradesWhenNotInstalled='False'| Features.RemovePackageInformationOnUninstall='False'| Features.ExitOnRebootDetected='False'| Features.LogValidationResultsOnWarnings='True'| Features.UsePackageRepositoryOptimizations='True'| Features.ScriptsCheckLastExitCode='False'| ListCommand.LocalOnly='False'| ListCommand.IdOnly='False'|ListCommand.IncludeRegistryPrograms='False'| ListCommand.PageSize='25'|ListCommand.Exact='False'| ListCommand.ByIdOnly='False'|ListCommand.ByTagOnly='False'| ListCommand.IdStartsWith='False'|ListCommand.OrderByPopularity='False'| ListCommand.ApprovedOnly='False'| ListCommand.DownloadCacheAvailable='False'| ListCommand.NotBroken='False'| ListCommand.IncludeVersionOverrides='False'| UpgradeCommand.FailOnUnfound='False'| UpgradeCommand.FailOnNotInstalled='False'| UpgradeCommand.NotifyOnlyAvailableUpgrades='False'| UpgradeCommand.ExcludePrerelease='False'| NewCommand.AutomaticPackage='False'| NewCommand.UseOriginalTemplate='False'|SourceCommand.Command='unknown'| SourceCommand.Priority='0'|SourceCommand.BypassProxy='False'| SourceCommand.AllowSelfService='False'| SourceCommand.VisibleToAdminsOnly='False'| FeatureCommand.Command='unknown'|ConfigCommand.Command='unknown'| ApiKeyCommand.Remove='False'|PinCommand.Command='unknown'| OutdatedCommand.IgnorePinned='False'| ExportCommand.IncludeVersionNumbers='False'|Proxy.BypassOnLocal='True'| 2021-09-15 08:11:22,515 2888 [DEBUG] - _ Chocolatey:ChocolateyInstallCommand - Normal Run Mode _ 2021-09-15 08:11:22,520 2888 [INFO ] - Installing the following packages: 2021-09-15 08:11:22,522 2888 [INFO ] - git 2021-09-15 08:11:22,524 2888 [INFO ] - By installing, you accept licenses for the packages. 2021-09-15 08:11:22,594 2888 [DEBUG] - Using 'https://community.chocolatey.org/api/v2/'. 2021-09-15 08:11:22,862 2888 [DEBUG] - - Supports prereleases? 'True'. 2021-09-15 08:11:22,864 2888 [DEBUG] - - Is ServiceBased? 'True'. 2021-09-15 08:11:22,951 2888 [DEBUG] - Package 'git' found on source 'https://community.chocolatey.org/api/v2/' 2021-09-15 08:11:22,996 2888 [INFO ] - [NuGet] Attempting to resolve dependency 'git.install (= 2.33.0.2)'. 2021-09-15 08:11:24,042 2888 [ERROR] - git not installed. An error occurred during installation: The underlying connection was closed: Could not establish trust relationship for the SSL/TLS secure channel. 2021-09-15 08:11:24,050 2888 [INFO ] - git package files install failed with exit code 1. Performing other installation steps. 2021-09-15 08:11:24,054 2888 [DEBUG] - No package information as package is null. 2021-09-15 08:11:24,070 2888 [DEBUG] - No package information to save as package is null. 2021-09-15 08:11:24,074 2888 [DEBUG] - Sending message 'HandlePackageResultCompletedMessage' out if there are subscribers... 2021-09-15 08:11:24,075 2888 [ERROR] - The install of git was NOT successful. 2021-09-15 08:11:24,079 2888 [ERROR] - git not installed. An error occurred during installation: The underlying connection was closed: Could not establish trust relationship for the SSL/TLS secure channel. 2021-09-15 08:11:24,088 2888 [WARN ] - Chocolatey installed 0/1 packages. 1 packages failed. See the log for details (C:\ProgramData\chocolatey\logs\chocolatey.log). 2021-09-15 08:11:24,091 2888 [INFO ] - 2021-09-15 08:11:24,093 2888 [ERROR] - Failures 2021-09-15 08:11:24,095 2888 [ERROR] - - git (exited 1) - git not installed. An error occurred during installation: The underlying connection was closed: Could not establish trust relationship for the SSL/TLS secure channel. 2021-09-15 08:11:24,098 2888 [DEBUG] - Sending message 'PostRunMessage' out if there are subscribers... 2021-09-15 08:11:24,102 2888 [DEBUG] - Exiting with 1 2021-09-15 08:11:40,499 9432 [INFO ] - Chocolatey v0.11.1 2021-09-15 08:11:40,528 9432 [DEBUG] - Chocolatey is running on Windows v 10.0.18363.0 2021-09-15 08:11:40,537 9432 [DEBUG] - Attempting to delete file "C:/ProgramData/chocolatey/choco.exe.old". 2021-09-15 08:11:40,538 9432 [DEBUG] - Attempting to delete file "C:\ProgramData\chocolatey\choco.exe.old". 2021-09-15 08:11:40,544 9432 [DEBUG] - Command line: "C:\ProgramData\chocolatey\choco.exe" install git --debug --trace --log-file='C:\temp\GH2350.log' -y 2021-09-15 08:11:40,546 9432 [DEBUG] - Received arguments: install git --debug --trace --log-file='C:\temp\GH2350.log' -y 2021-09-15 08:11:40,584 9432 [DEBUG] - RemovePendingPackagesTask is now ready and waiting for PreRunMessage. 2021-09-15 08:11:40,589 9432 [DEBUG] - Sending message 'PreRunMessage' out if there are subscribers... 2021-09-15 08:11:40,595 9432 [DEBUG] - [Pending] Removing all pending packages that should not be considered installed... 2021-09-15 08:11:40,631 9432 [DEBUG] - Performing validation checks. 2021-09-15 08:11:40,636 9432 [DEBUG] - Global Configuration Validation Checks: 2021-09-15 08:11:40,639 9432 [DEBUG] - - Package Exit Code / Exit On Reboot = Checked 2021-09-15 08:11:40,641 9432 [DEBUG] - System State Validation Checks: 2021-09-15 08:11:40,644 9432 [DEBUG] - Reboot Requirement Checks: 2021-09-15 08:11:40,648 9432 [DEBUG] - - Pending Computer Rename = Checked 2021-09-15 08:11:40,652 9432 [DEBUG] - - Pending Component Based Servicing = Checked 2021-09-15 08:11:40,654 9432 [DEBUG] - - Pending Windows Auto Update = Checked 2021-09-15 08:11:40,656 9432 [DEBUG] - - Pending File Rename Operations = Checked 2021-09-15 08:11:40,658 9432 [DEBUG] - - Pending Windows Package Installer = Checked 2021-09-15 08:11:40,660 9432 [DEBUG] - - Pending Windows Package Installer SysWow64 = Checked 2021-09-15 08:11:40,664 9432 [INFO ] - 2 validations performed. 2 success(es), 0 warning(s), and 0 error(s). 2021-09-15 08:11:40,666 9432 [DEBUG] - The source 'https://community.chocolatey.org/api/v2/' evaluated to a 'normal' source type 2021-09-15 08:11:40,668 9432 [DEBUG] - NOTE: Hiding sensitive configuration data! Please double and triple check to be sure no sensitive data is shown, especially if copying output to a gist for review. 2021-09-15 08:11:40,676 9432 [DEBUG] - Configuration: CommandName='install'| CacheLocation='C:\Users\SBUDARAJ\AppData\Local\Temp\chocolatey'| ContainsLegacyPackageInstalls='True'| CommandExecutionTimeoutSeconds='2700'|WebRequestTimeoutSeconds='30'| Sources='https://community.chocolatey.org/api/v2/'|SourceType='normal'| Debug='True'|Verbose='False'|Trace='True'|Force='False'|Noop='False'| HelpRequested='False'|UnsuccessfulParsing='False'|RegularOutput='True'| QuietOutput='False'|PromptForConfirmation='False'|AcceptLicense='True'| AllowUnofficialBuild='False'| AdditionalLogFileLocation='C:\temp\GH2350.log'|Input='git'| AllVersions='False'|SkipPackageInstallProvider='False'| PackageNames='git'|Prerelease='False'|ForceX86='False'| OverrideArguments='False'|NotSilent='False'| ApplyPackageParametersToDependencies='False'| ApplyInstallArgumentsToDependencies='False'|IgnoreDependencies='False'| AllowMultipleVersions='False'|AllowDowngrade='False'| ForceDependencies='False'|Information.PlatformType='Windows'| Information.PlatformVersion='10.0.18363.0'| Information.PlatformName='Windows 10'| Information.ChocolateyVersion='0.11.1.0'| Information.ChocolateyProductVersion='0.11.1'| Information.FullName='choco, Version=0.11.1.0, Culture=neutral, PublicKeyToken=79d02ea9cad655eb'| Information.Is64BitOperatingSystem='True'| Information.Is64BitProcess='True'|Information.IsInteractive='True'| Information.UserName='SBUDARAJ'|Information.UserDomainName='VCCNET'| Information.IsUserAdministrator='True'| Information.IsUserSystemAccount='False'| Information.IsUserRemoteDesktop='False'| Information.IsUserRemote='True'| Information.IsProcessElevated='True'| Information.IsLicensedVersion='False'|Information.LicenseType='Foss'| Information.CurrentDirectory='C:\Users\SBUDARAJ'| Features.AutoUninstaller='True'|Features.ChecksumFiles='True'| Features.AllowEmptyChecksums='False'| Features.AllowEmptyChecksumsSecure='True'| Features.FailOnAutoUninstaller='False'| Features.FailOnStandardError='False'|Features.UsePowerShellHost='True'| Features.LogEnvironmentValues='False'|Features.LogWithoutColor='False'| Features.VirusCheck='False'| Features.FailOnInvalidOrMissingLicense='False'| Features.IgnoreInvalidOptionsSwitches='True'| Features.UsePackageExitCodes='True'| Features.UseEnhancedExitCodes='False'| Features.UseFipsCompliantChecksums='False'| Features.ShowNonElevatedWarnings='True'| Features.ShowDownloadProgress='True'| Features.StopOnFirstPackageFailure='False'| Features.UseRememberedArgumentsForUpgrades='False'| Features.IgnoreUnfoundPackagesOnUpgradeOutdated='False'| Features.SkipPackageUpgradesWhenNotInstalled='False'| Features.RemovePackageInformationOnUninstall='False'| Features.ExitOnRebootDetected='False'| Features.LogValidationResultsOnWarnings='True'| Features.UsePackageRepositoryOptimizations='True'| Features.ScriptsCheckLastExitCode='False'| ListCommand.LocalOnly='False'| ListCommand.IdOnly='False'|ListCommand.IncludeRegistryPrograms='False'| ListCommand.PageSize='25'|ListCommand.Exact='False'| ListCommand.ByIdOnly='False'|ListCommand.ByTagOnly='False'| ListCommand.IdStartsWith='False'|ListCommand.OrderByPopularity='False'| ListCommand.ApprovedOnly='False'| ListCommand.DownloadCacheAvailable='False'| ListCommand.NotBroken='False'| ListCommand.IncludeVersionOverrides='False'| UpgradeCommand.FailOnUnfound='False'| UpgradeCommand.FailOnNotInstalled='False'| UpgradeCommand.NotifyOnlyAvailableUpgrades='False'| UpgradeCommand.ExcludePrerelease='False'| NewCommand.AutomaticPackage='False'| NewCommand.UseOriginalTemplate='False'|SourceCommand.Command='unknown'| SourceCommand.Priority='0'|SourceCommand.BypassProxy='False'| SourceCommand.AllowSelfService='False'| SourceCommand.VisibleToAdminsOnly='False'| FeatureCommand.Command='unknown'|ConfigCommand.Command='unknown'| ApiKeyCommand.Remove='False'|PinCommand.Command='unknown'| OutdatedCommand.IgnorePinned='False'| ExportCommand.IncludeVersionNumbers='False'|Proxy.BypassOnLocal='True'| 2021-09-15 08:11:40,678 9432 [DEBUG] - _ Chocolatey:ChocolateyInstallCommand - Normal Run Mode _ 2021-09-15 08:11:40,682 9432 [INFO ] - Installing the following packages: 2021-09-15 08:11:40,684 9432 [INFO ] - git 2021-09-15 08:11:40,686 9432 [INFO ] - By installing, you accept licenses for the packages. 2021-09-15 08:11:40,735 9432 [DEBUG] - Using 'https://community.chocolatey.org/api/v2/'. 2021-09-15 08:11:40,904 9432 [DEBUG] - - Supports prereleases? 'True'. 2021-09-15 08:11:40,906 9432 [DEBUG] - - Is ServiceBased? 'True'. 2021-09-15 08:11:41,009 9432 [DEBUG] - Package 'git' found on source 'https://community.chocolatey.org/api/v2/' 2021-09-15 08:11:41,041 9432 [INFO ] - [NuGet] Attempting to resolve dependency 'git.install (= 2.33.0.2)'. 2021-09-15 08:11:42,445 9432 [ERROR] - git not installed. An error occurred during installation: The underlying connection was closed: Could not establish trust relationship for the SSL/TLS secure channel. 2021-09-15 08:11:42,450 9432 [INFO ] - git package files install failed with exit code 1. Performing other installation steps. 2021-09-15 08:11:42,453 9432 [DEBUG] - No package information as package is null. 2021-09-15 08:11:42,462 9432 [DEBUG] - No package information to save as package is null. 2021-09-15 08:11:42,464 9432 [DEBUG] - Sending message 'HandlePackageResultCompletedMessage' out if there are subscribers... 2021-09-15 08:11:42,465 9432 [ERROR] - The install of git was NOT successful. 2021-09-15 08:11:42,467 9432 [ERROR] - git not installed. An error occurred during installation: The underlying connection was closed: Could not establish trust relationship for the SSL/TLS secure channel. 2021-09-15 08:11:42,475 9432 [WARN ] - Chocolatey installed 0/1 packages. 1 packages failed. See the log for details (C:\ProgramData\chocolatey\logs\chocolatey.log). 2021-09-15 08:11:42,475 9432 [INFO ] - 2021-09-15 08:11:42,477 9432 [ERROR] - Failures 2021-09-15 08:11:42,479 9432 [ERROR] - - git (exited 1) - git not installed. An error occurred during installation: The underlying connection was closed: Could not establish trust relationship for the SSL/TLS secure channel. 2021-09-15 08:11:42,481 9432 [DEBUG] - Sending message 'PostRunMessage' out if there are subscribers... 2021-09-15 08:11:42,484 9432 [DEBUG] - Exiting with 1 ~~~

@FrdAlex Yup. I suspect that this certificate is causing issues for you:

[Subject]
  CN=packages.chocolatey.org, O="Cisco Systems, Inc.", L=San Francisco, S=California, C=US
  Simple Name: packages.chocolatey.org
  DNS Name: packages.chocolatey.org

[Issuer]
  CN=Cisco Umbrella Secondary SubCA fra-SG, O=Cisco
  Simple Name: Cisco Umbrella Secondary SubCA fra-SG
  DNS Name: Cisco Umbrella Secondary SubCA fra-SG

[Serial Number]
  112DE97B

[Not Before]
  9/13/2021 5:40:54 AM

[Not After]
  9/18/2021 5:40:54 AM

[Thumbprint]
  A1BD770F2FC78742C94605AB4B2851A4382A1D50

[Signature Algorithm]
  sha256RSA(1.2.840.113549.1.1.11)

[Public Key]
  Algorithm: RSA
  Length: 2048
  Key Blob: 30 82 01 0a 02 82 01 01 00 bc 5d 00 13 61 35 de 8b be b1 f9 c4 70 2e 44 66 63 90 8e 9a ec 9f 5c 1b 86 ee 5a d0 9b 20 3b 45 3a d0 e0 e1 1a 91 81 1d d4 79 03 a2 fa 18 f2 ec 30 b1 e8 a3 f3 51 cf f0 d7 7b ce 3f 51 a4 9b 23 7f d7 5d b4 e6 0a 2e 17 a4 e6 1b 14 96 c0 89 39 cd 4d 78 5d 1f 7e e3 55 e2 a9 87 ee 24 a6 e9 16 1e ad af 08 fb dc db 52 c6 1a 95 a3 ca e1 c9....
System.Net Information: 0 : [1792] SecureChannel#57337714 - Remote certificate has errors:
System.Net Information: 0 : [1792] SecureChannel#57337714 -     A certificate chain processed, but terminated in a root certificate which is not trusted by the trust provider.

