Fossil Forum
Post: Default value for 'fossil update trunk'
Greetings.
I believe some of us will be happier for a default value of 'y/Y' for these prompts:
accept this cert and continue (y/N/fingerprint)?
an ENTER will be as if entering y/Y[ENTER] and
remember this exception (y/N)?
also, an ENTER will be as if entering y/Yy/Y[ENTER]. I know is a small task, but even typing a letter, this is fast and immediate world, will help. :-) thanks for the consideration.
$ fossil update trunk
Pull from https://sqlite.org/src
Unable to verify SSL cert from sqlite.org
subject: CN = a1.sqlite.org, O = Zscaler Inc., OU = Zscaler Inc.
issuer: C = US, ST = California, O = Zscaler Inc., OU = Zscaler Inc., CN = "Zscaler Intermediate Root CA (zscalerthree.net) (t) "
notBefore: 2026-05-28 13:24:07 UTC
notAfter: 2026-06-07 04:24:13 UTC
sha256: 12e2edeee4fff349e5fc5e65d4e66056b644379286369250635c5b45db5c8969
accept this cert and continue (y/N/fingerprint)? y
remember this exception (y/N)? y
jose
That appears to be one of those decrypt-and-snoop middleboxes. The actual cert is from ISRG, the umbrella for Let’s Encrypt.
If you buy into this, a better plan is to put the Zscaler CA root into your OS’s trust store.
If not, then it’s warning you about a Situation™. Z bf997
In-deed:
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:41:7a:22:20:48:e4:e4:86:d0:45:d9:3e:da:a1:05:03:2a
Signature Algorithm: ecdsa-with-SHA384
Issuer: C=US, O=Let's Encrypt, CN=E8
Validity
Not Before: Apr 3 01:08:33 2026 GMT
Not After : Jul 2 01:08:32 2026 GMT
Subject: CN=a1.sqlite.org
If you buy into this, a better plan is to put the Zscaler CA root into your OS’s trust store.
Darn it! Thanks. Z