SSL: CERTIFICATE_VERIFY_FAILED

    I try to build fsimx8mp-Y2023.09 in the VirtualBox engine F_S_Development_Machine-Fedora-36_V1.4.


    It stops with an error because of SSL: CERTIFICATE_VERIFY_FAILED, see below:


    [developer@fs-development-machine fsimx8mp-Y2023.09]$ ./setup-yocto uksource


    Setup release fsimx8mp-Y2023.09


    [CREATE DIRECTORY] uksource


    [GIT CREDENTIALS]

    ********

    ***********

    [DOWNOAD MANIFEST] fs-release-manifest.xml

    [FROM ] https://github.com/FSEmbedded/releases-fus

    [TAG ] fsimx8mp-Y2023.09


    [CREATE DIRECTORY] yocto-fus


    Downloading repo tool

    % Total % Received % Xferd Average Speed Time Time Time Current

    Dload Upload Total Spent Left Speed

    100 48143 100 48143 0 0 97978 0 --:--:-- --:--:-- --:--:-- 98050

    Getting download information (repo init)

    Downloading Repo source from https://gerrit.googlesource.com/git-repo

    fatal: Cannot get https://gerrit.googlesource.com/git-repo/clone.bundle

    fatal: error [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: self-signed certificate in certificate chain (_ssl.c:1007)

    fatal: double check your --repo-rev setting.

    fatal: cloning the git-repo repository failed, will remove '.repo/repo'

    [developer@fs-development-machine fsimx8mp-Y2023.09]$


    How can I solve this?

    If I open a webpage with Firefox, I get a messages "Software is Preventing Firefox From Safely Connecting to This Site", too. But there I can press an accept button.

    Is there a way like this for the script?

    Hello,


    I have tested the download in our network and it seems fine.

    The https certificate seems also ok and the download points to the google servers, which also seem trustworthy.


    Could it be an issue with your firewall settings?

    The error mentions a self-signed certificate, maybe your firewall changes something here?


    You could also try to download the repo tool externally and copy it to your build directory.


    Your F&S Support Team