@sbudaraj-vcc it looks like your log output doesn't include the trace information. I'm wondering if the trace stuff only logs to console, not log files. Hmmm.

Can we attempt it this way: choco install git --debug --trace -y > "C:\temp\GH2350.log", and pass that log file here to the issue? You'll not see any output from chocolatey doing it this way. That's expected, it is streaming everything into the log file.

Ah my bad, I read the output and didnt notice that its different in the file. Here is the full log, please let me know I can provide anything else. Thanks!

Edit, @steviecoaster I manually installed and added Go Daddy certificate as mentioned here - https://docs.chocolatey.org/en-us/guides/usage/proxy-settings-for-chocolatey#troubleshooting-installation Not sure if I did it right though.

Debug Log Output

~~~sh Chocolatey v0.11.1 Chocolatey is running on Windows v 10.0.18363.0 Command line: "C:\ProgramData\chocolatey\choco.exe" install git --debug --trace -y Received arguments: install git --debug --trace -y Performing validation checks. Global Configuration Validation Checks: - Package Exit Code / Exit On Reboot = Checked System State Validation Checks: Reboot Requirement Checks: - Pending Computer Rename = Checked Operating System Version Number: 10.0.18363.0 - Pending Component Based Servicing = Checked - Pending Windows Auto Update = Checked - Pending File Rename Operations = Ignored - Pending Windows Package Installer = Checked - Pending Windows Package Installer SysWow64 = Checked The source 'https://community.chocolatey.org/api/v2/' evaluated to a 'normal' source type NOTE: Hiding sensitive configuration data! Please double and triple check to be sure no sensitive data is shown, especially if copying output to a gist for review. Configuration: CommandName='install'| CacheLocation='C:\Users\SBUDARAJ\AppData\Local\Temp\chocolatey'| ContainsLegacyPackageInstalls='True'| CommandExecutionTimeoutSeconds='2700'|WebRequestTimeoutSeconds='30'| Sources='https://community.chocolatey.org/api/v2/'|SourceType='normal'| Debug='True'|Verbose='False'|Trace='True'|Force='False'|Noop='False'| HelpRequested='False'|UnsuccessfulParsing='False'|RegularOutput='True'| QuietOutput='False'|PromptForConfirmation='False'|AcceptLicense='True'| AllowUnofficialBuild='False'|Input='git'|AllVersions='False'| SkipPackageInstallProvider='False'|PackageNames='git'| Prerelease='False'|ForceX86='False'|OverrideArguments='False'| NotSilent='False'|ApplyPackageParametersToDependencies='False'| ApplyInstallArgumentsToDependencies='False'|IgnoreDependencies='False'| AllowMultipleVersions='False'|AllowDowngrade='False'| ForceDependencies='False'|Information.PlatformType='Windows'| Information.PlatformVersion='10.0.18363.0'| Information.PlatformName='Windows 10'| Information.ChocolateyVersion='0.11.1.0'| Information.ChocolateyProductVersion='0.11.1'| Information.FullName='choco, Version=0.11.1.0, Culture=neutral, PublicKeyToken=79d02ea9cad655eb'| Information.Is64BitOperatingSystem='True'| Information.Is64BitProcess='True'|Information.IsInteractive='True'| Information.UserName='SBUDARAJ'|Information.UserDomainName='VCCNET'| Information.IsUserAdministrator='True'| Information.IsUserSystemAccount='False'| Information.IsUserRemoteDesktop='False'| Information.IsUserRemote='True'| Information.IsProcessElevated='True'| Information.IsLicensedVersion='False'|Information.LicenseType='Foss'| Information.CurrentDirectory='C:\Users\SBUDARAJ'| Features.AutoUninstaller='True'|Features.ChecksumFiles='True'| Features.AllowEmptyChecksums='False'| Features.AllowEmptyChecksumsSecure='True'| Features.FailOnAutoUninstaller='False'| Features.FailOnStandardError='False'|Features.UsePowerShellHost='True'| Features.LogEnvironmentValues='False'|Features.LogWithoutColor='False'| Features.VirusCheck='False'| Features.FailOnInvalidOrMissingLicense='False'| Features.IgnoreInvalidOptionsSwitches='True'| Features.UsePackageExitCodes='True'| Features.UseEnhancedExitCodes='False'| Features.UseFipsCompliantChecksums='False'| Features.ShowNonElevatedWarnings='True'| Features.ShowDownloadProgress='True'| Features.StopOnFirstPackageFailure='False'| Features.UseRememberedArgumentsForUpgrades='False'| Features.IgnoreUnfoundPackagesOnUpgradeOutdated='False'| Features.SkipPackageUpgradesWhenNotInstalled='False'| Features.RemovePackageInformationOnUninstall='False'| Features.ExitOnRebootDetected='False'| Features.LogValidationResultsOnWarnings='True'| Features.UsePackageRepositoryOptimizations='True'| Features.ScriptsCheckLastExitCode='False'| ListCommand.LocalOnly='False'| ListCommand.IdOnly='False'|ListCommand.IncludeRegistryPrograms='False'| ListCommand.PageSize='25'|ListCommand.Exact='False'| ListCommand.ByIdOnly='False'|ListCommand.ByTagOnly='False'| ListCommand.IdStartsWith='False'|ListCommand.OrderByPopularity='False'| ListCommand.ApprovedOnly='False'| ListCommand.DownloadCacheAvailable='False'| ListCommand.NotBroken='False'| ListCommand.IncludeVersionOverrides='False'| UpgradeCommand.FailOnUnfound='False'| UpgradeCommand.FailOnNotInstalled='False'| UpgradeCommand.NotifyOnlyAvailableUpgrades='False'| UpgradeCommand.ExcludePrerelease='False'| NewCommand.AutomaticPackage='False'| NewCommand.UseOriginalTemplate='False'|SourceCommand.Command='unknown'| SourceCommand.Priority='0'|SourceCommand.BypassProxy='False'| SourceCommand.AllowSelfService='False'| SourceCommand.VisibleToAdminsOnly='False'| FeatureCommand.Command='unknown'|ConfigCommand.Command='unknown'| ApiKeyCommand.Remove='False'|PinCommand.Command='unknown'| OutdatedCommand.IgnorePinned='False'| ExportCommand.IncludeVersionNumbers='False'|Proxy.BypassOnLocal='True'| _ Chocolatey:ChocolateyInstallCommand - Normal Run Mode _ Installing the following packages: git By installing, you accept licenses for the packages. Using 'https://community.chocolatey.org/api/v2/'. System.Net Information: 0 : [20284] Associating HttpWebRequest#58849189 with ServicePoint#59880657 System.Net Information: 0 : [20284] Associating Connection#2055005 with HttpWebRequest#58849189 System.Net.Sockets Information: 0 : [20284] Socket#18495050 - Created connection from 192.168.0.103:54620 to 104.20.73.28:443. System.Net Information: 0 : [20284] Connection#2055005 - Created connection from 192.168.0.103:54620 to 104.20.73.28:443. System.Net Information: 0 : [20284] TlsStream#21704116::.ctor(host=community.chocolatey.org, #certs=0, checkCertificateRevocationList=False, sslProtocols=Default, Tls11, Tls12) System.Net Information: 0 : [20284] Associating HttpWebRequest#58849189 with ConnectStream#61119323 System.Net Information: 0 : [20284] HttpWebRequest#58849189 - Request: GET /api/v2/ HTTP/1.0 System.Net Information: 0 : [20284] ConnectStream#61119323 - Sending headers { User-Agent: NuGet/0.11.1.0 (Microsoft Windows NT 10.0.18363.0) Host: community.chocolatey.org }. System.Net Information: 0 : [20284] SecureChannel#13202999::.ctor(hostname=community.chocolatey.org, #clientCertificates=0, encryptionPolicy=RequireEncryption) System.Net Information: 0 : [20284] Enumerating security packages: System.Net Information: 0 : [20284] Negotiate System.Net Information: 0 : [20284] NegoExtender System.Net Information: 0 : [20284] Kerberos System.Net Information: 0 : [20284] NTLM System.Net Information: 0 : [20284] TSSSP System.Net Information: 0 : [20284] pku2u System.Net Information: 0 : [20284] CloudAP System.Net Information: 0 : [20284] WDigest System.Net Information: 0 : [20284] Schannel System.Net Information: 0 : [20284] Microsoft Unified Security Protocol Provider System.Net Information: 0 : [20284] Default TLS SSP System.Net Information: 0 : [20284] CREDSSP System.Net Information: 0 : [20284] SecureChannel#13202999 - Left with 0 client certificates to choose from. System.Net Information: 0 : [20284] SecureChannel#13202999::.AcquireClientCredentials, new SecureCredential() (flags=(ValidateManual, NoDefaultCred, SendAuxRecord, UseStrongCrypto), m_ProtocolFlags=(Ssl3Client, Tls10Client, Tls11Client, Tls12Client), m_EncryptionPolicy=RequireEncryption) System.Net Information: 0 : [20284] AcquireCredentialsHandle(package = Microsoft Unified Security Protocol Provider, intent = Outbound, scc = System.Net.SecureCredential) System.Net Information: 0 : [20284] InitializeSecurityContext(credential = System.Net.SafeFreeCredential_SECURITY, context = (null), targetName = community.chocolatey.org, inFlags = ReplayDetect, SequenceDetect, Confidentiality, AllocateMemory, InitManualCredValidation) System.Net Information: 0 : [20284] InitializeSecurityContext(In-Buffer length=0, Out-Buffer length=180, returned code=ContinueNeeded). System.Net Information: 0 : [20284] InitializeSecurityContext(credential = System.Net.SafeFreeCredential_SECURITY, context = 1b511e50:26e474da7c0, targetName = community.chocolatey.org, inFlags = ReplayDetect, SequenceDetect, Confidentiality, AllocateMemory, InitManualCredValidation) System.Net Information: 0 : [20284] InitializeSecurityContext(In-Buffers count=2, Out-Buffer length=0, returned code=ContinueNeeded). System.Net Information: 0 : [20284] InitializeSecurityContext(credential = System.Net.SafeFreeCredential_SECURITY, context = 1b511e50:26e474da7c0, targetName = community.chocolatey.org, inFlags = ReplayDetect, SequenceDetect, Confidentiality, AllocateMemory, InitManualCredValidation) System.Net Information: 0 : [20284] InitializeSecurityContext(In-Buffers count=2, Out-Buffer length=0, returned code=ContinueNeeded). System.Net Information: 0 : [20284] InitializeSecurityContext(credential = System.Net.SafeFreeCredential_SECURITY, context = 1b511e50:26e474da7c0, targetName = community.chocolatey.org, inFlags = ReplayDetect, SequenceDetect, Confidentiality, AllocateMemory, InitManualCredValidation) System.Net Information: 0 : [20284] InitializeSecurityContext(In-Buffers count=2, Out-Buffer length=0, returned code=ContinueNeeded). System.Net Information: 0 : [20284] InitializeSecurityContext(credential = System.Net.SafeFreeCredential_SECURITY, context = 1b511e50:26e474da7c0, targetName = community.chocolatey.org, inFlags = ReplayDetect, SequenceDetect, Confidentiality, AllocateMemory, InitManualCredValidation) System.Net Information: 0 : [20284] InitializeSecurityContext(In-Buffers count=2, Out-Buffer length=93, returned code=ContinueNeeded). System.Net Information: 0 : [20284] InitializeSecurityContext(credential = System.Net.SafeFreeCredential_SECURITY, context = 1b511e50:26e474da7c0, targetName = community.chocolatey.org, inFlags = ReplayDetect, SequenceDetect, Confidentiality, AllocateMemory, InitManualCredValidation) System.Net Information: 0 : [20284] InitializeSecurityContext(In-Buffers count=2, Out-Buffer length=0, returned code=ContinueNeeded). System.Net Information: 0 : [20284] InitializeSecurityContext(credential = System.Net.SafeFreeCredential_SECURITY, context = 1b511e50:26e474da7c0, targetName = community.chocolatey.org, inFlags = ReplayDetect, SequenceDetect, Confidentiality, AllocateMemory, InitManualCredValidation) System.Net Information: 0 : [20284] InitializeSecurityContext(In-Buffers count=2, Out-Buffer length=0, returned code=ContinueNeeded). System.Net Information: 0 : [20284] InitializeSecurityContext(credential = System.Net.SafeFreeCredential_SECURITY, context = 1b511e50:26e474da7c0, targetName = community.chocolatey.org, inFlags = ReplayDetect, SequenceDetect, Confidentiality, AllocateMemory, InitManualCredValidation) System.Net Information: 0 : [20284] InitializeSecurityContext(In-Buffers count=2, Out-Buffer length=0, returned code=OK). System.Net Information: 0 : [20284] Remote certificate: [Version] V3 [Subject] CN=*.chocolatey.org, OU=Domain Control Validated Simple Name: *.chocolatey.org DNS Name: chocolatey.org [Issuer] CN=Go Daddy Secure Certificate Authority - G2, OU=http://certs.godaddy.com/repository/, O="GoDaddy.com, Inc.", L=Scottsdale, S=Arizona, C=US Simple Name: Go Daddy Secure Certificate Authority - G2 DNS Name: Go Daddy Secure Certificate Authority - G2 [Serial Number] 574249DBBB2C449C [Not Before] 2021-05-26 13:41:17 [Not After] 2022-05-28 16:22:35 [Thumbprint] 09F7668D2A83CCC73C123B9998BE668690C262F0 [Signature Algorithm] sha256RSA(1.2.840.113549.1.1.11) [Public Key] Algorithm: RSA Length: 4096 Key Blob: 30 82 02 0a 02 82 02 01 00 b7 46 d2 10 8f 7c 69 96 15 b2 ec af 57 10 5d 1f b3 ff 42 96 35 ef e7 ba fc c2 40 65 a8 ce db af 18 21 0b bb 06 7d 70 54 0d ce 8d 70 0a 34 12 53 ea de c0 b0 48 1a c0 ef f7 ad 4d 84 98 ee 5b 99 73 e4 32 68 89 5f 89 10 42 09 a4 3b 04 56 fb aa 5c 29 c3 fa ce 76 13 1f 50 af e7 78 d9 7a.... System.Net Information: 0 : [20284] SecureChannel#13202999 - Remote certificate was verified as valid by the user. System.Net Information: 0 : [20284] ProcessAuthentication(Protocol=Tls12, Cipher=Aes128 128 bit strength, Hash=Sha256 0 bit strength, Key Exchange=44550 255 bit strength). System.Net Information: 0 : [20284] Connection#2055005 - Received status line: Version=1.1, StatusCode=200, StatusDescription=OK. System.Net Information: 0 : [20284] Connection#2055005 - Received headers { Connection: close DataServiceVersion: 1.0; X-Frame-Options: deny CF-Cache-Status: HIT Age: 4787 Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct" Strict-Transport-Security: max-age=12960000 X-Content-Type-Options: nosniff CF-RAY: 68f23c7a3d921691-ARN Accept-Ranges: bytes Content-Length: 407 Cache-Control: max-age=31536000 Content-Type: application/xml;charset=utf-8 Date: Wed, 15 Sep 2021 13:35:05 GMT Last-Modified: Wed, 15 Sep 2021 12:15:18 GMT Server: cloudflare }. System.Net Information: 0 : [20284] ConnectStream#51718129::ConnectStream(Buffered 407 bytes.) System.Net Information: 0 : [20284] Associating HttpWebRequest#58849189 with ConnectStream#51718129 System.Net Information: 0 : [20284] Associating HttpWebRequest#58849189 with HttpWebResponse#62809978 System.Net Information: 0 : [20284] Associating HttpWebRequest#28418891 with ServicePoint#59880657 System.Net Information: 0 : [20284] Associating Connection#54443429 with HttpWebRequest#28418891 System.Net.Sockets Information: 0 : [20284] Socket#20228817 - Created connection from 192.168.0.103:54621 to 104.20.73.28:443. System.Net Information: 0 : [20284] Connection#54443429 - Created connection from 192.168.0.103:54621 to 104.20.73.28:443. System.Net Information: 0 : [20284] TlsStream#27921517::.ctor(host=community.chocolatey.org, #certs=0, checkCertificateRevocationList=False, sslProtocols=Default, Tls11, Tls12) System.Net Information: 0 : [20284] Associating HttpWebRequest#28418891 with ConnectStream#49967061 System.Net Information: 0 : [20284] HttpWebRequest#28418891 - Request: GET /api/v2/$metadata HTTP/1.0 System.Net Information: 0 : [20284] ConnectStream#49967061 - Sending headers { User-Agent: NuGet/0.11.1.0 (Microsoft Windows NT 10.0.18363.0) Host: community.chocolatey.org }. System.Net Information: 0 : [20284] SecureChannel#47050372::.ctor(hostname=community.chocolatey.org, #clientCertificates=0, encryptionPolicy=RequireEncryption) System.Net Information: 0 : [20284] SecureChannel#47050372 - Left with 0 client certificates to choose from. System.Net Information: 0 : [20284] Using the cached credential handle. System.Net Information: 0 : [20284] InitializeSecurityContext(credential = System.Net.SafeFreeCredential_SECURITY, context = (null), targetName = community.chocolatey.org, inFlags = ReplayDetect, SequenceDetect, Confidentiality, AllocateMemory, InitManualCredValidation) System.Net Information: 0 : [20284] InitializeSecurityContext(In-Buffer length=0, Out-Buffer length=372, returned code=ContinueNeeded). System.Net Information: 0 : [20284] InitializeSecurityContext(credential = System.Net.SafeFreeCredential_SECURITY, context = 1b511e50:26e47988770, targetName = community.chocolatey.org, inFlags = ReplayDetect, SequenceDetect, Confidentiality, AllocateMemory, InitManualCredValidation) System.Net Information: 0 : [20284] InitializeSecurityContext(In-Buffers count=2, Out-Buffer length=0, returned code=ContinueNeeded). System.Net Information: 0 : [20284] InitializeSecurityContext(credential = System.Net.SafeFreeCredential_SECURITY, context = 1b511e50:26e47988770, targetName = community.chocolatey.org, inFlags = ReplayDetect, SequenceDetect, Confidentiality, AllocateMemory, InitManualCredValidation) System.Net