mise self-upgrade fails on mac behind corporate firewall (?)

[dhanak]

mise self-update gives the following error, immediately:

$ mise self-update --verbose
DEBUG ARGS: /Users/dhanak/.local/bin/mise self-update --verbose
DEBUG starting new connection: https://api.github.com/
Error: 
   0: ReqwestError: error sending request for url (https://api.github.com/repos/jdx/mise/releases/latest)
   1: error sending request for url (https://api.github.com/repos/jdx/mise/releases/latest)
   2: client error (Connect)
   3: invalid peer certificate: UnknownIssuer

Location:
   src/cli/self_update.rs:78

Version:
   2025.3.6 macos-arm64 (2025-03-18)

Backtrace omitted. Run with RUST_BACKTRACE=1 environment variable to display it.
Run with RUST_BACKTRACE=full to include source snippets.

I use the following workaround alias to perform the upgrade:

$ alias mise-update='curl https://mise.jdx.dev/mise-latest-macos-arm64 -o $HOME/.local/bin/mise'

I don't know if it matters or not, but this is a company laptop with a corporate VPN and firewall. But the URL itself is not blocked, I can retrieve it using curl without problems:

$ curl https://api.github.com/repos/jdx/mise/releases/latest
{
  "url": "https://api.github.com/repos/jdx/mise/releases/206545937",
  "assets_url": "https://api.github.com/repos/jdx/mise/releases/206545937/assets",
  "upload_url": "https://uploads.github.com/repos/jdx/mise/releases/206545937/assets{?name,label}",
  "html_url": "https://github.com/jdx/mise/releases/tag/v2025.3.6",
  "id": 206545937,
  "author": {
    ...
  }
}

My current version of mise is:

$ mise dr
version: 2025.3.6 macos-arm64 (2025-03-18)
activated: yes
shims_on_path: no

build_info:
  Target: aarch64-apple-darwin
  Features: DEFAULT, NATIVE_TLS, OPENSSL, SELF_UPDATE
  Built: Tue, 18 Mar 2025 12:59:04 +0000
  Rust Version: rustc 1.85.0 (4d91de4e4 2025-02-17)
  Profile: release

shell:
  /bin/zsh
  zsh 5.9 (arm64-apple-darwin24.0)

dirs:
  cache: ~/Library/Caches/mise
  config: ~/.config/mise
  data: ~/.local/share/mise
  shims: ~/.local/share/mise/shims
  state: ~/.local/state/mise

config_files:
  ~/.config/mise/config.toml

ignored_config_files: (none)

backends:
  aqua
  asdf
  cargo
  core
  dotnet
  gem
  go
  npm
  pipx
  spm
  ubi
  vfox

plugins:
  elixir-ls  https://github.com/manlon/asdf-elixir-ls#90f68c1
  eza        https://github.com/mise-plugins/mise-eza.git#11f578d
  rebar      https://github.com/mise-plugins/mise-rebar.git#827ef1b

toolset:
  aqua:BurntSushi/[email protected]
  aqua:cli/[email protected]
  aqua:junegunn/[email protected]
  aqua:sharkdp/[email protected]
  asdf:[email protected]
  asdf:[email protected]
  asdf:[email protected]
  asdf:[email protected]
  core:[email protected]
  core:[email protected]
  core:[email protected]
  ubi:dandavison/[email protected]
  ubi:jdx/[email protected]
  ubi:sharkdp/[email protected]

path:
  ~/.local/share/mise/installs/bat/0.25.0
  ~/.local/share/mise/installs/delta/0.18.2
  ~/.local/share/mise/installs/elixir/1.17.2-otp-26/bin
  ~/.local/share/mise/installs/elixir/1.17.2-otp-26/.mix/escripts
  ~/.local/share/mise/installs/elixir-ls/0.27.1/bin
  ~/.local/share/mise/installs/erlang/26.2.5.5/bin
  ~/.local/share/mise/installs/erlang/24.3.4/bin
  ~/.local/share/mise/installs/eza/0.20.24/bin
  ~/.local/share/mise/installs/fd/10.2.0/fd-v10.2.0-aarch64-apple-darwin
  ~/.local/share/mise/installs/fzf/0.60.3
  ~/.local/share/mise/installs/gh/2.68.1/gh_2.68.1_macOS_arm64/bin
  ~/.local/share/mise/installs/rebar/3.22.1/bin
  ~/.local/share/mise/installs/rebar/3.18.0/bin
  ~/.local/share/mise/installs/ripgrep/14.1.1/ripgrep-14.1.1-aarch64-apple-darwin
  ~/.local/share/mise/installs/usage/2.0.5
  /opt/homebrew/bin
  /opt/homebrew/sbin
  /usr/local/bin
  /usr/bin
  /bin
  /System/Cryptexes/App/usr/bin
  /usr/sbin
  /sbin
  /var/run/com.apple.security.cryptexd/codex.system/bootstrap/usr/local/bin
  /var/run/com.apple.security.cryptexd/codex.system/bootstrap/usr/bin
  /var/run/com.apple.security.cryptexd/codex.system/bootstrap/usr/appleinternal/bin
  /Applications/kitty.app/Contents/MacOS
  ~/Library/Python/3.9/bin
  ~/.local/bin

env_vars:
  MISE_SHELL=zsh

settings:
  trusted_config_paths  ["~/work"] ~/.config/mise/config.toml

No problems found