<div dir="ltr"><div>The curl man page suggests the --cacert or --capath option.</div><div><br></div><div><a href="https://www.man7.org/linux/man-pages/man1/curl.1.html">https://www.man7.org/linux/man-pages/man1/curl.1.html</a></div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Thu, 23 Feb 2023 at 20:00, Alexis Praga via Haskell-Cafe <<a href="mailto:haskell-cafe@haskell.org">haskell-cafe@haskell.org</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">I do have such a certificate. Do you have any pointer on how to configure curl to use, especially on windows and for ghcup ?<br>
<br>
<br>
<br>
<br>
------- Original Message -------<br>
On Thursday, February 23rd, 2023 at 6:53 PM, Viktor Dukhovni <<a href="mailto:ietf-dane@dukhovni.org" target="_blank">ietf-dane@dukhovni.org</a>> wrote:<br>
<br>
<br>
> <br>
> <br>
> On Thu, Feb 23, 2023 at 12:50:40PM -0500, Brandon Allbery wrote:<br>
> <br>
> > You're all missing the possibility that the corporate gateway requires<br>
> > a specific certificate so it can inspect traffic (anyone remember<br>
> > <a href="https://arstechnica.com/information-technology/2015/02/lenovo-pcs-ship-with-man-in-the-middle-adware-that-breaks-https-connections/" rel="noreferrer" target="_blank">https://arstechnica.com/information-technology/2015/02/lenovo-pcs-ship-with-man-in-the-middle-adware-that-breaks-https-connections/</a>)?<br>
> <br>
> <br>
> In which case, that certificate can be configured as trusted by curl,<br>
> of course it that case it can't be provided by the ghcup team, and needs<br>
> to obtained locally by the user.<br>
> <br>
> --<br>
> Viktor.<br>
> _______________________________________________<br>
> Haskell-Cafe mailing list<br>
> To (un)subscribe, modify options or view archives go to:<br>
> <a href="http://mail.haskell.org/cgi-bin/mailman/listinfo/haskell-cafe" rel="noreferrer" target="_blank">http://mail.haskell.org/cgi-bin/mailman/listinfo/haskell-cafe</a><br>
> Only members subscribed via the mailman list are allowed to post.<br>
_______________________________________________<br>
Haskell-Cafe mailing list<br>
To (un)subscribe, modify options or view archives go to:<br>
<a href="http://mail.haskell.org/cgi-bin/mailman/listinfo/haskell-cafe" rel="noreferrer" target="_blank">http://mail.haskell.org/cgi-bin/mailman/listinfo/haskell-cafe</a><br>
Only members subscribed via the mailman list are allowed to post.</blockquote></div>