Information: 0 : [20284] InitializeSecurityContext(In-Buffers count=2, Out-Buffer length=0, returned code=ContinueNeeded). System.Net Information: 0 : [20284] InitializeSecurityContext(credential = System.Net.SafeFreeCredential_SECURITY, context = 1b511e50:26e47988770, targetName = community.chocolatey.org, inFlags = ReplayDetect, SequenceDetect, Confidentiality, AllocateMemory, InitManualCredValidation) System.Net Information: 0 : [20284] InitializeSecurityContext(In-Buffers count=2, Out-Buffer length=51, returned code=OK). System.Net Information: 0 : [20284] Remote certificate: [Version] V3 [Subject] CN=*.chocolatey.org, OU=Domain Control Validated Simple Name: *.chocolatey.org DNS Name: chocolatey.org [Issuer] CN=Go Daddy Secure Certificate Authority - G2, OU=http://certs.godaddy.com/repository/, O="GoDaddy.com, Inc.", L=Scottsdale, S=Arizona, C=US Simple Name: Go Daddy Secure Certificate Authority - G2 DNS Name: Go Daddy Secure Certificate Authority - G2 [Serial Number] 574249DBBB2C449C [Not Before] 2021-05-26 13:41:17 [Not After] 2022-05-28 16:22:35 [Thumbprint] 09F7668D2A83CCC73C123B9998BE668690C262F0 [Signature Algorithm] sha256RSA(1.2.840.113549.1.1.11) [Public Key] Algorithm: RSA Length: 4096 Key Blob: 30 82 02 0a 02 82 02 01 00 b7 46 d2 10 8f 7c 69 96 15 b2 ec af 57 10 5d 1f b3 ff 42 96 35 ef e7 ba fc c2 40 65 a8 ce db af 18 21 0b bb 06 7d 70 54 0d ce 8d 70 0a 34 12 53 ea de c0 b0 48 1a c0 ef f7 ad 4d 84 98 ee 5b 99 73 e4 32 68 89 5f 89 10 42 09 a4 3b 04 56 fb aa 5c 29 c3 fa ce 76 13 1f 50 af e7 78 d9 7a.... System.Net Information: 0 : [20284] SecureChannel#47050372 - Remote certificate was verified as valid by the user. System.Net Information: 0 : [20284] ProcessAuthentication(Protocol=Tls12, Cipher=Aes128 128 bit strength, Hash=Sha256 0 bit strength, Key Exchange=44550 255 bit strength). System.Net Information: 0 : [20284] Connection#54443429 - Received status line: Version=1.1, StatusCode=200, StatusDescription=OK. System.Net Information: 0 : [20284] Connection#54443429 - Received headers { Connection: close Vary: Accept-Encoding DataServiceVersion: 2.0; X-Frame-Options: deny CF-Cache-Status: HIT Age: 2327 Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct" Strict-Transport-Security: max-age=12960000 X-Content-Type-Options: nosniff CF-RAY: 68f23c7a8fa1cb08-ARN Cache-Control: max-age=86400 Content-Type: application/xml;charset=utf-8 Date: Wed, 15 Sep 2021 13:35:05 GMT Last-Modified: Wed, 15 Sep 2021 12:56:18 GMT Server: cloudflare }. System.Net Information: 0 : [20284] ConnectStream#20800170::ConnectStream(Buffered -1 bytes.) System.Net Information: 0 : [20284] Associating HttpWebRequest#28418891 with ConnectStream#20800170 System.Net Information: 0 : [20284] Associating HttpWebRequest#28418891 with HttpWebResponse#52983808 System.Net Information: 0 : [20284] ContentLength=-1 - Supports prereleases? 'True'. - Is ServiceBased? 'True'. System.Net Information: 0 : [20284] Associating HttpWebRequest#39661040 with ServicePoint#59880657 System.Net Information: 0 : [20284] Associating Connection#21405046 with HttpWebRequest#39661040 System.Net.Sockets Information: 0 : [20284] Socket#58427690 - Created connection from 192.168.0.103:54622 to 104.20.73.28:443. System.Net Information: 0 : [20284] Connection#21405046 - Created connection from 192.168.0.103:54622 to 104.20.73.28:443. System.Net Information: 0 : [20284] TlsStream#35022440::.ctor(host=community.chocolatey.org, #certs=0, checkCertificateRevocationList=False, sslProtocols=Default, Tls11, Tls12) System.Net Information: 0 : [20284] Associating HttpWebRequest#39661040 with ConnectStream#46766508 System.Net Information: 0 : [20284] HttpWebRequest#39661040 - Request: GET /api/v2/Packages()?$filter=(tolower(Id)%20eq%20'git')%20and%20IsLatestVersion HTTP/1.1 System.Net Information: 0 : [20284] ConnectStream#46766508 - Sending headers { DataServiceVersion: 1.0;NetFx MaxDataServiceVersion: 2.0;NetFx User-Agent: Chocolatey Core Accept: application/atom+xml,application/xml Accept-Charset: UTF-8 Host: community.chocolatey.org Accept-Encoding: gzip, deflate }. System.Net Information: 0 : [20284] SecureChannel#18245395::.ctor(hostname=community.chocolatey.org, #clientCertificates=0, encryptionPolicy=RequireEncryption) System.Net Information: 0 : [20284] SecureChannel#18245395 - Left with 0 client certificates to choose from. System.Net Information: 0 : [20284] Using the cached credential handle. System.Net Information: 0 : [20284] InitializeSecurityContext(credential = System.Net.SafeFreeCredential_SECURITY, context = (null), targetName = community.chocolatey.org, inFlags = ReplayDetect, SequenceDetect, Confidentiality, AllocateMemory, InitManualCredValidation) System.Net Information: 0 : [20284] InitializeSecurityContext(In-Buffer length=0, Out-Buffer length=372, returned code=ContinueNeeded). System.Net Information: 0 : [20284] InitializeSecurityContext(credential = System.Net.SafeFreeCredential_SECURITY, context = 1b511e50:26e47988770, targetName = community.chocolatey.org, inFlags = ReplayDetect, SequenceDetect, Confidentiality, AllocateMemory, InitManualCredValidation) System.Net Information: 0 : [20284] InitializeSecurityContext(In-Buffers count=2, Out-Buffer length=0, returned code=ContinueNeeded). System.Net Information: 0 : [20284] InitializeSecurityContext(credential = System.Net.SafeFreeCredential_SECURITY, context = 1b511e50:26e47988770, targetName = community.chocolatey.org, inFlags = ReplayDetect, SequenceDetect, Confidentiality, AllocateMemory, InitManualCredValidation) System.Net Information: 0 : [20284] InitializeSecurityContext(In-Buffers count=2, Out-Buffer length=0, returned code=ContinueNeeded). System.Net Information: 0 : [20284] InitializeSecurityContext(credential = System.Net.SafeFreeCredential_SECURITY, context = 1b511e50:26e47988770, targetName = community.chocolatey.org, inFlags = ReplayDetect, SequenceDetect, Confidentiality, AllocateMemory, InitManualCredValidation) System.Net Information: 0 : [20284] InitializeSecurityContext(In-Buffers count=2, Out-Buffer length=51, returned code=OK). System.Net Information: 0 : [20284] Remote certificate: [Version] V3 [Subject] CN=*.chocolatey.org, OU=Domain Control Validated Simple Name: *.chocolatey.org DNS Name: chocolatey.org [Issuer] CN=Go Daddy Secure Certificate Authority - G2, OU=http://certs.godaddy.com/repository/, O="GoDaddy.com, Inc.", L=Scottsdale, S=Arizona, C=US Simple Name: Go Daddy Secure Certificate Authority - G2 DNS Name: Go Daddy Secure Certificate Authority - G2 [Serial Number] 574249DBBB2C449C [Not Before] 2021-05-26 13:41:17 [Not After] 2022-05-28 16:22:35 [Thumbprint] 09F7668D2A83CCC73C123B9998BE668690C262F0 [Signature Algorithm] sha256RSA(1.2.840.113549.1.1.11) [Public Key] Algorithm: RSA Length: 4096 Key Blob: 30 82 02 0a 02 82 02 01 00 b7 46 d2 10 8f 7c 69 96 15 b2 ec af 57 10 5d 1f b3 ff 42 96 35 ef e7 ba fc c2 40 65 a8 ce db af 18 21 0b bb 06 7d 70 54 0d ce 8d 70 0a 34 12 53 ea de c0 b0 48 1a c0 ef f7 ad 4d 84 98 ee 5b 99 73 e4 32 68 89 5f 89 10 42 09 a4 3b 04 56 fb aa 5c 29 c3 fa ce 76 13 1f 50 af e7 78 d9 7a.... System.Net Information: 0 : [20284] SecureChannel#18245395 - Remote certificate was verified as valid by the user. System.Net Information: 0 : [20284] ProcessAuthentication(Protocol=Tls12, Cipher=Aes128 128 bit strength, Hash=Sha256 0 bit strength, Key Exchange=44550 255 bit strength). System.Net Information: 0 : [20284] Connection#21405046 - Received status line: Version=1.1, StatusCode=200, StatusDescription=OK. System.Net Information: 0 : [20284] Connection#21405046 - Received headers { Connection: keep-alive DataServiceVersion: 2.0; X-Frame-Options: deny CF-Cache-Status: HIT Age: 1331 Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct" Vary: Accept-Encoding Strict-Transport-Security: max-age=12960000 X-Content-Type-Options: nosniff CF-RAY: 68f23c7b1943cb0c-ARN Accept-Ranges: bytes Content-Length: 7755 Cache-Control: max-age=10800 Content-Type: application/atom+xml;charset=utf-8 Date: Wed, 15 Sep 2021 13:35:05 GMT Last-Modified: Wed, 15 Sep 2021 13:12:54 GMT Server: cloudflare }. System.Net Information: 0 : [20284] ConnectStream#29990828::ConnectStream(Buffered 7755 bytes.) System.Net Information: 0 : [20284] Associating HttpWebRequest#39661040 with ConnectStream#29990828 System.Net Information: 0 : [20284] Associating HttpWebRequest#39661040 with HttpWebResponse#1482002 System.Net Information: 0 : [20284] ContentLength=7755 Package 'git' found on source 'https://community.chocolatey.org/api/v2/' System.Net Information: 0 : [12876] Associating HttpWebRequest#40872486 with ServicePoint#59880657 System.Net Information: 0 : [12876] Associating Connection#21405046 with HttpWebRequest#40872486 System.Net Information: 0 : [12876] Associating HttpWebRequest#40872486 with ConnectStream#15179193 System.Net Information: 0 : [12876] HttpWebRequest#40872486 - Request: GET /api/v2/FindPackagesById()?id='git.install' HTTP/1.1 System.Net Information: 0 : [12876] ConnectStream#15179193 - Sending headers { DataServiceVersion: 1.0;NetFx MaxDataServiceVersion: 2.0;NetFx User-Agent: Chocolatey Core Accept: application/atom+xml,application/xml Accept-Charset: UTF-8 Host: community.chocolatey.org Accept-Encoding: gzip, deflate }. System.Net Information: 0 : [12876] Connection#21405046 - Received status line: Version=1.1, StatusCode=200, StatusDescription=OK. System.Net Information: 0 : [12876] Connection#21405046 - Received headers { Connection: keep-alive DataServiceVersion: 2.0; X-Frame-Options: deny CF-Cache-Status: EXPIRED Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct" Vary: Accept-Encoding Strict-Transport-Security: max-age=12960000 X-Content-Type-Options: nosniff CF-RAY: 68f23c7b8a34cb0c-ARN Accept-Ranges: bytes Content-Length: 244010 Cache-Control: max-age=1800 Content-Type: application/atom+xml;charset=utf-8 Date: Wed, 15 Sep 2021 13:35:06 GMT Last-Modified: Wed, 15 Sep 2021 12:23:31 GMT Server: cloudflare }. System.Net Information: 0 : [12876] ConnectStream#43935528::ConnectStream(Buffered 244010 bytes.) System.Net Information: 0 : [12876] Associating HttpWebRequest#40872486 with ConnectStream#43935528 System.Net Information: 0 : [12876] Associating HttpWebRequest#40872486 with HttpWebResponse#24646377 System.Net Information: 0 : [12876] ContentLength=244010 System.Net Information: 0 : [12876] Associating HttpWebRequest#65853382 with ServicePoint#35721828 System.Net Information: 0 : [12876] Associating Connection#20630489 with HttpWebRequest#65853382 System.Net.Sockets Information: 0 : [12876] Socket#46000189 - Created connection from 192.168.0.103:54625 to 104.20.73.28:80. System.Net Information: 0 : [12876] Connection#20630489 - Created connection from 192.168.0.103:54625 to 104.20.73.28:80. System.Net Information: 0 : [12876] Associating HttpWebRequest#65853382 with ConnectStream#27524655 System.Net Information: 0 : [12876] HttpWebRequest#65853382 - Request: GET /api/v2/FindPackagesById?id='git.install'&$skiptoken='git.install','2.15.0' HTTP/1.1 System.Net Information: 0 : [12876] ConnectStream#27524655 - Sending headers { MaxDataServiceVersion: 2.0;NetFx User-Agent: Chocolatey Core Accept: application/atom+xml,application/xml Accept-Charset: UTF-8 Host: community.chocolatey.org Accept-Encoding: gzip, deflate Connection: Keep-Alive }. System.Net Information: 0 : [12876] Connection#20630489 - Received status line: Version=1.1, StatusCode=301, StatusDescription=Moved Permanently. System.Net Information: 0 : [12876] Connection#20630489 - Received headers { Transfer-Encoding: chunked Connection: keep-alive CF-Rate-Limit-Rule-Id: 0a0a90f72a0c41b686e1b08c44a8270d CF-Rate-Limit-Action: simulate Retry-After: 86400 Vary: Accept-Encoding X-Content-Type-Options: nosniff CF-RAY: 68f23c81ac24f134-ARN Cache-Control: max-age=3600 Date: Wed, 15 Sep 2021 13:35:06 GMT Expires: Wed, 15 Sep 2021 14:35:06 GMT Location: https://community.chocolatey.org/api/v2/FindPackagesById?id='git.install'&$skiptoken='git.install','2.15.0' Server: cloudflare }. System.Net Information: 0 : [12876] ConnectStream#17027751::ConnectStream(Buffered -1 bytes.) System.Net Information: 0 : [12876] Associating HttpWebRequest#65853382 with ConnectStream#17027751 System.Net Information: 0 : [12876] Associating HttpWebRequest#65853382 with HttpWebResponse#23040611 System.Net Warning: 0 : [12876] HttpWebRequest#65853382::() - Error code 301 was received from server response. System.Net Warning: 0 : [12876] HttpWebRequest#65853382::() - Resubmitting request. System.Net Information: 0 : [12876] Associating HttpWebRequest#65853382 with ServicePoint#59880657 System.Net Information: 0 : [12876] Associating Connection#21405046 with HttpWebRequest#65853382 System.Net Information: 0 : [12876] Associating HttpWebRequest#65853382 with ConnectStream#39144371 System.Net Information: 0 : [12876] HttpWebRequest#65853382 - Request: GET /api/v2/FindPackagesById?id='git.install'&$skiptoken='git.install','2.15.0' HTTP/1.1 System.Net Information: 0 : [12876] ConnectStream#39144371 - Sending headers { MaxDataServiceVersion: 2.0;NetFx User-Agent: Chocolatey Core Accept: application/atom+xml,application/xml Accept-Charset: UTF-8 Accept-Encoding: gzip, deflate Host: community.chocolatey.org }. System.Net Information: 0 : [12876] Connection#21405046 - Received status line: Version=1.1, StatusCode=200, StatusDescription=OK. System.Net Information: 0 : [12876] Connection#21405046 - Received headers { Connection: keep-alive CF-Rate-Limit-Rule-Id: 0a0a90f72a0c41b686e1b08c44a8270d CF-Rate-Limit-Action: simulate Retry-After: 86400 DataServiceVersion: 2.0; X-Frame-Options: deny CF-Cache-Status: EXPIRED Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct" Vary: Accept-Encoding Strict-Transport-Security: max-age=12960000 X-Content-Type-Options: nosniff CF-RAY: 68f23c825feacb0c-ARN Accept-Ranges: bytes Content-Length: 287711 Cache-Control: max-age=1800 Content-Type: application/atom+xml;charset=utf-8 Date: Wed, 15 Sep 2021 13:35:07 GMT Last-Modified: Wed, 15 Sep 2021 12:23:32 GMT Server: cloudflare }. System.Net Information: 0 : [12876] ConnectStream#39085184::ConnectStream(Buffered 287711 bytes.) System.Net Information: 0 : [12876] Associating HttpWebRequest#65853382 with ConnectStream#39085184 System.Net Information: 0 : [12876] Associating HttpWebRequest#65853382 with HttpWebResponse#37605516 System.Net Information: 0 : [12876] ContentLength=287711 System.Net Information: 0 : [12876] Associating HttpWebRequest#39792847 with ServicePoint#35721828 System.Net Information: 0 : [12876] Associating Connection#20630489 with HttpWebRequest#39792847 System.Net Information: 0 : [12876] Associating HttpWebRequest#39792847 with ConnectStream#55297085 System.Net Information: 0 : [12876] HttpWebRequest#39792847 - Request: GET /api/v2/FindPackagesById?id='git.install'&$skiptoken='git.install','2.31.0' HTTP/1.1 System.Net Information: 0 : [12876] ConnectStream#55297085 - Sending headers { MaxDataServiceVersion: 2.0;NetFx User-Agent: Chocolatey Core Accept: application/atom+xml,application/xml Accept-Charset: UTF-8 Host: community.chocolatey.org Accept-Encoding: gzip, deflate }. System.Net Information: 0 : [12876] Connection#20630489 - Received status line: Version=1.1, StatusCode=301, StatusDescription=Moved Permanently. System.Net Information: 0 : [12876] Connection#20630489 - Received headers { Transfer-Encoding: chunked Connection: keep-alive CF-Rate-Limit-Rule-Id: 0a0a90f72a0c41b686e1b08c44a8270d CF-Rate-Limit-Action: simulate Retry-After: 86399 Vary: Accept-Encoding X-Content-Type-Options: nosniff CF-RAY: 68f23c886aa2f134-ARN Cache-Control: max-age=3600 Date: Wed, 15 Sep 2021 13:35:07 GMT Expires: Wed, 15 Sep 2021 14:35:07 GMT Location: https://community.chocolatey.org/api/v2/FindPackagesById?id='git.install'&$skiptoken='git.install','2.31.0' Server: cloudflare }. System.Net Information: 0 : [12876] ConnectStream#40249861::ConnectStream(Buffered -1 bytes.) System.Net Information: 0 : [12876] Associating HttpWebRequest#39792847 with ConnectStream#40249861 System.Net Information: 0 : [12876] Associating HttpWebRequest#39792847 with HttpWebResponse#66722439 System.Net Warning: 0 : [12876] HttpWebRequest#39792847::() - Error code 301 was received