Pacman- SSL certificate problem.

[HieuLe-88]

Describe the issue

SSL certificate problem.

Steps to Reproduce the Problem

When I execute "pacman -Syu", it shows alot of errors related to SSL certificate problem. How can I solve this issue?

1. Download MSYS2 here https://www.msys2.org/
2. Install it
3. Execute bellow command.

pacman -Syu

4. Errors:
   :: Synchronizing package databases...
   error: failed retrieving file 'mingw32.db' from repo.msys2.org : SSL certificate problem: self signed certificate in certificate chain
   error: failed retrieving file 'mingw32.db' from downloads.sourceforge.net : SSL certificate problem: self signed certificate in certificate chain
   error: failed retrieving file 'mingw32.db' from www2.futureware.at : SSL certificate problem: self signed certificate in certificate chain
   error: failed retrieving file 'mingw32.db' from mirror.yandex.ru : SSL certificate problem: self signed certificate in certificate chain
   error: failed retrieving file 'mingw32.db' from mirrors.tuna.tsinghua.edu.cn : SSL certificate problem: self signed certificate in certificate chain

[HieuLe-88]

Solved:
Solution:
Copy certificate of https://www.msys2.org/ to ca-bundle.crt file in C:\msys64\usr\ssl\certs

[Biswa96]

In my setup, those are already in that path.

[SaihttamR]

Solved: Solution: Copy certificate of https://www.msys2.org/ to ca-bundle.crt file in C:\msys64\usr\ssl\certs

I copied the cert to the according folder but I still get the cert error.
Would you provide me how to export the cert from www.msys2.org? Maybe i did something wrong...

[Biswa96]

Is it not required to copy certificates manually. Try to update the packages with pacman -Syyu twice or use new installer from the website.

[RzNmKX]

and what about those of us behind corporate proxies/firewalls that have their own SSL certificates/perform MITM? need a way to ignore SSL errors

[Biswa96]

what about those of us behind corporate proxies/firewalls that have their own SSL certificates/perform MITM?

The procedure is explained here https://www.msys2.org/docs/faq/

[vinukshetty]

Most of them still face this issue even with the above solution, if you are also one among them then try this.

Solution:
Export certificate from https://repo.msys2.org/ and rename *.goskope.com to ca-bundle.crt file and place it into C:\msys64\usr\ssl\certs as shown below.

Note: please click on the highlighted hierarchy while downloading the cert file.