[Haskell-cafe] Status of ghcup?

[Alexis Praga]

Hi,

Setting --cacert to the certificate issued by the company with putting in C:\Users\myuser\.curlrc
> cacert = mycertificate.cer
failed almost immediatly with :
> curl: (60) schannel: CertGetCertificateChain trust error CERT_TRUST_REVOCATION_STATUS_UNKNOWN

Disabling SSL in the same .curlrc :
> insecure
failed when mingw tried to download some packages.

Setting capath did not help either.


Alexis


------- Original Message -------
On Tuesday, February 28th, 2023 at 1:15 PM, Bryan Richter <bryan at haskell.foundation> wrote:


> The curl man page suggests the --cacert or --capath option.
> 
> https://www.man7.org/linux/man-pages/man1/curl.1.html
> 
> On Thu, 23 Feb 2023 at 20:00, Alexis Praga via Haskell-Cafe <haskell-cafe at haskell.org> wrote:
> 
> > I do have such a certificate. Do you have any pointer on how to configure curl to use, especially on windows and for ghcup ?
> > 
> > 
> > 
> > 
> > ------- Original Message -------
> > On Thursday, February 23rd, 2023 at 6:53 PM, Viktor Dukhovni <ietf-dane at dukhovni.org> wrote:
> > 
> > 
> > >
> > >
> > > On Thu, Feb 23, 2023 at 12:50:40PM -0500, Brandon Allbery wrote:
> > >
> > > > You're all missing the possibility that the corporate gateway requires
> > > > a specific certificate so it can inspect traffic (anyone remember
> > > > https://arstechnica.com/information-technology/2015/02/lenovo-pcs-ship-with-man-in-the-middle-adware-that-breaks-https-connections/)?
> > >
> > >
> > > In which case, that certificate can be configured as trusted by curl,
> > > of course it that case it can't be provided by the ghcup team, and needs
> > > to obtained locally by the user.
> > >
> > > --
> > > Viktor.
> > > _______________________________________________
> > > Haskell-Cafe mailing list
> > > To (un)subscribe, modify options or view archives go to:
> > > http://mail.haskell.org/cgi-bin/mailman/listinfo/haskell-cafe
> > > Only members subscribed via the mailman list are allowed to post.
> > _______________________________________________
> > Haskell-Cafe mailing list
> > To (un)subscribe, modify options or view archives go to:
> > http://mail.haskell.org/cgi-bin/mailman/listinfo/haskell-cafe
> > Only members subscribed via the mailman list are allowed to post.