1882215 - New Windows 11 install shows CERTIFICATE_VERIFY_FAILED error with no advice during bootstrap

Status: NEW

(Conduit :: moz-phab, defect)

Description

[Ashley Hale [:ahale]]

To reproduce:

• Format drive and install Windows 11 (e.g. in a VM should be able to repro)
• Follow the directions on https://firefox-source-docs.mozilla.org/setup/windows_build.html without having visited phabricator.services.mozilla.org or pypi.org first.
• Answer every question during bootstrap, and in particular say yes to planning on submitting patches.

Actual result:

• See error messages at the end of bootstrap output:

Successfully installed Click-8.1.7 Jinja2-3.1.3 MarkupSafe-2.0.1 MozPhab-1.5.1 PyYAML-6.0.1 appdirs-1.4.4 attrs-23.2.0 certifi-2024.2.2 cffi-1.16.0 colorama-0.4.6 diskcache-5.6.3 distro-1.9.0 glean-parser-6.1.1 glean-sdk-50.1.4 jsonschema-4.21.1 jsonschema-specifications-2023.12.1 packaging-23.2 pathspec-0.12.1 pycparser-2.21 python-hglib-2.6.2 referencing-0.33.0 rpds-py-0.18.0 sentry-sdk-1.40.5 urllib3-2.2.1 yamllint-1.35.1

[notice] A new release of pip is available: 23.3.2 -> 24.0
[notice] To update, run: D:\mozilla-build\python3\python3.exe -m pip install --upgrade pip
URLError: <urlopen error [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: unable to get local issuer certificate (_ssl.c:1006)>
Run moz-phab again with '--trace' to show debugging output
Mozilla collects data to improve the developer experience.
To learn more about the data we intend to collect, read here:
  https://firefox-source-docs.mozilla.org/build/buildsystem/telemetry.html
If you have questions, please ask in #build on Matrix:
  https://chat.mozilla.org/#/room/#build:mozilla.org

Expected result:

• Either the bootstrap should not produce errors, or useful advice should be given (like a link to a URL to visit).

Workaround:

• Per instructions in https://bugzilla.mozilla.org/show_bug.cgi?id=1617906 the error goes away only if you visit the (unmentioned) websites, which adds the SSL certs for these sites to the Windows cert store.