Visual Studio 2022 won't connect to NuGet

mindmischief 41 Reputation points
2022-08-08T17:50:50.513+00:00

Visual Studio 2022 gives an error when trying to browse NuGet.

I get these errors on 2 different Windows Servers (2016) I’ve tried. One running Visual Studio 2017, the other running Visual Studio 2019 and 2022.

Visual Studio 2017:

“[nuget.org] Unable to load the service index for source https://api.nuget.org/v3/index.ison.
An error occurred while sending the request.
The underlying connection was closed: An unexpected error occurred on a send.
Unable to read data from the transport connection: An existing connection was forcibly closed by the remote host.
An existing connection was forcibly closed by the remote host.”

Visual Studio 2022:

[nuget.org] Unable to load the service index for source https://api.nuget.org/v3/index.json. An error occurred while sending the request. The underlying connection was closed: An unexpected error occurred on a send. Unable to read data from the transport connection: An existing connection was forcibly closed by the remote host. An existing connection was forcibly closed by the remote host

Note that we do not use a proxy.

Loading https://api.nuget.org/v3/index.json with both Chrome and Edge work.
Loading https://api.nuget.org/v3/index.json with Internet Explorer returns:

“This page can’t be displayed
Turn on TLS 1.0, TLS 1.1, and TLS 1.2 in Advanced settings and try connecting to https://api.nuget.org again. If this error persists, it is possible that this site uses an unsupported protocol or cipher suite such as RC4 (link for the details), which is not considered secure. Please contact your site administrator.”

Things I’ve tried that have failed to resolve it

updated Visual Studio

Clearing nuget cache from within Visual Studio

Deleted NuGet.Config from C:\Users\<user>\AppData\Roaming\NuGet

Modified C:\Program Files (x86)\Microsoft Visual Studio\2017\Community\Common7\IDE\devenv.com based on tips I found. I know it’s possible that what I changed was not correct. Reverted back.

Registry changes:

Computer\HKEY LOCAL MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.0\Client
Computer\HKEY LOCAL MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.1\Client
Computer\HKEY LOCAL MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.3\Client

DisabledByDefault = 1  
Enabled = 0  

Computer\HKEY LOCAL MACHINE\SYSTEM\ CurrentControl Set) Control SecurityProviders \SCHANNEL\Protocols\TLS 1.2\Client

DisabledByDefault = 0  
Enabled = 1  

Computer\HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft.NETFramework\v2.0.50727
Computer\HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft.NETFramework\v4.0.30319
Computer\HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft.NETFramework\v2.0.50727
Computer\HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft.NETFramework\v4.0.30319

SchUseStrongCrypto = 1  
SystemDefaultTlsVersions = 1  

Tried moving the server's Active Directory object out of the current AD OU which has a Group Policy configured with specific ciphers enabled, and the order of preference, into a new OU with this NOT configured.

Tried disabling anti-virus software

Reference links, things I've tried or looked into:
https://free.blessedness.top/en-us/security/engineering/solving-tls1-problem
https://free.blessedness.top/en-us/troubleshoot/azure/active-directory/enable-support-tls-environment?tabs=azure-monitor%22%20%5Cl%20%22registry-strings
https://stackoverflow.com/questions/41185443/nuget-connection-attempt-failed-unable-to-load-the-service-index-for-source

At this point, I'm run out of ideas. It seems like Visual Studio is not adhering to the system's default TLS settings (1.2) but it could possibly be something else.

Developer technologies | Visual Studio | Setup
Developer technologies | .NET | Other
0 comments No comments
{count} votes

Answer accepted by question author
  1. Sly, Jack 96 Reputation points
    2022-08-09T14:53:41.39+00:00

    Hi,
    We had this issue today, this was resolved out end by adding TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 into HKLM\SOFTWARE\Policies\Microsoft\Cryptography\Configuration\SSL\00010002

    Also ensured only 'Use TLS 1.2' was enabled in IE Options, and no proxy settings were set up.

    Hope this helps.

    4 people found this answer helpful.

7 additional answers

Sort by: Most helpful
  1. Yiqi Ou 0 Reputation points Microsoft Employee
    2024-08-21T18:29:06.2466667+00:00

    I follow the link provided. but it does not fix my issue. My issue is different that the nuget works in office, but not in home. My solution is posted here: nuget - Failed to download package, Failed restore packages - Stack Overflow at Microsoft

    0 comments No comments

  2. Yiqi Ou 0 Reputation points Microsoft Employee
    2024-08-21T18:33:19.0133333+00:00

    My situation is a little bit different that when I went to office, the problem is automatically solved and when I came back home the issue appear again. Then I contacted the Help desk.

    They asked me to install Intel application from below link and download and Install all available update from it.

    https://www.intel.com/content/www/us/en/support/intel-driver-support-assistant.html

    This helps solving the issue. As Help Desk suggested "strongly advise against altering any local policies or TLS settings on devices managed by Microsoft. Corporate resources and applications will function as intended when these settings remain unchanged."

    Changing those actually caused "Windows Update" failed to work for me. So do it with caution.

    Hope that helps!

    0 comments No comments

  3. Yiqi Ou 0 Reputation points Microsoft Employee
    2024-08-21T18:34:57.64+00:00

    My problem is different that when I went to office, the problem is automatically solved and when I came back home the issue appear again. Then I contacted the Help desk.

    They asked me to install Intel application from below link and download and Install all available update from it.

    https://www.intel.com/content/www/us/en/support/intel-driver-support-assistant.html

    which solves my issue. Hope that helps!

    0 comments No comments

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.