I can't seem to update php-xdebug and I'm not sure why

[Canowyrms]

PS C:\Users\BK> scoop update php-xdebug
php-xdebug: 3.4.0-8.4 -> 3.4.7-84
WARN  Scoop uses 'aria2c' for multi-connection downloads.
WARN  Should it cause issues, run 'scoop config aria2-enabled false' to disable it.
WARN  To disable this warning, run 'scoop config aria2-warning-enabled false'.
Updating one outdated app:
Updating 'php-xdebug' (3.4.0-8.4 -> 3.4.7-84)
Downloading new version
Starting download with aria2 ...
Download: Download Results:
Download: gid   |stat|avg speed  |path/URI
Download: ======+====+===========+=======================================================
Download: f25088|ERR |       0B/s|C:/Users/BK/scoop/cache/php-xdebug#3.4.7-84#d6869c1.dll
Download: Status Legend:
Download: (ERR):error occurred.
Download: aria2 will resume download if the transfer is restarted.
Download: If there are any errors, then see the log file. See '-l' option in help/man page for details.

WARN  Download failed! (Error 1) An unknown error occurred
WARN  https://xdebug.org/files/php_xdebug-3.4.7-8.4-ts-vs17-x86_64.dll#/php_xdebug.dll
    referer=https://xdebug.org/files/php_xdebug-3.4.7-8.4-ts-vs17-x86_64.dll#/
    dir=C:\Users\BK\scoop\cache
    out=php-xdebug#3.4.7-84#d6869c1.dll

WARN  & 'C:\Users\BK\scoop\apps\aria2\current\aria2c.exe' --input-file='C:\Users\BK\scoop\cache\php-xdebug.txt' --user-agent='Scoop/1.0 (+http://scoop.sh/) PowerShell/7.5 (Windows NT 10.0; Win64; x64; Core)' --allow-overwrite=true --auto-file-renaming=false --retry-wait=2 --split=5 --max-connection-per-server=5 --min-split-size=5M --console-log-level=warn --enable-color=false --no-conf=true --follow-metalink=true --metalink-preferred-protocol=https --min-tls-version=TLSv1.2 --stop-with-process=23548 --continue --summary-interval=0 --auto-save-interval=1 -l - --continue=true --split=16 --min-split-size=8M --max-tries=3 --disable-ipv6=true --max-connection-per-server=16 --max-download-limit=0 --max-upload-limit=0 --max-overall-upload-limit=0 --max-overall-download-limit=0
WARN
Please try again or create a new issue by using the following link and paste your console output:
https://github.com/ScoopInstaller/Extras/issues/new?title=php-xdebug%403.4.7-84%3a+download+via+aria2+failed
Fallback to default downloader ...
The SSL connection could not be established, see inner exception.
URL https://xdebug.org/files/php_xdebug-3.4.7-8.4-ts-vs17-x86_64.dll#/php_xdebug.dll is not valid

aria2c seems to fail for about half of all downloads through Scoop, always Error 1; that's a concern of its own. Falling back to the default downloader works just fine virtually everywhere else - except for with php-xdebug. I haven't had this kind of trouble downloading anything else through Scoop. Even in a fresh Windows Sandbox with Scoop prepped, I get the same error and cannot download xdebug.

I tried enabling aria2c's logging option (-l flag) - I don't get any more information before failure. I tried disabling ipv6 since that's a common mention in the few searches I ran. The default downloader mentions "see inner exception" - how do I do that?

What is it about php-xdebug that I can't seem to download it? What else can I do to troubleshoot this?

[z-Fng]

Important

If your problem is related to a specific package, open the issue in the relevant bucket, not here.

The issue where php-xdebug downloads fail when using aria2 is reproducible. It may be related to aria2 not supporting TLS 1.3 yet, while xdebug.org only has TLS 1.3 enabled. You can either report this to aria2 or report this to php-xdebug to enable TLS 1.2 support.

Fallback to default downloader ...
The SSL connection could not be established, see inner exception.

As for the issue where downloads fail with default downloader, it can only be reproduced on very old Windows systems. The cause appears to be similar: your Windows version or proxy may not support TLS 1.3.. You can verify this by visiting a site like https://www.howsmyssl.com/a/check, or by checking it with the following command:

Get-ChildItem 'HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols' -Recurse

[Net.ServicePointManager]::SecurityProtocol

[Canowyrms]

Thank you very much for your feedback. I have an issue open with aria2, and have commented with your explanation: aria2/aria2#2332 .

Checking the website you linked, it indicates I have support for TLS 1.3.

The Get-ChildItem command returns TLS 1.2, and the Net.ServicePointManager command returns "SystemDefault".

Seems I'll need to move to Win11 if I want TLS 1.3 at the system level. Unfortunate.

[z-Fng]

Checking the website you linked, it indicates I have support for TLS 1.3.

This only indicates that your browser and proxy (if present) support TLS 1.3.

Seems I'll need to move to Win11 if I want TLS 1.3 at the system level. Unfortunate.

According to Microsoft documentation, it appears that this is indeed the case.

TLS 1.3 is supported starting in Windows 11 and Windows Server 2022. Enabling TLS 1.3 on earlier versions of Windows is not a safe system configuration.

Regarding the issue of xdebug.org not supporting TLS 1.2, I have already reported it to the upstream. See: https://github.com/xdebug/xdebug.org/issues/144

[z-Fng]

Update: Upstream (php-xdebug) provided the following response:

I don't see why it should support TLS-1.2, as support for TLS-1.3 should work for all major browsers since September 2020.

[Canowyrms]

Heh, seems they've since turned off issues on that repository.