from server response. System.Net Warning: 0 : [12876] HttpWebRequest#39792847::() - Resubmitting request. System.Net Information: 0 : [12876] Associating HttpWebRequest#39792847 with ServicePoint#59880657 System.Net Information: 0 : [12876] Associating Connection#21405046 with HttpWebRequest#39792847 System.Net Information: 0 : [12876] Associating HttpWebRequest#39792847 with ConnectStream#57448253 System.Net Information: 0 : [12876] HttpWebRequest#39792847 - Request: GET /api/v2/FindPackagesById?id='git.install'&$skiptoken='git.install','2.31.0' HTTP/1.1 System.Net Information: 0 : [12876] ConnectStream#57448253 - Sending headers { MaxDataServiceVersion: 2.0;NetFx User-Agent: Chocolatey Core Accept: application/atom+xml,application/xml Accept-Charset: UTF-8 Accept-Encoding: gzip, deflate Host: community.chocolatey.org }. System.Net Information: 0 : [12876] Connection#21405046 - Received status line: Version=1.1, StatusCode=200, StatusDescription=OK. System.Net Information: 0 : [12876] Connection#21405046 - Received headers { Connection: keep-alive CF-Rate-Limit-Rule-Id: 0a0a90f72a0c41b686e1b08c44a8270d CF-Rate-Limit-Action: simulate Retry-After: 86399 DataServiceVersion: 2.0; X-Frame-Options: deny CF-Cache-Status: EXPIRED Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct" Vary: Accept-Encoding Strict-Transport-Security: max-age=12960000 X-Content-Type-Options: nosniff CF-RAY: 68f23c888bbfcb0c-ARN Accept-Ranges: bytes Content-Length: 170881 Cache-Control: max-age=1800 Content-Type: application/atom+xml;charset=utf-8 Date: Wed, 15 Sep 2021 13:35:08 GMT Last-Modified: Wed, 15 Sep 2021 12:23:33 GMT Server: cloudflare }. System.Net Information: 0 : [12876] ConnectStream#26920182::ConnectStream(Buffered 170881 bytes.) System.Net Information: 0 : [12876] Associating HttpWebRequest#39792847 with ConnectStream#26920182 System.Net Information: 0 : [12876] Associating HttpWebRequest#39792847 with HttpWebResponse#1915934 System.Net Information: 0 : [12876] ContentLength=170881 System.Net Information: 0 : [20284] Associating HttpWebRequest#238043 with ServicePoint#59880657 System.Net Information: 0 : [20284] Associating Connection#21405046 with HttpWebRequest#238043 System.Net Information: 0 : [20284] Associating HttpWebRequest#238043 with ConnectStream#2142393 System.Net Information: 0 : [20284] HttpWebRequest#238043 - Request: GET /api/v2/package/git.install/2.33.0.2 HTTP/1.0 System.Net Information: 0 : [20284] ConnectStream#2142393 - Sending headers { User-Agent: NuGet Core/0.11.1.0 (Microsoft Windows NT 10.0.18363.0) NuGet-Operation: Install-Dependency NuGet-DependentPackage: git Host: community.chocolatey.org }. System.Net Information: 0 : [20284] Connection#21405046 - Received status line: Version=1.1, StatusCode=302, StatusDescription=Found. System.Net Information: 0 : [20284] Connection#21405046 - Received headers { Connection: close X-Frame-Options: deny CF-Cache-Status: DYNAMIC Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct" Strict-Transport-Security: max-age=12960000 X-Content-Type-Options: nosniff CF-RAY: 68f23c8dbd9bcb0c-ARN Cache-Control: private Content-Type: text/html; charset=utf-8 Date: Wed, 15 Sep 2021 13:35:08 GMT Location: https://packages.chocolatey.org/git.install.2.33.0.2.nupkg Server: cloudflare }. System.Net Information: 0 : [20284] ConnectStream#19281542::ConnectStream(Buffered -1 bytes.) System.Net Information: 0 : [20284] Associating HttpWebRequest#238043 with ConnectStream#19281542 System.Net Information: 0 : [20284] Associating HttpWebRequest#238043 with HttpWebResponse#39316155 System.Net Warning: 0 : [20284] HttpWebRequest#238043::() - Error code 302 was received from server response. System.Net Warning: 0 : [20284] HttpWebRequest#238043::() - Resubmitting request. System.Net Information: 0 : [20284] Associating HttpWebRequest#238043 with ServicePoint#18301082 System.Net Information: 0 : [20284] Associating Connection#30492010 with HttpWebRequest#238043 System.Net.Sockets Information: 0 : [20284] Socket#5992637 - Created connection from 192.168.0.103:54627 to 146.112.56.159:443. System.Net Information: 0 : [20284] Connection#30492010 - Created connection from 192.168.0.103:54627 to 146.112.56.159:443. System.Net Information: 0 : [20284] TlsStream#15641626::.ctor(host=packages.chocolatey.org, #certs=0, checkCertificateRevocationList=False, sslProtocols=Default, Tls11, Tls12) System.Net Information: 0 : [20284] Associating HttpWebRequest#238043 with ConnectStream#6556909 System.Net Information: 0 : [20284] HttpWebRequest#238043 - Request: GET /git.install.2.33.0.2.nupkg HTTP/1.0 System.Net Information: 0 : [20284] ConnectStream#6556909 - Sending headers { User-Agent: NuGet Core/0.11.1.0 (Microsoft Windows NT 10.0.18363.0) NuGet-Operation: Install-Dependency NuGet-DependentPackage: git Host: packages.chocolatey.org }. System.Net Information: 0 : [20284] SecureChannel#59012183::.ctor(hostname=packages.chocolatey.org, #clientCertificates=0, encryptionPolicy=RequireEncryption) System.Net Information: 0 : [20284] SecureChannel#59012183 - Left with 0 client certificates to choose from. System.Net Information: 0 : [20284] Using the cached credential handle. System.Net Information: 0 : [20284] InitializeSecurityContext(credential = System.Net.SafeFreeCredential_SECURITY, context = (null), targetName = packages.chocolatey.org, inFlags = ReplayDetect, SequenceDetect, Confidentiality, AllocateMemory, InitManualCredValidation) System.Net Information: 0 : [20284] InitializeSecurityContext(In-Buffer length=0, Out-Buffer length=179, returned code=ContinueNeeded). System.Net Information: 0 : [20284] InitializeSecurityContext(credential = System.Net.SafeFreeCredential_SECURITY, context = 1b511e50:26e4798b260, targetName = packages.chocolatey.org, inFlags = ReplayDetect, SequenceDetect, Confidentiality, AllocateMemory, InitManualCredValidation) System.Net Information: 0 : [20284] InitializeSecurityContext(In-Buffers count=2, Out-Buffer length=0, returned code=ContinueNeeded). System.Net Information: 0 : [20284] InitializeSecurityContext(credential = System.Net.SafeFreeCredential_SECURITY, context = 1b511e50:26e4798b260, targetName = packages.chocolatey.org, inFlags = ReplayDetect, SequenceDetect, Confidentiality, AllocateMemory, InitManualCredValidation) System.Net Information: 0 : [20284] InitializeSecurityContext(In-Buffers count=2, Out-Buffer length=0, returned code=ContinueNeeded). System.Net Information: 0 : [20284] InitializeSecurityContext(credential = System.Net.SafeFreeCredential_SECURITY, context = 1b511e50:26e4798b260, targetName = packages.chocolatey.org, inFlags = ReplayDetect, SequenceDetect, Confidentiality, AllocateMemory, InitManualCredValidation) System.Net Information: 0 : [20284] InitializeSecurityContext(In-Buffers count=2, Out-Buffer length=0, returned code=ContinueNeeded). System.Net Information: 0 : [20284] InitializeSecurityContext(credential = System.Net.SafeFreeCredential_SECURITY, context = 1b511e50:26e4798b260, targetName = packages.chocolatey.org, inFlags = ReplayDetect, SequenceDetect, Confidentiality, AllocateMemory, InitManualCredValidation) System.Net Information: 0 : [20284] InitializeSecurityContext(In-Buffers count=2, Out-Buffer length=126, returned code=ContinueNeeded). System.Net Information: 0 : [20284] InitializeSecurityContext(credential = System.Net.SafeFreeCredential_SECURITY, context = 1b511e50:26e4798b260, targetName = packages.chocolatey.org, inFlags = ReplayDetect, SequenceDetect, Confidentiality, AllocateMemory, InitManualCredValidation) System.Net Information: 0 : [20284] InitializeSecurityContext(In-Buffers count=2, Out-Buffer length=0, returned code=ContinueNeeded). System.Net Information: 0 : [20284] InitializeSecurityContext(credential = System.Net.SafeFreeCredential_SECURITY, context = 1b511e50:26e4798b260, targetName = packages.chocolatey.org, inFlags = ReplayDetect, SequenceDetect, Confidentiality, AllocateMemory, InitManualCredValidation) System.Net Information: 0 : [20284] InitializeSecurityContext(In-Buffers count=2, Out-Buffer length=0, returned code=ContinueNeeded). System.Net Information: 0 : [20284] InitializeSecurityContext(credential = System.Net.SafeFreeCredential_SECURITY, context = 1b511e50:26e4798b260, targetName = packages.chocolatey.org, inFlags = ReplayDetect, SequenceDetect, Confidentiality, AllocateMemory, InitManualCredValidation) System.Net Information: 0 : [20284] InitializeSecurityContext(In-Buffers count=2, Out-Buffer length=0, returned code=OK). System.Net Information: 0 : [20284] Remote certificate: [Version] V3 [Subject] CN=packages.chocolatey.org, O="Cisco Systems, Inc.", L=San Francisco, S=California, C=US Simple Name: packages.chocolatey.org DNS Name: packages.chocolatey.org [Issuer] CN=Cisco Umbrella Secondary SubCA lon-SG, O=Cisco Simple Name: Cisco Umbrella Secondary SubCA lon-SG DNS Name: Cisco Umbrella Secondary SubCA lon-SG [Serial Number] 2501C3CC [Not Before] 2021-09-13 00:49:58 [Not After] 2021-09-18 00:49:58 [Thumbprint] D21F571ED42363EF0D1890CF11CB01ABEFF253D5 [Signature Algorithm] sha256RSA(1.2.840.113549.1.1.11) [Public Key] Algorithm: RSA Length: 2048 Key Blob: 30 82 01 0a 02 82 01 01 00 b5 57 64 c2 f2 e3 99 36 36 60 a5 53 27 50 eb 28 ba 03 04 ab f7 2b 31 41 55 b0 1e b0 5d bd 81 76 f4 7b b0 5c bf 61 47 df fb 6d 55 28 3f 2a a3 f7 c9 df 03 a6 30 76 70 ec e4 35 20 f1 cd 75 c0 10 52 e0 b3 f4 19 6d 8f ea e3 d9 e3 0b 4c 05 cb b9 f5 d0 d1 1d 7a 5f cc a0 4b a2 76 87 38 36 d2 72 cd 38 ea 03 68 5e ad 41 91 ce b8 1d 7e 97 3f e.... System.Net Information: 0 : [20284] SecureChannel#59012183 - Remote certificate has errors: System.Net Information: 0 : [20284] SecureChannel#59012183 - A certificate chain processed, but terminated in a root certificate which is not trusted by the trust provider. System.Net Information: 0 : [20284] SecureChannel#59012183 - Remote certificate was verified as invalid by the user. System.Net Error: 0 : [20284] Exception in HttpWebRequest#238043:: - The underlying connection was closed: Could not establish trust relationship for the SSL/TLS secure channel.. System.Net Error: 0 : [20284] Exception in HttpWebRequest#238043::GetResponse - The underlying connection was closed: Could not establish trust relationship for the SSL/TLS secure channel.. git not installed. An error occurred during installation: The underlying connection was closed: Could not establish trust relationship for the SSL/TLS secure channel. git package files install failed with exit code 1. Performing other installation steps. No package information as package is null. No package information to save as package is null. The install of git was NOT successful. git not installed. An error occurred during installation: The underlying connection was closed: Could not establish trust relationship for the SSL/TLS secure channel. Chocolatey installed 0/1 packages. 1 packages failed. See the log for details (C:\ProgramData\chocolatey\logs\chocolatey.log). Failures - git (exited 1) - git not installed. An error occurred during installation: The underlying connection was closed: Could not establish trust relationship for the SSL/TLS secure channel. Exiting with 1 ~~~

@steviecoaster What would be my options to fix this issue ? Is it on Chocolatey side ?

@FrdAlex @sbudaraj-vcc It appears to be the same certificate for both of you!

For reference it's

[Subject]
  CN=packages.chocolatey.org, O="Cisco Systems, Inc.", L=San Francisco, S=California, C=US
  Simple Name: packages.chocolatey.org
  DNS Name: packages.chocolatey.org

[Issuer]
  CN=Cisco Umbrella Secondary SubCA lon-SG, O=Cisco
  Simple Name: Cisco Umbrella Secondary SubCA lon-SG
  DNS Name: Cisco Umbrella Secondary SubCA lon-SG

[Serial Number]
  2501C3CC

[Not Before]
  2021-09-13 00:49:58

[Not After]
  2021-09-18 00:49:58

[Thumbprint]
  D21F571ED42363EF0D1890CF11CB01ABEFF253D5

[Signature Algorithm]
  sha256RSA(1.2.840.113549.1.1.11)

If you can get that certificate and put it in the TrustedPeople store of the machine that is failing, I expect things to begin working for you. I'll go back to our team and see if this is an "us" problem, and also check as I think we have a PowerShell script that I can link too that will help you retrieve that cert and put it in the right place automatically.

@steviecoaster Thanks for a lot for quickly looking into it. Yes please, a script would be very helpful!

Hey @sbudaraj-vcc and @FrdAlex, this script should pull that Cisco Umbrella certificate into the TrustedPeople store of a client machine:

Function Import-RemoteCertificate {
<#
.SYNOPSIS
Connects to a remote server and adds its SSL certificate to the local TrustedPeople certificate
store.
#>
[CmdletBinding()]
param(
    # The hostname of the QDE server to retrieve the SSL certificate from.
    [Parameter(Mandatory)]
    [string]
    $ComputerName,

    [Parameter()]
    [UInt16]
    $Port = 443
)

add-type -TypeDefinition @"
using System;
using System.Net;
using System.Net.Security;
using System.Security.Cryptography.X509Certificates;

public static class Dummy {
    public static bool ReturnTrue(object sender,
        X509Certificate certificate,
        X509Chain chain,
        SslPolicyErrors sslPolicyErrors) { return true; }

    public static RemoteCertificateValidationCallback GetDelegate() {
        return new RemoteCertificateValidationCallback(Dummy.ReturnTrue);
    }
}
"@

$callback = [System.Net.ServicePointManager]::ServerCertificateValidationCallback = [dummy]::GetDelegate()

#Do it Matthias's way
function Get-RemoteCertificate {
    param(
        [Alias('CN')]
        [Parameter(Mandatory = $true, Position = 0)]
        [string]$ComputerName,

        [Parameter(Position = 1)]
        [UInt16]$Port
    )

    $tcpClient = New-Object System.Net.Sockets.TcpClient($ComputerName, $Port)
    $sslProtocolType = [System.Net.ServicePointManager]::SecurityProtocol = [System.Net.SecurityProtocolType]::Tls12
    try {
        $tlsClient = New-Object System.Net.Security.SslStream($tcpClient.GetStream(),'false',$callback)
        $tlsClient.AuthenticateAsClient($ComputerName,$null,$sslProtocolType,$false)

        return $tlsClient.RemoteCertificate -as [System.Security.Cryptography.X509Certificates.X509Certificate2]
    }
    finally {
        if ($tlsClient -is [IDisposable]) {
            $tlsClient.Dispose()
        }

        $tcpClient.Dispose()
    }
}

#Create request to CCM Service URL to get Certificate
Write-Output "Connecting to '$ComputerName' to get certificate information"
$certificateToAdd = Get-RemoteCertificate -ComputerName $ComputerName -Port $Port

#Create CertStore object where the certificate needs "put"
Write-Host "Adding Cert to LocalMachine\TrustedPeople Store"
$Store = [System.Security.Cryptography.X509Certificates.StoreName]::TrustedPeople
$Location = [System.Security.Cryptography.X509Certificates.StoreLocation]::LocalMachine
$certStore = New-Object System.Security.Cryptography.X509Certificates.X509Store($Store, $Location)

try {
    $certStore.Open([System.Security.Cryptography.X509Certificates.OpenFlags]::ReadWrite)
    $certStore.Add($certificateToAdd)
}
finally {
    $certStore.Close()
    Remove-Variable certstore
}
}

Just copy/paste that into a Administrative PowerShell session, and execute it like: Import-RemoteCertificate -Computername packages.chocolatey.org -Port 443

After that, attempt to install a package.

Thanks @steviecoaster. I ran the script, it seemed to have successfully added the certificate (did it a couple of times).

PS C:\Users\SBUDARAJ> Get-ChildItem -Path Cert:\LocalMachine\TrustedPeople\

   PSParentPath: Microsoft.PowerShell.Security\Certificate::LocalMachine\TrustedPeople

Thumbprint                                Subject
----------                                -------
C9EF685B7C538FBD1A85376B226DBBA67CD0F79D  CN=packages.chocolatey.org, O="Cisco Systems, Inc.", L=San Francisco, S=Ca...
24316545B0EEE8310BBDA4808D8BF407A0650F97  CN=packages.chocolatey.org, O="Cisco Systems, Inc.", L=San Francisco, S=Ca...
161B9E38087ED598B0200098A67A5171DECA6773  CN=packages.chocolatey.org, O="Cisco Systems, Inc.", L=San Francisco, S=Ca...

However, it doesnt seem to clear the problem, I seem to get the same error. i.e "Remote certificate has errors"

Full Debug Log Output

