Running mix local.hex fails with “Unknown CA”:

> mix local.hex
** (Mix) httpc request failed with: {:failed_connect, [{:to_address, {~c"builds.hex.pm", 443}}, {:inet, [:inet], {:tls_alert, {:unknown_ca, ~c"TLS client: In state wait_cert_cr at ssl_handshake.erl:2138 generated CLIENT ALERT: Fatal - Unknown CA\n"}}}]}

Could not install Hex because Mix could not download metadata at https://builds.hex.pm/installs/hex-1.x.csv.

Alternatively, you can compile and install Hex directly with this command:

    $ mix archive.install github hexpm/hex branch latest

I can download https://builds.hex.pm/installs/hex-1.x.csv from a web browser find; the TLS cert validates as expected.

Does anyone know why this is happening and how I might be able to fix it?

I’m running:

• Elixir 1.15.6 (compiled with Erlang/OTP 26)
• OTP 26.1

The problem seems to affect multiple versions of Windows, I’ve tested 11 and 10 so far.