SSL certificate problem when installing rpm from filesystems repo using kiwi

English Install/Boot/Login
#1

I get the following error whe trying to install zfs from the opensuse filesystems rpm repository using kiwi ng. I’m having no problems installing packages from the standard rpm repository.

ERROR ]: 17:24:40 | KiwiInstallPhaseFailed: System package installation failed: Download (curl) error for ‘https://download.opensuse.org/repositories/filesystems/openSUSE_Leap_15.2/x86_64/libnvpair3-2.0.4-lp152.1.8.x86_64.rpm’:
Error code: Curl error 60
Error message: SSL certificate problem: unable to get local issuer certificate
Where can I read more about what certificates are needed for different repos? Where to get them and how to add them?

#2

It is not about “repository certificate”. It is standard SSL connection and curl need usual CA bundle so it can verify peer certificate. If you are running this command in chroot, your chroot should contain them.

But using SSL to access repositories has other issues (this will be redirected to plain http by mirrorbrain and that is rejected by zypper), so the simplest solution is to not use ssl at all. Metadata and RPM itself are already signed and checked.