~~~sh Chocolatey v0.11.1 Chocolatey is running on Windows v 10.0.18363.0 Command line: "C:\ProgramData\chocolatey\choco.exe" install git --debug --trace -y Received arguments: install git --debug --trace -y Performing validation checks. Global Configuration Validation Checks: - Package Exit Code / Exit On Reboot = Checked System State Validation Checks: Reboot Requirement Checks: - Pending Computer Rename = Checked Operating System Version Number: 10.0.18363.0 - Pending Component Based Servicing = Checked - Pending Windows Auto Update = Checked - Pending File Rename Operations = Ignored - Pending Windows Package Installer = Checked - Pending Windows Package Installer SysWow64 = Checked The source 'https://community.chocolatey.org/api/v2/' evaluated to a 'normal' source type NOTE: Hiding sensitive configuration data! Please double and triple check to be sure no sensitive data is shown, especially if copying output to a gist for review. Configuration: CommandName='install'| CacheLocation='C:\Users\SBUDARAJ\AppData\Local\Temp\chocolatey'| ContainsLegacyPackageInstalls='True'| CommandExecutionTimeoutSeconds='2700'|WebRequestTimeoutSeconds='30'| Sources='https://community.chocolatey.org/api/v2/'|SourceType='normal'| Debug='True'|Verbose='False'|Trace='True'|Force='False'|Noop='False'| HelpRequested='False'|UnsuccessfulParsing='False'|RegularOutput='True'| QuietOutput='False'|PromptForConfirmation='False'|AcceptLicense='True'| AllowUnofficialBuild='False'|Input='git'|AllVersions='False'| SkipPackageInstallProvider='False'|PackageNames='git'| Prerelease='False'|ForceX86='False'|OverrideArguments='False'| NotSilent='False'|ApplyPackageParametersToDependencies='False'| ApplyInstallArgumentsToDependencies='False'|IgnoreDependencies='False'| AllowMultipleVersions='False'|AllowDowngrade='False'| ForceDependencies='False'|Information.PlatformType='Windows'| Information.PlatformVersion='10.0.18363.0'| Information.PlatformName='Windows 10'| Information.ChocolateyVersion='0.11.1.0'| Information.ChocolateyProductVersion='0.11.1'| Information.FullName='choco, Version=0.11.1.0, Culture=neutral, PublicKeyToken=79d02ea9cad655eb'| Information.Is64BitOperatingSystem='True'| Information.Is64BitProcess='True'|Information.IsInteractive='True'| Information.UserName='SBUDARAJ'|Information.UserDomainName='VCCNET'| Information.IsUserAdministrator='True'| Information.IsUserSystemAccount='False'| Information.IsUserRemoteDesktop='False'| Information.IsUserRemote='True'| Information.IsProcessElevated='True'| Information.IsLicensedVersion='False'|Information.LicenseType='Foss'| Information.CurrentDirectory='C:\Users\SBUDARAJ'| Features.AutoUninstaller='True'|Features.ChecksumFiles='True'| Features.AllowEmptyChecksums='False'| Features.AllowEmptyChecksumsSecure='True'| Features.FailOnAutoUninstaller='False'| Features.FailOnStandardError='False'|Features.UsePowerShellHost='True'| Features.LogEnvironmentValues='False'|Features.LogWithoutColor='False'| Features.VirusCheck='False'| Features.FailOnInvalidOrMissingLicense='False'| Features.IgnoreInvalidOptionsSwitches='True'| Features.UsePackageExitCodes='True'| Features.UseEnhancedExitCodes='False'| Features.UseFipsCompliantChecksums='False'| Features.ShowNonElevatedWarnings='True'| Features.ShowDownloadProgress='True'| Features.StopOnFirstPackageFailure='False'| Features.UseRememberedArgumentsForUpgrades='False'| Features.IgnoreUnfoundPackagesOnUpgradeOutdated='False'| Features.SkipPackageUpgradesWhenNotInstalled='False'| Features.RemovePackageInformationOnUninstall='False'| Features.ExitOnRebootDetected='False'| Features.LogValidationResultsOnWarnings='True'| Features.UsePackageRepositoryOptimizations='True'| Features.ScriptsCheckLastExitCode='False'| ListCommand.LocalOnly='False'| ListCommand.IdOnly='False'|ListCommand.IncludeRegistryPrograms='False'| ListCommand.PageSize='25'|ListCommand.Exact='False'| ListCommand.ByIdOnly='False'|ListCommand.ByTagOnly='False'| ListCommand.IdStartsWith='False'|ListCommand.OrderByPopularity='False'| ListCommand.ApprovedOnly='False'| ListCommand.DownloadCacheAvailable='False'| ListCommand.NotBroken='False'| ListCommand.IncludeVersionOverrides='False'| UpgradeCommand.FailOnUnfound='False'| UpgradeCommand.FailOnNotInstalled='False'| UpgradeCommand.NotifyOnlyAvailableUpgrades='False'| UpgradeCommand.ExcludePrerelease='False'| NewCommand.AutomaticPackage='False'| NewCommand.UseOriginalTemplate='False'|SourceCommand.Command='unknown'| SourceCommand.Priority='0'|SourceCommand.BypassProxy='False'| SourceCommand.AllowSelfService='False'| SourceCommand.VisibleToAdminsOnly='False'| FeatureCommand.Command='unknown'|ConfigCommand.Command='unknown'| ApiKeyCommand.Remove='False'|PinCommand.Command='unknown'| OutdatedCommand.IgnorePinned='False'| ExportCommand.IncludeVersionNumbers='False'|Proxy.BypassOnLocal='True'| _ Chocolatey:ChocolateyInstallCommand - Normal Run Mode _ Installing the following packages: git By installing, you accept licenses for the packages. Using 'https://community.chocolatey.org/api/v2/'. System.Net Error: 0 : [18776] Can't retrieve proxy settings for Uri 'https://community.chocolatey.org/api/v2/'. Error code: 12167. System.Net Information: 0 : [18776] Associating HttpWebRequest#58849189 with ServicePoint#59880657 System.Net Information: 0 : [18776] Associating Connection#2055005 with HttpWebRequest#58849189 System.Net.Sockets Information: 0 : [18776] Socket#18495050 - Created connection from 192.168.0.103:56454 to 104.20.74.28:443. System.Net Information: 0 : [18776] Connection#2055005 - Created connection from 192.168.0.103:56454 to 104.20.74.28:443. System.Net Information: 0 : [18776] TlsStream#21704116::.ctor(host=community.chocolatey.org, #certs=0, checkCertificateRevocationList=False, sslProtocols=Default, Tls11, Tls12) System.Net Information: 0 : [18776] Associating HttpWebRequest#58849189 with ConnectStream#61119323 System.Net Information: 0 : [18776] HttpWebRequest#58849189 - Request: GET /api/v2/ HTTP/1.0 System.Net Information: 0 : [18776] ConnectStream#61119323 - Sending headers { User-Agent: NuGet/0.11.1.0 (Microsoft Windows NT 10.0.18363.0) Host: community.chocolatey.org }. System.Net Information: 0 : [18776] SecureChannel#13202999::.ctor(hostname=community.chocolatey.org, #clientCertificates=0, encryptionPolicy=RequireEncryption) System.Net Information: 0 : [18776] Enumerating security packages: System.Net Information: 0 : [18776] Negotiate System.Net Information: 0 : [18776] NegoExtender System.Net Information: 0 : [18776] Kerberos System.Net Information: 0 : [18776] NTLM System.Net Information: 0 : [18776] TSSSP System.Net Information: 0 : [18776] pku2u System.Net Information: 0 : [18776] CloudAP System.Net Information: 0 : [18776] WDigest System.Net Information: 0 : [18776] Schannel System.Net Information: 0 : [18776] Microsoft Unified Security Protocol Provider System.Net Information: 0 : [18776] Default TLS SSP System.Net Information: 0 : [18776] CREDSSP System.Net Information: 0 : [18776] SecureChannel#13202999 - Left with 0 client certificates to choose from. System.Net Information: 0 : [18776] SecureChannel#13202999::.AcquireClientCredentials, new SecureCredential() (flags=(ValidateManual, NoDefaultCred, SendAuxRecord, UseStrongCrypto), m_ProtocolFlags=(Ssl3Client, Tls10Client, Tls11Client, Tls12Client), m_EncryptionPolicy=RequireEncryption) System.Net Information: 0 : [18776] AcquireCredentialsHandle(package = Microsoft Unified Security Protocol Provider, intent = Outbound, scc = System.Net.SecureCredential) System.Net Information: 0 : [18776] InitializeSecurityContext(credential = System.Net.SafeFreeCredential_SECURITY, context = (null), targetName = community.chocolatey.org, inFlags = ReplayDetect, SequenceDetect, Confidentiality, AllocateMemory, InitManualCredValidation) System.Net Information: 0 : [18776] InitializeSecurityContext(In-Buffer length=0, Out-Buffer length=180, returned code=ContinueNeeded). System.Net Information: 0 : [18776] InitializeSecurityContext(credential = System.Net.SafeFreeCredential_SECURITY, context = 1b5878a0:26e477f8db0, targetName = community.chocolatey.org, inFlags = ReplayDetect, SequenceDetect, Confidentiality, AllocateMemory, InitManualCredValidation) System.Net Information: 0 : [18776] InitializeSecurityContext(In-Buffers count=2, Out-Buffer length=0, returned code=ContinueNeeded). System.Net Information: 0 : [18776] InitializeSecurityContext(credential = System.Net.SafeFreeCredential_SECURITY, context = 1b5878a0:26e477f8db0, targetName = community.chocolatey.org, inFlags = ReplayDetect, SequenceDetect, Confidentiality, AllocateMemory, InitManualCredValidation) System.Net Information: 0 : [18776] InitializeSecurityContext(In-Buffers count=2, Out-Buffer length=0, returned code=ContinueNeeded). System.Net Information: 0 : [18776] InitializeSecurityContext(credential = System.Net.SafeFreeCredential_SECURITY, context = 1b5878a0:26e477f8db0, targetName = community.chocolatey.org, inFlags = ReplayDetect, SequenceDetect, Confidentiality, AllocateMemory, InitManualCredValidation) System.Net Information: 0 : [18776] InitializeSecurityContext(In-Buffers count=2, Out-Buffer length=0, returned code=ContinueNeeded). System.Net Information: 0 : [18776] InitializeSecurityContext(credential = System.Net.SafeFreeCredential_SECURITY, context = 1b5878a0:26e477f8db0, targetName = community.chocolatey.org, inFlags = ReplayDetect, SequenceDetect, Confidentiality, AllocateMemory, InitManualCredValidation) System.Net Information: 0 : [18776] InitializeSecurityContext(In-Buffers count=2, Out-Buffer length=93, returned code=ContinueNeeded). System.Net Information: 0 : [18776] InitializeSecurityContext(credential = System.Net.SafeFreeCredential_SECURITY, context = 1b5878a0:26e477f8db0, targetName = community.chocolatey.org, inFlags = ReplayDetect, SequenceDetect, Confidentiality, AllocateMemory, InitManualCredValidation) System.Net Information: 0 : [18776] InitializeSecurityContext(In-Buffers count=2, Out-Buffer length=0, returned code=ContinueNeeded). System.Net Information: 0 : [18776] InitializeSecurityContext(credential = System.Net.SafeFreeCredential_SECURITY, context = 1b5878a0:26e477f8db0, targetName = community.chocolatey.org, inFlags = ReplayDetect, SequenceDetect, Confidentiality, AllocateMemory, InitManualCredValidation) System.Net Information: 0 : [18776] InitializeSecurityContext(In-Buffers count=2, Out-Buffer length=0, returned code=ContinueNeeded). System.Net Information: 0 : [18776] InitializeSecurityContext(credential = System.Net.SafeFreeCredential_SECURITY, context = 1b5878a0:26e477f8db0, targetName = community.chocolatey.org, inFlags = ReplayDetect, SequenceDetect, Confidentiality, AllocateMemory, InitManualCredValidation) System.Net Information: 0 : [18776] InitializeSecurityContext(In-Buffers count=2, Out-Buffer length=0, returned code=OK). System.Net Information: 0 : [18776] Remote certificate: [Version] V3 [Subject] CN=*.chocolatey.org, OU=Domain Control Validated Simple Name: *.chocolatey.org DNS Name: chocolatey.org [Issuer] CN=Go Daddy Secure Certificate Authority - G2, OU=http://certs.godaddy.com/repository/, O="GoDaddy.com, Inc.", L=Scottsdale, S=Arizona, C=US Simple Name: Go Daddy Secure Certificate Authority - G2 DNS Name: Go Daddy Secure Certificate Authority - G2 [Serial Number] 574249DBBB2C449C [Not Before] 2021-05-26 13:41:17 [Not After] 2022-05-28 16:22:35 [Thumbprint] 09F7668D2A83CCC73C123B9998BE668690C262F0 [Signature Algorithm] sha256RSA(1.2.840.113549.1.1.11) [Public Key] Algorithm: RSA Length: 4096 Key Blob: 30 82 02 0a 02 82 02 01 00 b7 46 d2 10 8f 7c 69 96 15 b2 ec af 57 10 5d 1f b3 ff 42 96 35 ef e7 ba fc c2 40 65 a8 ce db af 18 21 0b bb 06 7d 70 54 0d ce 8d 70 0a 34 12 53 ea de c0 b0 48 1a c0 ef f7 ad 4d 84 98 ee 5b 99 73 e4 32 68 89 5f 89 10 42 09 a4 3b 04 56 fb aa 5c 29 c3 fa ce 76 13 1f 50 af e7 78 d9 7a.... System.Net Information: 0 : [18776] SecureChannel#13202999 - Remote certificate was verified as valid by the user. System.Net Information: 0 : [18776] ProcessAuthentication(Protocol=Tls12, Cipher=Aes128 128 bit strength, Hash=Sha256 0 bit strength, Key Exchange=44550 255 bit strength). System.Net Information: 0 : [18776] Connection#2055005 - Received status line: Version=1.1, StatusCode=200, StatusDescription=OK. System.Net Information: 0 : [18776] Connection#2055005 - Received headers { Connection: close DataServiceVersion: 1.0; X-Frame-Options: deny CF-Cache-Status: HIT Age: 66415 Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct" Strict-Transport-Security: max-age=12960000 X-Content-Type-Options: nosniff CF-RAY: 68f81d0f0cd415f4-ARN Accept-Ranges: bytes Content-Length: 407 Cache-Control: max-age=31536000 Content-Type: application/xml;charset=utf-8 Date: Thu, 16 Sep 2021 06:42:13 GMT Last-Modified: Wed, 15 Sep 2021 12:15:18 GMT Server: cloudflare }. System.Net Information: 0 : [18776] ConnectStream#51718129::ConnectStream(Buffered 407 bytes.) System.Net Information: 0 : [18776] Associating HttpWebRequest#58849189 with ConnectStream#51718129 System.Net Information: 0 : [18776] Associating HttpWebRequest#58849189 with HttpWebResponse#62809978 System.Net Information: 0 : [18776] Associating HttpWebRequest#28418891 with ServicePoint#59880657 System.Net Information: 0 : [18776] Associating Connection#54443429 with HttpWebRequest#28418891 System.Net.Sockets Information: 0 : [18776] Socket#20228817 - Created connection from 192.168.0.103:56455 to 104.20.74.28:443. System.Net Information: 0 : [18776] Connection#54443429 - Created connection from 192.168.0.103:56455 to 104.20.74.28:443. System.Net Information: 0 : [18776] TlsStream#27921517::.ctor(host=community.chocolatey.org, #certs=0, checkCertificateRevocationList=False, sslProtocols=Default, Tls11, Tls12) System.Net Information: 0 : [18776] Associating HttpWebRequest#28418891 with ConnectStream#49967061 System.Net Information: 0 : [18776] HttpWebRequest#28418891 - Request: GET /api/v2/$metadata HTTP/1.0 System.Net Information: 0 : [18776] ConnectStream#49967061 - Sending headers { User-Agent: NuGet/0.11.1.0 (Microsoft Windows NT 10.0.18363.0) Host: community.chocolatey.org }. System.Net Information: 0 : [18776] SecureChannel#47050372::.ctor(hostname=community.chocolatey.org, #clientCertificates=0, encryptionPolicy=RequireEncryption) System.Net Information: 0 : [18776] SecureChannel#47050372 - Left with 0 client certificates to choose