Not really sure where to start looking.
iex(22)> :ssl.connect('THE_SERVICE', 443, ssl_opts)
warning: single-quoted strings represent charlists. Use ~c"" if you indeed want a charlist or use "" instead
└─ iex:22:14
10:12:43.936 mfa=:ssl_handshake.path_validation_alert/3 [notice] TLS :client: In state :certify at ssl_handshake.erl:2199 generated CLIENT ALERT: Fatal - Unsupported Certificate
- {:key_usage_mismatch,
{{:Extension, {2, 5, 29, 15}, true, [:keyCertSign, :cRLSign]},
{:Extension, {2, 5, 29, 37}, false,
[{1, 3, 6, 1, 5, 5, 7, 3, 2}, {1, 3, 6, 1, 5, 5, 7, 3, 1}]}}}
{:error,
{:tls_alert,
{:unsupported_certificate,
~c"TLS client: In state certify at ssl_handshake.erl:2199 generated CLIENT ALERT: Fatal - Unsupported Certificate\n {key_usage_mismatch,{{'Extension',{2,5,29,15},true,[keyCertSign,cRLSign]},\n {'Extension',{2,5,29,37},\n false,\n [{1,3,6,1,5,5,7,3,2},\n {1,3,6,1,5,5,7,3,1}]}}}"}}}
Describe the bug
On OTP 27.1.3 connection to an API endpoint stopped working, and it worked fine with OTP 26.
Not really sure where to start looking.
Affected versions
27.1.3