[Bug] Client connect with TLS does not work anymore

[BehnazMoradabadi]

What are you really trying to do?

Client connect with TLS does not work anymore after the new release.

Describe the bug

import asyncio
from temporalio.client import Client, TLSConfig

client = await Client.connect(
    "xxx",
    namespace="xxx",
    tls=TLSConfig(
        client_cert=open("tls.crt", "rb").read(),
        client_private_key=open("tls.key", "rb").read(),
        server_root_ca_cert=open("ca.crt", "rb").read(),
    ),
)
print(client)

Used to work but now it raises error:

Failed client connect: Server connection error: tonic::transport::Error(Transport, ConnectError(Custom { kind: InvalidData, error: InvalidCertificate(UnknownIssuer) }))

Environment/Versions

• OS and processor: [e.g. M1 Mac, x86 Windows, Linux]
• Temporal Version: [e.g. 1.14.0?] and/or SDK version
• Are you using Docker or Kubernetes or building Temporal from source?

Additional context

[tconley1428]

There was a change in the release (I just added a call out to the release notes), to only enable native roots if the root ca cert is not provided. temporalio/sdk-core#1007. Is it possible you were relying on native roots before? Try removing server_root_ca_cert and see if the issues resolves.

[BehnazMoradabadi]

Yes it worked. Thanks