[Windows] CERTIFICATE_VERIFY_FAILED during sqlite3 build hooks execution

[Jambtutor]

Description

It is my first time using drift, and I am running into an issue while setting up the package. Whenever I run the build hooks on my Windows PC, the process fails with a HandshakeException (CERTIFICATE_VERIFY_FAILED).

This error occurs when the source in pubspec.yaml is set to either sqlite3mc or sqlite3. I also tried using the encrypted_drift alternative, but I still get the exact same handshake error.

Environment

• OS: Windows 10 Pro 64-bit (22H2, 2009)
• Flutter Version: 3.41.4 (Channel stable)
• Dart Version: ^3.11.1
• Drift Version: ^2.32.0

pubspec.yaml setup

name: demo_project
description: "Replicating running build hooks error"
publish_to: 'none'
version: 0.1.0+1

environment:
  sdk: ^3.11.1

dependencies:
  flutter:
    sdk: flutter
  drift: ^2.32.0
  drift_flutter: ^0.3.0
  path_provider: ^2.1.5

dev_dependencies:
  flutter_test:
    sdk: flutter
  flutter_lints: ^6.0.0
  drift_dev: ^2.32.0
  build_runner: ^2.11.1

hooks:
  user_defines:
    sqlite3:
      source: sqlite3mc

flutter:
  uses-material-design: true


### When running dart run build_runner build, I receive the following output:
```Executing task: C:\flutter\bin\cache\dart-sdk\bin\dart.exe run build_runner build 

Building package executable... (16.4s)
Built build_runner:build_runner.
16s compiling builders/jit
Running build hooks...Unhandled exception:
HandshakeException: Handshake error in client (OS Error:
        CERTIFICATE_VERIFY_FAILED: unable to get local issuer certificate(../../third_party/boringssl/src/ssl/handshake.cc:298))
#0      _SecureFilterImpl._handshake (dart:io-patch/secure_socket_patch.dart:101:46)
simolus3/drift#1      _SecureFilterImpl.handshake (dart:io-patch/secure_socket_patch.dart:146:25)
simolus3/drift#2      _RawSecureSocket._secureHandshake (dart:io/secure_socket.dart:994:54)
simolus3/drift#3      _RawSecureSocket._tryFilter (dart:io/secure_socket.dart:1124:19)
<asynchronous suspension>

  Building assets for package:sqlite3 failed.
  build.dart returned with exit code: 255.

[simolus3]

I was able to reproduce the issue in a Windows VM, but I' not sure why it occurs yet.

For local development, you could try setting source: system. But that won't help when building apps for Android.

[Jambtutor]

Thanks so much for looking into this so quickly! It’s a huge relief to know it’s reproducible.

Since Android is my primary target platform, the source: system workaround will unfortunately block my progress there.

While you investigate the root cause, is there any manual workaround I can use to get my Android builds compiling? (For example, downgrading to a specific version of Drift/sqlite3?)

I’m fully available to help test any potential fixes on my Windows machine whenever you have them. Thanks again for the quick support!

[simolus3]

While you investigate the root cause, is there any manual workaround I can use to get my Android builds compiling? (For example, downgrading to a specific version of Drift/sqlite3?)

You could downgrade to the last 2.x release of the sqlite3 package (and then use drift version 2.31.0 and drift_flutter version 0.2.8).

Another alternative that should work with the latest packages could be to download the SQLite amalgamation and put the sqlite3.c file somewhere in your project. Then you could use source: source with a path key to compile from source.

[simolus3]

Alright, I think I have something for you to try. It looks like this is caused by this Dart SDK issue. For reasons that aren't clear to me, something in the path towards downloading the precompiled library requires a certificate that is loaded dynamically.

In my VM, the build worked after running Invoke-WebRequest https://github.com/simolus3/sqlite3.dart/releases/download/sqlite3-3.2.0/sqlite3.x64.windows.dll once. The actual file probably doesn't matter, just invoking any download is enough to install the certificate after which the Dart hooks will work.

[simolus3]

I've "fixed" this by improving the error message and asking users to try the Invoke-WebRequest workaround.

[Jambtutor]

I can confirm that running the Invoke-WebRequest https://github.com/simolus3/sqlite3.dart/releases/download/sqlite3-3.2.0/sqlite3.x64.windows.dll command completely resolved the issue on my end! The build hooks now execute perfectly without any certificate errors.

Thank you so much for the timely fix. I really appreciate your time and help.