from. System.Net Information: 0 : [18776] Using the cached credential handle. System.Net Information: 0 : [18776] InitializeSecurityContext(credential = System.Net.SafeFreeCredential_SECURITY, context = (null), targetName = community.chocolatey.org, inFlags = ReplayDetect, SequenceDetect, Confidentiality, AllocateMemory, InitManualCredValidation) System.Net Information: 0 : [18776] InitializeSecurityContext(In-Buffer length=0, Out-Buffer length=372, returned code=ContinueNeeded). System.Net Information: 0 : [18776] InitializeSecurityContext(credential = System.Net.SafeFreeCredential_SECURITY, context = 1b5878a0:26e477f8db0, targetName = community.chocolatey.org, inFlags = ReplayDetect, SequenceDetect, Confidentiality, AllocateMemory, InitManualCredValidation) System.Net Information: 0 : [18776] InitializeSecurityContext(In-Buffers count=2, Out-Buffer length=0, returned code=ContinueNeeded). System.Net Information: 0 : [18776] InitializeSecurityContext(credential = System.Net.SafeFreeCredential_SECURITY, context = 1b5878a0:26e477f8db0, targetName = community.chocolatey.org, inFlags = ReplayDetect, SequenceDetect, Confidentiality, AllocateMemory, InitManualCredValidation) System.Net Information: 0 : [18776] InitializeSecurityContext(In-Buffers count=2, Out-Buffer length=0, returned code=ContinueNeeded). System.Net Information: 0 : [18776] InitializeSecurityContext(credential = System.Net.SafeFreeCredential_SECURITY, context = 1b5878a0:26e477f8db0, targetName = community.chocolatey.org, inFlags = ReplayDetect, SequenceDetect, Confidentiality, AllocateMemory, InitManualCredValidation) System.Net Information: 0 : [18776] InitializeSecurityContext(In-Buffers count=2, Out-Buffer length=51, returned code=OK). System.Net Information: 0 : [18776] Remote certificate: [Version] V3 [Subject] CN=*.chocolatey.org, OU=Domain Control Validated Simple Name: *.chocolatey.org DNS Name: chocolatey.org [Issuer] CN=Go Daddy Secure Certificate Authority - G2, OU=http://certs.godaddy.com/repository/, O="GoDaddy.com, Inc.", L=Scottsdale, S=Arizona, C=US Simple Name: Go Daddy Secure Certificate Authority - G2 DNS Name: Go Daddy Secure Certificate Authority - G2 [Serial Number] 574249DBBB2C449C [Not Before] 2021-05-26 13:41:17 [Not After] 2022-05-28 16:22:35 [Thumbprint] 09F7668D2A83CCC73C123B9998BE668690C262F0 [Signature Algorithm] sha256RSA(1.2.840.113549.1.1.11) [Public Key] Algorithm: RSA Length: 4096 Key Blob: 30 82 02 0a 02 82 02 01 00 b7 46 d2 10 8f 7c 69 96 15 b2 ec af 57 10 5d 1f b3 ff 42 96 35 ef e7 ba fc c2 40 65 a8 ce db af 18 21 0b bb 06 7d 70 54 0d ce 8d 70 0a 34 12 53 ea de c0 b0 48 1a c0 ef f7 ad 4d 84 98 ee 5b 99 73 e4 32 68 89 5f 89 10 42 09 a4 3b 04 56 fb aa 5c 29 c3 fa ce 76 13 1f 50 af e7 78 d9 7a.... System.Net Information: 0 : [18776] SecureChannel#47050372 - Remote certificate was verified as valid by the user. System.Net Information: 0 : [18776] ProcessAuthentication(Protocol=Tls12, Cipher=Aes128 128 bit strength, Hash=Sha256 0 bit strength, Key Exchange=44550 255 bit strength). System.Net Information: 0 : [18776] Connection#54443429 - Received status line: Version=1.1, StatusCode=200, StatusDescription=OK. System.Net Information: 0 : [18776] Connection#54443429 - Received headers { Connection: close Vary: Accept-Encoding DataServiceVersion: 2.0; X-Frame-Options: deny CF-Cache-Status: HIT Age: 6345 Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct" Strict-Transport-Security: max-age=12960000 X-Content-Type-Options: nosniff CF-RAY: 68f81d0f6dcf15f4-ARN Cache-Control: max-age=86400 Content-Type: application/xml;charset=utf-8 Date: Thu, 16 Sep 2021 06:42:13 GMT Last-Modified: Thu, 16 Sep 2021 04:56:28 GMT Server: cloudflare }. System.Net Information: 0 : [18776] ConnectStream#20800170::ConnectStream(Buffered -1 bytes.) System.Net Information: 0 : [18776] Associating HttpWebRequest#28418891 with ConnectStream#20800170 System.Net Information: 0 : [18776] Associating HttpWebRequest#28418891 with HttpWebResponse#52983808 System.Net Information: 0 : [18776] ContentLength=-1 - Supports prereleases? 'True'. - Is ServiceBased? 'True'. System.Net Information: 0 : [18776] Associating HttpWebRequest#39661040 with ServicePoint#59880657 System.Net Information: 0 : [18776] Associating Connection#21405046 with HttpWebRequest#39661040 System.Net.Sockets Information: 0 : [18776] Socket#58427690 - Created connection from 192.168.0.103:56456 to 104.20.74.28:443. System.Net Information: 0 : [18776] Connection#21405046 - Created connection from 192.168.0.103:56456 to 104.20.74.28:443. System.Net Information: 0 : [18776] TlsStream#35022440::.ctor(host=community.chocolatey.org, #certs=0, checkCertificateRevocationList=False, sslProtocols=Default, Tls11, Tls12) System.Net Information: 0 : [18776] Associating HttpWebRequest#39661040 with ConnectStream#46766508 System.Net Information: 0 : [18776] HttpWebRequest#39661040 - Request: GET /api/v2/Packages()?$filter=(tolower(Id)%20eq%20'git')%20and%20IsLatestVersion HTTP/1.1 System.Net Information: 0 : [18776] ConnectStream#46766508 - Sending headers { DataServiceVersion: 1.0;NetFx MaxDataServiceVersion: 2.0;NetFx User-Agent: Chocolatey Core Accept: application/atom+xml,application/xml Accept-Charset: UTF-8 Host: community.chocolatey.org Accept-Encoding: gzip, deflate }. System.Net Information: 0 : [18776] SecureChannel#18245395::.ctor(hostname=community.chocolatey.org, #clientCertificates=0, encryptionPolicy=RequireEncryption) System.Net Information: 0 : [18776] SecureChannel#18245395 - Left with 0 client certificates to choose from. System.Net Information: 0 : [18776] Using the cached credential handle. System.Net Information: 0 : [18776] InitializeSecurityContext(credential = System.Net.SafeFreeCredential_SECURITY, context = (null), targetName = community.chocolatey.org, inFlags = ReplayDetect, SequenceDetect, Confidentiality, AllocateMemory, InitManualCredValidation) System.Net Information: 0 : [18776] InitializeSecurityContext(In-Buffer length=0, Out-Buffer length=372, returned code=ContinueNeeded). System.Net Information: 0 : [18776] InitializeSecurityContext(credential = System.Net.SafeFreeCredential_SECURITY, context = 1b5878a0:26e4798c880, targetName = community.chocolatey.org, inFlags = ReplayDetect, SequenceDetect, Confidentiality, AllocateMemory, InitManualCredValidation) System.Net Information: 0 : [18776] InitializeSecurityContext(In-Buffers count=2, Out-Buffer length=0, returned code=ContinueNeeded). System.Net Information: 0 : [18776] InitializeSecurityContext(credential = System.Net.SafeFreeCredential_SECURITY, context = 1b5878a0:26e4798c880, targetName = community.chocolatey.org, inFlags = ReplayDetect, SequenceDetect, Confidentiality, AllocateMemory, InitManualCredValidation) System.Net Information: 0 : [18776] InitializeSecurityContext(In-Buffers count=2, Out-Buffer length=0, returned code=ContinueNeeded). System.Net Information: 0 : [18776] InitializeSecurityContext(credential = System.Net.SafeFreeCredential_SECURITY, context = 1b5878a0:26e4798c880, targetName = community.chocolatey.org, inFlags = ReplayDetect, SequenceDetect, Confidentiality, AllocateMemory, InitManualCredValidation) System.Net Information: 0 : [18776] InitializeSecurityContext(In-Buffers count=2, Out-Buffer length=51, returned code=OK). System.Net Information: 0 : [18776] Remote certificate: [Version] V3 [Subject] CN=*.chocolatey.org, OU=Domain Control Validated Simple Name: *.chocolatey.org DNS Name: chocolatey.org [Issuer] CN=Go Daddy Secure Certificate Authority - G2, OU=http://certs.godaddy.com/repository/, O="GoDaddy.com, Inc.", L=Scottsdale, S=Arizona, C=US Simple Name: Go Daddy Secure Certificate Authority - G2 DNS Name: Go Daddy Secure Certificate Authority - G2 [Serial Number] 574249DBBB2C449C [Not Before] 2021-05-26 13:41:17 [Not After] 2022-05-28 16:22:35 [Thumbprint] 09F7668D2A83CCC73C123B9998BE668690C262F0 [Signature Algorithm] sha256RSA(1.2.840.113549.1.1.11) [Public Key] Algorithm: RSA Length: 4096 Key Blob: 30 82 02 0a 02 82 02 01 00 b7 46 d2 10 8f 7c 69 96 15 b2 ec af 57 10 5d 1f b3 ff 42 96 35 ef e7 ba fc c2 40 65 a8 ce db af 18 21 0b bb 06 7d 70 54 0d ce 8d 70 0a 34 12 53 ea de c0 b0 48 1a c0 ef f7 ad 4d 84 98 ee 5b 99 73 e4 32 68 89 5f 89 10 42 09 a4 3b 04 56 fb aa 5c 29 c3 fa ce 76 13 1f 50 af e7 78 d9 7a.... System.Net Information: 0 : [18776] SecureChannel#18245395 - Remote certificate was verified as valid by the user. System.Net Information: 0 : [18776] ProcessAuthentication(Protocol=Tls12, Cipher=Aes128 128 bit strength, Hash=Sha256 0 bit strength, Key Exchange=44550 255 bit strength). System.Net Information: 0 : [18776] Connection#21405046 - Received status line: Version=1.1, StatusCode=200, StatusDescription=OK. System.Net Information: 0 : [18776] Connection#21405046 - Received headers { Connection: keep-alive CF-Rate-Limit-Rule-Id: 91521f62cce24ed599e39cfee7822a69 CF-Rate-Limit-Action: simulate Retry-After: 24773 DataServiceVersion: 2.0; X-Frame-Options: deny CF-Cache-Status: HIT Age: 1124 Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct" Vary: Accept-Encoding Strict-Transport-Security: max-age=12960000 X-Content-Type-Options: nosniff CF-RAY: 68f81d0fed0815fc-ARN Accept-Ranges: bytes Content-Length: 7755 Cache-Control: max-age=10800 Content-Type: application/atom+xml;charset=utf-8 Date: Thu, 16 Sep 2021 06:42:13 GMT Last-Modified: Thu, 16 Sep 2021 06:23:29 GMT Server: cloudflare }. System.Net Information: 0 : [18776] ConnectStream#29990828::ConnectStream(Buffered 7755 bytes.) System.Net Information: 0 : [18776] Associating HttpWebRequest#39661040 with ConnectStream#29990828 System.Net Information: 0 : [18776] Associating HttpWebRequest#39661040 with HttpWebResponse#1482002 System.Net Information: 0 : [18776] ContentLength=7755 Package 'git' found on source 'https://community.chocolatey.org/api/v2/' System.Net Information: 0 : [19784] Associating HttpWebRequest#40872486 with ServicePoint#59880657 System.Net Information: 0 : [19784] Associating Connection#21405046 with HttpWebRequest#40872486 System.Net Information: 0 : [19784] Associating HttpWebRequest#40872486 with ConnectStream#15179193 System.Net Information: 0 : [19784] HttpWebRequest#40872486 - Request: GET /api/v2/FindPackagesById()?id='git.install' HTTP/1.1 System.Net Information: 0 : [19784] ConnectStream#15179193 - Sending headers { DataServiceVersion: 1.0;NetFx MaxDataServiceVersion: 2.0;NetFx User-Agent: Chocolatey Core Accept: application/atom+xml,application/xml Accept-Charset: UTF-8 Host: community.chocolatey.org Accept-Encoding: gzip, deflate }. System.Net Information: 0 : [19784] Connection#21405046 - Received status line: Version=1.1, StatusCode=200, StatusDescription=OK. System.Net Information: 0 : [19784] Connection#21405046 - Received headers { Connection: keep-alive CF-Rate-Limit-Rule-Id: 0a0a90f72a0c41b686e1b08c44a8270d CF-Rate-Limit-Action: simulate Retry-After: 24774 DataServiceVersion: 2.0; X-Frame-Options: deny CF-Cache-Status: HIT Age: 2067 Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct" Vary: Accept-Encoding Strict-Transport-Security: max-age=12960000 X-Content-Type-Options: nosniff CF-RAY: 68f81d10deda15fc-ARN Accept-Ranges: bytes Content-Length: 244010 Cache-Control: max-age=1800 Content-Type: application/atom+xml;charset=utf-8 Date: Thu, 16 Sep 2021 06:42:13 GMT Last-Modified: Thu, 16 Sep 2021 06:07:46 GMT Server: cloudflare }. System.Net Information: 0 : [19784] ConnectStream#43935528::ConnectStream(Buffered 244010 bytes.) System.Net Information: 0 : [19784] Associating HttpWebRequest#40872486 with ConnectStream#43935528 System.Net Information: 0 : [19784] Associating HttpWebRequest#40872486 with HttpWebResponse#24646377 System.Net Information: 0 : [19784] ContentLength=244010 System.Net Information: 0 : [19784] Associating HttpWebRequest#65853382 with ServicePoint#35721828 System.Net Information: 0 : [19784] Associating Connection#20630489 with HttpWebRequest#65853382 System.Net.Sockets Information: 0 : [19784] Socket#46000189 - Created connection from 192.168.0.103:56457 to 104.20.74.28:80. System.Net Information: 0 : [19784] Connection#20630489 - Created connection from 192.168.0.103:56457 to 104.20.74.28:80. System.Net Information: 0 : [19784] Associating HttpWebRequest#65853382 with ConnectStream#27524655 System.Net Information: 0 : [19784] HttpWebRequest#65853382 - Request: GET /api/v2/FindPackagesById?id='git.install'&$skiptoken='git.install','2.15.0' HTTP/1.1 System.Net Information: 0 : [19784] ConnectStream#27524655 - Sending headers { MaxDataServiceVersion: 2.0;NetFx User-Agent: Chocolatey Core Accept: application/atom+xml,application/xml Accept-Charset: UTF-8 Host: community.chocolatey.org Accept-Encoding: gzip, deflate Connection: Keep-Alive }. System.Net Information: 0 : [19784] Connection#20630489 - Received status line: Version=1.1, StatusCode=301, StatusDescription=Moved Permanently. System.Net Information: 0 : [19784] Connection#20630489 - Received headers { Transfer-Encoding: chunked Connection: keep-alive CF-Rate-Limit-Rule-Id: 0a0a90f72a0c41b686e1b08c44a8270d CF-Rate-Limit-Action: simulate Retry-After: 24773 Vary: Accept-Encoding X-Content-Type-Options: nosniff CF-RAY: 68f81d11883c16a5-ARN Cache-Control: max-age=3600 Date: Thu, 16 Sep 2021 06:42:13 GMT Expires: Thu, 16 Sep 2021 07:42:13 GMT Location: https://community.chocolatey.org/api/v2/FindPackagesById?id='git.install'&$skiptoken='git.install','2.15.0' Server: cloudflare }. System.Net Information: 0 : [19784] ConnectStream#17027751::ConnectStream(Buffered -1 bytes.) System.Net Information: 0 : [19784] Associating HttpWebRequest#65853382 with ConnectStream#17027751 System.Net Information: 0 : [19784] Associating HttpWebRequest#65853382 with HttpWebResponse#23040611 System.Net Warning: 0 : [19784] HttpWebRequest#65853382::() - Error code 301 was received from server response. System.Net Warning: 0 : [19784] HttpWebRequest#65853382::() - Resubmitting request. System.Net Information: 0 : [19784] Associating HttpWebRequest#65853382 with ServicePoint#59880657 System.Net Information: 0 : [19784] Associating Connection#21405046 with HttpWebRequest#65853382 System.Net Information: 0 : [19784] Associating HttpWebRequest#65853382 with ConnectStream#39144371 System.Net Information: 0 : [19784] HttpWebRequest#65853382 - Request: GET /api/v2/FindPackagesById?id='git.install'&$skiptoken='git.install','2.15.0' HTTP/1.1 System.Net Information: 0 : [19784] ConnectStream#39144371 - Sending headers { MaxDataServiceVersion: 2.0;NetFx User-Agent: Chocolatey Core Accept: application/atom+xml,application/xml Accept-Charset: UTF-8 Accept-Encoding: gzip, deflate Host: community.chocolatey.org }. System.Net Information: 0 : [19784] Connection#21405046 - Received status line: Version=1.1, StatusCode=200, StatusDescription=OK. System.Net Information: 0 : [19784] Connection#21405046 - Received headers { Connection: keep-alive CF-Rate-Limit-Rule-Id: 0a0a90f72a0c41b686e1b08c44a8270d CF-Rate-Limit-Action: simulate Retry-After: 24773 DataServiceVersion: 2.0; X-Frame-Options: deny CF-Cache-Status: HIT Age: 2065 Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct" Vary: Accept-Encoding Strict-Transport-Security: max-age=12960000 X-Content-Type-Options: nosniff CF-RAY: 68f81d11a87615fc-ARN Accept-Ranges: bytes Content-Length: 287711 Cache-Control: max-age=1800 Content-Type: application/atom+xml;charset=utf-8 Date: Thu, 16 Sep 2021 06:42:13 GMT Last-Modified: Thu, 16 Sep 2021 06:07:48 GMT Server: cloudflare }. System.Net Information: 0 : [19784] ConnectStream#39085184::ConnectStream(Buffered 287711 bytes.) System.Net Information: 0 : [19784] Associating HttpWebRequest#65853382 with ConnectStream#39085184 System.Net Information: 0 : [19784] Associating HttpWebRequest#65853382 with HttpWebResponse#37605516 System.Net Information: 0 : [19784] ContentLength=287711 System.Net Information: 0 : [19784] Associating HttpWebRequest#39792847 with ServicePoint#35721828 System.Net Information: 0 : [19784] Associating Connection#20630489 with HttpWebRequest#39792847 System.Net Information: 0 : [19784] Associating HttpWebRequest#39792847 with ConnectStream#55297085 System.Net Information: 0 : [19784] HttpWebRequest#39792847 - Request: GET /api/v2/FindPackagesById?id='git.install'&$skiptoken='git.install','2.31.0' HTTP/1.1 System.Net Information: 0 : [19784] ConnectStream#55297085 - Sending headers { MaxDataServiceVersion: 2.0;NetFx User-Agent: Chocolatey Core Accept: application/atom+xml,application/xml Accept-Charset: UTF-8 Host: community.chocolatey.org Accept-Encoding: gzip, deflate }. System.Net Information: 0 : [19784] Connection#20630489 - Received status line: Version=1.1, StatusCode=301, StatusDescription=Moved Permanently. System.Net Information: 0 : [19784] Connection#20630489 - Received headers { Transfer-Encoding: chunked Connection: keep-alive CF-Rate-Limit-Rule-Id: 0a0a90f72a0c41b686e1b08c44a8270d CF-Rate-Limit-Action: simulate Retry-After: 24773 Vary: Accept-Encoding X-Content-Type-Options: nosniff CF-RAY: 68f81d11f90016a5-ARN Cache-Control: max-age=3600 Date: Thu, 16 Sep 2021 06:42:13 GMT Expires: Thu, 16 Sep 2021 07:42:13 GMT Location: https://community.chocolatey.org/api/v2/FindPackagesById?id='git.install'&$skiptoken='git.install','2.31.0' Server: cloudflare }. System.Net Information: 0 : [19784] ConnectStream#40249861::ConnectStream(Buffered -1 bytes.) System.Net Information: 0 : [19784] Associating HttpWebRequest#39792847 with ConnectStream#40249861 System.Net Information: 0 : [19784] Associating HttpWebRequest#39792847 with HttpWebResponse#66722439 System.Net Warning: 0 : [19784] HttpWebRequest#39792847::() - Error code 301 was received from server response. System.Net Warning: 0 : [19784] HttpWebRequest#39792847::() - Resubmitting request. System.Net Information: 0 : [19784] Associating HttpWebRequest#39792847 with ServicePoint#59880657 System.Net Information: 0 : [19784] Associating Connection#21405046 with HttpWebRequest#39792847 System.Net Information: 0 : [19784] Associating HttpWebRequest#39792847 with ConnectStream#57448253 System.Net Information: 0 : [19784] HttpWebRequest#39792847 - Request: GET /api/v2/FindPackagesById?id='git.install'&$skiptoken='git.install','2.31.0' HTTP/1.1 System.Net Information: 0 : [19784] ConnectStream#57448253 - Sending headers { MaxDataServiceVersion: 2.0;NetFx User-Agent: Chocolatey Core Accept: application/atom+xml,application/xml Accept-Charset: UTF-8 Accept-Encoding: gzip, deflate Host: community.chocolatey.org }. System.Net Information: 0 : [19784] Connection#21405046 - Received status line: Version=1.1, StatusCode=200, StatusDescription=OK. System.Net Information: 0 : [19784] Connection#21405046 - Received headers { Connection: keep-alive CF-Rate-Limit-Rule-Id: 0a0a90f72a0c41b686e1b08c44a8270d CF-Rate-Limit-Action: simulate Retry-After: 24773 DataServiceVersion: 2.0; X-Frame-Options: deny CF-Cache-Status: HIT Age: 2064 Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct" Vary: Accept-Encoding Strict-Transport-Security: max-age=12960000 X-Content-Type-Options: nosniff CF-RAY: 68f81d12196d15fc-ARN Accept-Ranges: bytes Content-Length: 170881 Cache-Control: max-age=1800 Content-Type: application/atom+xml;charset=utf-8 Date: Thu, 16 Sep 2021 06:42:13 GMT Last-Modified: Thu, 16 Sep 2021 06:07:49 GMT Server: cloudflare }. System.Net Information: 0 : [19784] ConnectStream#26920182::ConnectStream(Buffered 170881 bytes.) System.Net Information: 0 : [19784] Associating HttpWebRequest#39792847 with ConnectStream#26920182 System.Net Information: 0 : [19784] Associating HttpWebRequest#39792847 with HttpWebResponse#1915934 System.Net Information: 0 : [19784] ContentLength=170881 System.Net Information: 0 : [18776] Associating HttpWebRequest#238043 with ServicePoint#59880657 System.Net Information: 0 : [18776] Associating Connection#21405046 with HttpWebRequest#238043 System.Net Information: 0 : [18776] Associating HttpWebRequest#238043 with ConnectStream#2142393 System.Net Information: 0 : [18776] HttpWebRequest#238043 - Request: GET /api/v2/package/git.install/2.33.0.2 HTTP/1.0 System.Net Information: 0 : [18776] ConnectStream#2142393 - Sending headers { User-Agent: NuGet Core/0.11.1.0 (Microsoft Windows NT 10.0.18363.0) NuGet-Operation: Install-Dependency NuGet-DependentPackage: git Host: community.chocolatey.org }. System.Net Information: 0 : [18776] Connection#21405046 - Received status line: Version=1.1, StatusCode=302, StatusDescription=Found. System.Net Information: 0 : [18776] Connection#21405046 - Received headers { Connection: close X-Frame-Options: deny CF-Cache-Status: DYNAMIC Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct" Strict-Transport-Security: max-age=12960000 X-Content-Type-Options: nosniff CF-RAY: 68f81d127a7815fc-ARN Cache-Control: private Content-Type: text/html; charset=utf-8 Date: Thu, 16 Sep 2021 06:42:13 GMT Location: https://packages.chocolatey.org/git.install.2.33.0.2.nupkg Server: cloudflare }. System.Net Information: 0 : [18776] ConnectStream#19281542::ConnectStream(Buffered -1 bytes.) System.Net Information: 0 : [18776] Associating HttpWebRequest#238043 with ConnectStream#19281542 System.Net Information: 0 : [18776] Associating HttpWebRequest#238043 with HttpWebResponse#39316155 System.Net Warning: 0 : [18776] HttpWebRequest#238043::() - Error code 302 was received from server response. System.Net Warning: 0 : [18776] HttpWebRequest#238043::() - Resubmitting request. System.Net Information: 0 : [18776] Associating HttpWebRequest#238043 with ServicePoint#18301082 System.Net Information: 0 : [18776] Associating Connection#30492010 with HttpWebRequest#238043 System.Net.Sockets Information: 0 : [18776] Socket#5992637 - Created connection from 192.168.0.103:56458 to 146.112.56.211:443. System.Net Information: 0 : [18776] Connection#30492010 - Created connection from 192.168.0.103:56458 to 146.112.56.211:443. System.Net Information: 0 : [18776] TlsStream#15641626::.ctor(host=packages.chocolatey.org, #certs=0, checkCertificateRevocationList=False, sslProtocols=Default, Tls11, Tls12) System.Net Information: 0 : [18776] Associating HttpWebRequest#238043 with ConnectStream#6556909 System.Net Information: 0 : [18776] HttpWebRequest#238043 - Request: GET /git.install.2.33.0.2.nupkg HTTP/1.0 System.Net Information: 0 : [18776] ConnectStream#6556909 - Sending headers { User-Agent: NuGet Core/0.11.1.0 (Microsoft Windows NT 10.0.18363.0) NuGet-Operation: Install-Dependency NuGet-DependentPackage: git Host: packages.chocolatey.org }. System.Net Information: 0 : [18776] SecureChannel#59012183::.ctor(hostname=packages.chocolatey.org, #clientCertificates=0, encryptionPolicy=RequireEncryption) System.Net Information: 0 : [18776] SecureChannel#59012183 - Left with 0 client certificates to choose from. System.Net Information: 0 : [18776] Using the cached credential handle. System.Net Information: 0 : [18776] InitializeSecurityContext(credential = System.Net.SafeFreeCredential_SECURITY, context = (null), targetName = packages.chocolatey.org, inFlags = ReplayDetect, SequenceDetect, Confidentiality, AllocateMemory, InitManualCredValidation) System.Net Information: 0 : [18776] InitializeSecurityContext(In-Buffer length=0, Out-Buffer length=179, returned code=ContinueNeeded). System.Net Information: 0 : [18776] InitializeSecurityContext(credential = System.Net.SafeFreeCredential_SECURITY, context = 1b5878a0:26e4798c8e0, targetName = packages.chocolatey.org, inFlags = ReplayDetect, SequenceDetect, Confidentiality, AllocateMemory, InitManualCredValidation) System.Net Information: 0 : [18776] InitializeSecurityContext(In-Buffers count=2, Out-Buffer length=0, returned code=ContinueNeeded). System.Net Information: 0 : [18776] InitializeSecurityContext(credential = System.Net.SafeFreeCredential_SECURITY, context = 1b5878a0:26e4798c8e0, targetName = packages.chocolatey.org, inFlags = ReplayDetect, SequenceDetect, Confidentiality, AllocateMemory, InitManualCredValidation) System.Net Information: 0 : [18776] InitializeSecurityContext(In-Buffers count=2, Out-Buffer length=0, returned code=ContinueNeeded). System.Net Information: 0 : [18776] InitializeSecurityContext(credential = System.Net.SafeFreeCredential_SECURITY, context = 1b5878a0:26e4798c8e0, targetName = packages.chocolatey.org, inFlags = ReplayDetect, SequenceDetect, Confidentiality, AllocateMemory, InitManualCredValidation) System.Net Information: 0 : [18776] InitializeSecurityContext(In-Buffers count=2, Out-Buffer length=0, returned code=ContinueNeeded). System.Net Information: 0 : [18776] InitializeSecurityContext(credential = System.Net.SafeFreeCredential_SECURITY, context = 1b5878a0:26e4798c8e0, targetName = packages.chocolatey.org, inFlags = ReplayDetect, SequenceDetect, Confidentiality, AllocateMemory, InitManualCredValidation) System.Net Information: 0 : [18776] InitializeSecurityContext(In-Buffers count=2, Out-Buffer length=126, returned code=ContinueNeeded). System.Net Information: 0 : [18776] InitializeSecurityContext(credential = System.Net.SafeFreeCredential_SECURITY, context = 1b5878a0:26e4798c8e0, targetName = packages.chocolatey.org, inFlags = ReplayDetect, SequenceDetect, Confidentiality, AllocateMemory, InitManualCredValidation) System.Net Information: 0 : [18776] InitializeSecurityContext(In-Buffers count=2, Out-Buffer length=0, returned code=ContinueNeeded). System.Net Information: 0 : [18776] InitializeSecurityContext(credential = System.Net.SafeFreeCredential_SECURITY, context = 1b5878a0:26e4798c8e0, targetName = packages.chocolatey.org, inFlags = ReplayDetect, SequenceDetect, Confidentiality, AllocateMemory, InitManualCredValidation) System.Net Information: 0 : [18776] InitializeSecurityContext(In-Buffers count=2, Out-Buffer length=0, returned code=ContinueNeeded). System.Net Information: 0 : [18776] InitializeSecurityContext(credential = System.Net.SafeFreeCredential_SECURITY, context = 1b5878a0:26e4798c8e0, targetName = packages.chocolatey.org, inFlags = ReplayDetect, SequenceDetect, Confidentiality, AllocateMemory, InitManualCredValidation) System.Net Information: 0 : [18776] InitializeSecurityContext(In-Buffers count=2, Out-Buffer length=0, returned code=OK). System.Net Information: 0 : [18776] Remote certificate: [Version] V3 [Subject] CN=packages.chocolatey.org, O="Cisco Systems, Inc.", L=San Francisco, S=California, C=US Simple Name: packages.chocolatey.org DNS Name: packages.chocolatey.org [Issuer] CN=Cisco Umbrella Secondary SubCA lon-SG, O=Cisco Simple Name: Cisco Umbrella Secondary SubCA lon-SG DNS Name: Cisco Umbrella Secondary SubCA lon-SG [Serial Number] 13BBBF2C [Not Before] 2021-09-12 20:48:32 [Not After] 2021-09-17 20:48:32 [Thumbprint] 302BFB7678F2D2BF0B658E4CFACBBDC40EE2B724 [Signature Algorithm] sha256RSA(1.2.840.113549.1.1.11) [Public Key] Algorithm: RSA Length: 2048 Key Blob: 30 82 01 0a 02 82 01 01 00 b5 57 64 c2 f2 e3 99 36 36 60 a5 53 27 50 eb 28 ba 03 04 ab f7 2b 31 41 55 b0 1e b0 5d bd 81 76 f4 7b b0 5c bf 61 47 df fb 6d 55 28 3f 2a a3 f7 c9 df 03 a6 30 76 70 ec e4 35 20 f1 cd 75 c0 10 52 e0 b3 f4 19 6d 8f ea e3 d9 e3 0b 4c 05 cb b9 f5 d0 d1 1d 7a 5f cc a0 4b a2 76 87 38 36 d2 72 cd 38 ea 03 68 5e ad 41 91 ce b8 1d 7e 97 3f e.... System.Net Information: 0 : [18776] SecureChannel#59012183 - Remote certificate has errors: System.Net Information: 0 : [18776] SecureChannel#59012183 - A certificate chain processed, but terminated in a root certificate which is not trusted by the trust provider. System.Net Information: 0 : [18776] SecureChannel#59012183 - Remote certificate was verified as invalid by the user. System.Net Error: 0 : [18776] Exception in HttpWebRequest#238043:: - The underlying connection was closed: Could not establish trust relationship for the SSL/TLS secure channel.. System.Net Error: 0 : [18776] Exception in HttpWebRequest#238043::GetResponse - The underlying connection was closed: Could not establish trust relationship for the SSL/TLS secure channel.. git not installed. An error occurred during installation: The underlying connection was closed: Could not establish trust relationship for the SSL/TLS secure channel. git package files install failed with exit code 1. Performing other installation steps. No package information as package is null. No package information to save as package is null. The install of git was NOT successful. git not installed. An error occurred during installation: The underlying connection was closed: Could not establish trust relationship for the SSL/TLS secure channel. Chocolatey installed 0/1 packages. 1 packages failed. See the log for details (C:\ProgramData\chocolatey\logs\chocolatey.log). Failures - git (exited 1) - git not installed. An error occurred during installation: The underlying connection was closed: Could not establish trust relationship for the SSL/TLS secure channel. Exiting with 1 ~~~

