Error in `lake build` in Git Bash

Stream: general

[Martin Dvořák]

On my command line (Git Bash) lake build gives me an error:

$ lake build
error: > curl -s -f -o .\.lake/packages\proofwidgets\.lake\windows-64.tar.gz -L https://github.com/leanprover-community/ProofWidgets4/releases/download/v0.0.23/windows-64.tar.gz
error: external command `curl` exited with code 35
[0/2] Fetching proofwidgets cloud release

In VS Code, everything works fine.

Should I be concerned?

[Martin Dvořák]

Not everything works fine in VS Code and elan update didn't help.

[Yaël Dillies]

Have you tried deleting .lake?

[Martin Dvořák]

I tried it now and it didn't help.

[Martin Dvořák]

Which really sucks because out of the four files in #9307 I can build only two locally, making the rest of the errors nearly impossible to debug.

[Mario Carneiro]

what happens if you run the listed curl command yourself?

[Mario Carneiro]

without the -s part

[Martin Dvořák]

$ curl -f -o .\.lake/packages\proofwidgets\.lake\windows-64.tar.gz -L https://github.com/leanprover-community/ProofWidgets4/releases/download/v0.0.24/windows-64.tar.gz
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed
  0     0    0     0    0     0      0      0 --:--:--  0:00:02 --:--:--     0
curl: (60) SSL certificate problem: unable to get local issuer certificate
More details here: https://curl.se/docs/sslcerts.html

curl failed to verify the legitimacy of the server and therefore could not
establish a secure connection to it. To learn more about this situation and
how to fix it, please visit the web page mentioned above.

[Mario Carneiro]

It seems like you have a certificate configuration problem, try things like https://stackoverflow.com/a/51369670/890016 to update your certificates and if that doesn't work you can put --insecure in your ~/.curlrc

[Martin Dvořák]

Should I use https://github.com/leanprover-community/ProofWidgets4/releases/download/v0.0.24/ as the URI for which I want the ROOT certificate?

[Martin Dvořák]

Is this (CRL distribution point) relevant?

Not Critical
URI: http://crl3.digicert.com/DigiCertTLSHybridECCSHA3842020CA1-1.crl
URI: http://crl4.digicert.com/DigiCertTLSHybridECCSHA3842020CA1-1.crl

[Martin Dvořák]

I am feeling really dumb I didn't realize it earlier, but disabling Avast (antivirus) solves the issue.