GCViewer setup results in curl: (60) SSL certificate problem: unable to get local issuer certificate

[CREITZ25]

Expected behavior

As a user, I want to install the gcviewer with the command "devon gcviewer setup"

Actual behavior

Installation aborted with the message curl: (60) SSL certificate problem: unable to get local issuer certificate

Steps to reproduce (bug) / Use Case of feature request (enhancement)

1. devon gcviewer setup

Success: run command mkdir
Starting installation of gcviewer in version 1.36 to /c/Users/creitz/Projects/devonfw/software/gcviewer
Trying to download gcviewer-1.36-windows.jar from https://sourceforge.net/projects/gcviewer/files/gcviewer-1.36.jar
% Total % Received % Xferd Average Speed Time Time Time Current
Dload Upload Total Spent Left Speed
100 718 0 718 0 0 1910 0 --:--:-- --:--:-- --:--:-- 1914
100 734 0 734 0 0 1206 0 --:--:-- --:--:-- --:--:-- 1206
100 961 0 961 0 0 1152 0 --:--:-- --:--:-- --:--:-- 1152
0 0 0 0 0 0 0 0 --:--:-- 0:00:01 --:--:-- 0
curl: (60) SSL certificate problem: unable to get local issuer certificate
More details here: https://curl.se/docs/sslcerts.html

curl failed to verify the legitimacy of the server and therefore could not
establish a secure connection to it. To learn more about this situation and
how to fix it, please visit the web page mentioned above.
Failed to download https://sourceforge.net/projects/gcviewer/files/gcviewer-1.36.jar with exit code 60

******** ATTENTION ********
Download of gcviewer in version 1.36 failed after trying 1 url(s).
We are sorry for the inconvenience. Please check the above errors, resolve them and try again.

Related/Dependent Issues

Comments/Hints:

On MacOS it works fine.
Download with a browser and the same urls works fine, too.

Affected version:

• OS: Windows and Linux(WSL)
• Browser: -

[alfeilex]

It seems that this error only occurs with VPN connection

[maybeec]

Should we give a prompt then to ask the user to ignore the certificate validation?

[alfeilex]

Further, I wonder why Chrome uses Balitmore CyberTrust Root certificate and Firefox CapgeminiPKIIssuingCA1 in VPN?

Sometimes, also in VPN, Firefox uses the Balitmore CyberTrust Root certificate and it works.... how is the certificate selected?

[alfeilex]

We will try to fix this in the future in Java