Ok. Yeah. It seems Cisco Umbrella is handing a different certificate each time, but all signs point to the Cisco Umbrella system being the issue. I would coordinate with whomever manages that for you.

Hello @steviecoaster, that's extremely helpful. Thank you!

@steviecoaster i am a bit confused, Cisco Umbrella is being used from chocolatey side, right ? If a different cert is handed each time, this sounds like a chocolatey issue rather than a client issue. i was unable to test the solution for now due to other reasons, but i would expect that if a different cert is handed each time that maybe, the underlying system needs to be fixed.

As far as I am aware, we don't use any Cisco products. From a brief look at the product page it looks like Cisco Umbrella uses some kind of VPN, which would likely involve proxying certificates at some point in the chain. Not sure exactly where it's coming into play here, but to the best of my knowledge, no Cisco products are involved in our infrastructure.

That's correct @vexx32, no cisco gear on our side.

Based on what's been said, my very rudimentary understanding of Cisco Umbrella, and my also rudimentary understanding of how some other "Next Generation" firewall products work it sounds like Cisco Umbrella is acting as a man in the middle proxy. Typically the certificates for these devices are installed to the system through Group Policy or some other means, and they're inserted as Trusted Roots or Trusted Intermediates. As it seems Cisco Umbrella is giving different certs, perhaps they are load balancing or geo distributing their workload and thus it's different certs.

The Chocolatey certificate is issues by GoDaddy from what I can tell, so any cert other than that one would be an environmental injection from somewhere. Now my question would be: does a browser complain when you go to https://chocolatey.org? And if it doesn't, what certificate does the browser report is being used?

If a browser has no issues with it, I would check the certificate stores themselves to find the Cisco one and determine where it's stored. If it's stored in the proper place (Trusted Root Certification Authorities or Intermediate Certification Authorities), and Chocolatey isn't using them, then I would say it's a Chocolatey issue to ensure we're pulling from the proper OS store. That being said, in a past job which used "next gen" firewalls I had no issues with Chocolatey so I'm inclined to say Chocolatey is using the proper certs, and perhaps the certs on the end system aren't installed "properly".

An example of the certification path of chocolatey.org with the root cert in the trusted roots store:

@corbob Thanks for the information.

does a browser complain when you go to https://chocolatey.org? And if it doesn't, what certificate does the browser report is being used?

No complains from browser. Uses Go Daddy as in your screenshot.

would check the certificate stores themselves to find the Cisco one and determine where it's stored. If it's stored in the proper place

With @steviecoaster 's PS script, the Cisco certs (expires the same day) are installed in TrustedPeople. I have moved to Trusted Root Certification Authorities store. But it doesnt seem to solve the problem.

The certs retrieved by the script are the ones being offered by the server, but they're not the root certs, which is what the .net layer is complaining about.

Presumably because these certs are short lived, the Cisco infra is likely supposed to have installed the root certs on your machines, but for whatever reason that hasn't happened.

Y'all will need to follow up with whoever manages your infra to get to the bottom of this, I think.

@vexx32 Thanks for the clarification, shall do that!

I can confirm after talking with IT that the issue is in fact the Cisco Umbrella system. The fix according to IT is to have *.chocolatey.org on the global exclusion on the policy list for Cisco Umbrella. Thank you very much for all of the help and support.

Glad y'all could sort it out! I'll close this one for now, then. 🙂

chocolatey / choco

The underlying connection was closed: Could not establish trust relationship for the SSL/TLS secure channel. #2350

Output Log