How do I ignore SSL certificates?

[ShockedCoder]

So I reinstalled Manjaro and whilst redownloading my packages I get a:

curl: (60) SSL certificate problem: unable to get local issuer certificate
More details here: https://curl.se/docs/sslcerts.html

curl failed to verify the legitimacy of the server and therefore could not
establish a secure connection to it. To learn more about this situation and
how to fix it, please visit the web page mentioned above.
==> ERROR: Failure while downloading https://chiselapp.com/user/aspect/repository/sdx/raw/sdx-20110317.kit?name=1a77b0b5bc8cfcf2df2ef051a511e9187103ce0c
    Aborting...
error downloading sources: sdx

I've searched for solutions and even looked at the man page for yay, but didn't find anything,

[grandchild]

I'm getting the same error. It seems that the source server for this specific package doesn't play well with a current Arch curl setup. (https://www.ssllabs.com/ssltest/analyze.html?d=chiselapp.com&s=74.208.146.128)

What you can do is look into (and eventually edit) /etc/makepkg.conf and edit the DLAGENTS key for https.

You could try and add the --insecure option to the DLAGENTS[https] curl command, BUT REMOVE IT AFTERWARDS!, as it skips SSL cert verification completely. Adding it as the very first argument right after "curl" did let me download the sources. (Didn't try building the package...)

[grandchild]

Also there's other people having the same problem on the AUR page for the package: https://aur.archlinux.org/packages/sdx

[archnim]

I'm getting the same error. It seems that the source server for this specific package doesn't play well with a current Arch curl setup. (https://www.ssllabs.com/ssltest/analyze.html?d=chiselapp.com&s=74.208.146.128)

What you can do is look into (and eventually edit) /etc/makepkg.conf and edit the DLAGENTS key for https.

You could try and add the --insecure option to the DLAGENTS[https] curl command, BUT REMOVE IT AFTERWARDS!, as it skips SSL cert verification completely. Adding it as the very first argument right after "curl" did let me download the sources. (Didn't try building the package...)

Thank you very much. Your tip just helped me. Really, sdx maintainers should update their server's certificate !

[Popolon]

I know it is closed, but it oriented me toward the good today solution. I've a failure due to a Let's Encrypt certificate expired today. This didn't work for me (in 2024, 3 years after)

A simple workaround that avoid at the same time to change makepkg.conf:

export GIT_SSL_NO_VERIFY=true
makepkg