I am trying to install Haskell on my Windows 10 laptop using the default command from https://www.haskell.org/ghcup/, but I am experiencing this (which is fine):
(7/8) installing autoconf-wrapper [#######################################] 100%
(8/8) installing mingw-w64-x86_64-pkgconf [#######################################] 100%
:: Running post-transaction hooks...
(1/1) Updating the info directory file...
Updating SSL root certificate authorities...
warning: ca-certificates-20241223-1 is up to date -- reinstalling
resolving dependencies...
looking for conflicting packages...
Packages (1) ca-certificates-20241223-1
Total Installed Size: 1.03 MiB
Net Upgrade Size: 0.00 MiB
:: Proceed with installation? [Y/n]
(1/1) checking keys in keyring [#######################################] 100%
(1/1) checking package integrity [#######################################] 100%
(1/1) loading package files [#######################################] 100%
(1/1) checking for file conflicts [#######################################] 100%
(1/1) checking available disk space [#######################################] 100%
:: Processing package changes...
(1/1) reinstalling ca-certificates [#######################################] 100%
Setting default home directory...
Creating shortcuts...
Adding C:\\ghcup\bin to Users Path...
Setting CABAL_DIR to 'C:\cabal'
Starting GHCup installer...
Name TotalSize Time
---- --------- ----
Get-FileWCSynchronous 57.09 MB 00:00:10
Then the second cmd window opens and now there is error message which aborts the installation:
--2025-03-11 00:01:26-- https://www.haskell.org/ghcup/sh/bootstrap-haskell
Loaded CA certificate '/usr/ssl/certs/ca-bundle.crt'
Resolving www.haskell.org (www.haskell.org)... 147.75.54.133, 2604:1380:4641:a100::1
Connecting to www.haskell.org (www.haskell.org)|147.75.54.133|:443... connected.
ERROR: The certificate of ‘www.haskell.org’ is not trusted.
ERROR: The certificate of ‘www.haskell.org’ doesn't have a known issuer.
Press any key to exit
So - the previous steps shows that certificates are being updated, but for the ghcup automatic installation they are not sufficient.
What should I do? What certificates should I check and reinstall? Is there any reason to update Windows certificates with root certificates like:
certutil -generateSSTFromWU RootCerts.sst
Or should I somehow check certificates in mingw installation /usr/ssl/certs/ca-bundle.crt - but what shall I do here and with what tools? And then - of course - how shall I relaunch the installation process from the point where it was aborted?
I also checked the haskell address provided in the error message and Chrome recognizes its SSL certificate as fully valid.