<p>This is not really Cardano question, but seems your Mac has problem with certificates.</p>
<p>Quick fix will be just to add <code>-k</code>, like this:</p>
<pre><code>sh &lt;(curl -k -L https://nixos.org/nix/install) --darwin-use-unencrypted-nix-store-volume
</code></pre>
<p>This will ignore certificate issue.</p>
<p>In longrun you need to dig dipper, maybe you need to reinstall your root certificates, or update your MacOS.</p>
<p>Maybe this will help:</p>
<p><a href="https://www.digicert.com/blog/expired-intermediate-certificate" rel="nofollow noreferrer">https://www.digicert.com/blog/expired-intermediate-certificate</a></p>

CC BY-SA 4.0
2022-01-11T11:30:14.163Z
Thank you for your kind answer. in fact I've tried to add -k option but it is not working as below. MyMac$ sh <(curl -k https://nixos.org/nix/install) --darwin-use-unencrypted-nix-store-volume
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed
  0     0    0     0    0     0      0      0 --:--:-- --:--:-- --:--:--     0, I'll dig into more as your help.
Tae Euy
CC BY-SA 4.0
2022-01-11T11:35:35.677Z
You forgot `-L` in your command. Just copy from here `sh <(curl -k -L https://nixos.org/nix/install) --darwin-use-unencrypted-nix-store-volume`
os11k
CC BY-SA 4.0
2022-01-11T11:38:29.597Z
Yes, you're right. it seems working. thank you so much!
Tae Euy
CC BY-SA 4.0
2022-01-11T11:41:23.150Z
If it worked, I would appreciate if you will accept my answer as solution. Cheers!
os11k
CC BY-SA 4.0
2022-01-11T12:00:15.187Z
sure, thank you.
Tae Euy
CC BY-SA 4.0
2022-01-11T14:08:32.197Z
I've also up-voted the answer but would caution against having non-Cardano questions here going forward.
Samuel Leathers
CC BY-SA 4.0
2022-01-11T14:12:03.783Z
I totally agree and I do think that non-Cardano question should not be here. I was tending to help, because OP wanted to install nix what is widely used in Cardano project, at lest per my understanding
os11k
CC BY-SA 4.0
2022-01-11T09:32:24.370Z
2022-01-11T09:32:24.370Z
os11k
<p>I'm trying to install nix on my macbook but I had following error message.
How can I fix this certificate expired problem?</p>
<p>macOS : High Sierra 10.13.6</p>
<p>Thanks in advance.</p>
<p>//-- error message ---</p>
<p>~ MyMac$ sh &lt;(curl -L <a href="https://nixos.org/nix/install" rel="nofollow noreferrer">https://nixos.org/nix/install</a>) --darwin-use-unencrypted-nix-store-volume
% Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
Dload  Upload   Total   Spent    Left  Speed
0     0    0     0    0     0      0      0 --:--:-- --:--:-- --:--:--     0
curl: (60) SSL certificate problem: certificate has expired
More details here: <a href="https://curl.haxx.se/docs/sslcerts.html" rel="nofollow noreferrer">https://curl.haxx.se/docs/sslcerts.html</a></p>
<p>curl performs SSL certificate verification by default, using a &quot;bundle&quot;
of Certificate Authority (CA) public keys (CA certs). If the default
bundle file isn't adequate, you can specify an alternate file
using the --cacert option.
If this HTTPS server uses a certificate signed by a CA represented in
the bundle, the certificate verification probably failed due to a
problem with the certificate (it might be expired, or the name might
not match the domain name in the URL).
If you'd like to turn off curl's verification of the certificate, use
the -k (or --insecure) option.
HTTPS-proxy has similar options --proxy-cacert and --proxy-insecure.</p>

<nix><install>
nix installation failure on mac with "curl: (60) SSL certificate problem: certificate has expired"
# nix installation failure on mac with "curl: (60) SSL certificate problem: certificate has expired"

(Asked by: username_0 on 2022-01-11)

I'm trying to install nix on my macbook but I had following error message.
How can I fix this certificate expired problem?

macOS : High Sierra 10.13.6

Thanks in advance.

//-- error message ---

~ MyMac$ sh <(curl -L <https://nixos.org/nix/install>) --darwin-use-unencrypted-nix-store-volume
% Total % Received % Xferd Average Speed Time Time Time Current
Dload Upload Total Spent Left Speed
0 0 0 0 0 0 0 0 --:--:-- --:--:-- --:--:-- 0
curl: (60) SSL certificate problem: certificate has expired
More details here: <https://curl.haxx.se/docs/sslcerts.html>

curl performs SSL certificate verification by default, using a "bundle"
of Certificate Authority (CA) public keys (CA certs). If the default
bundle file isn't adequate, you can specify an alternate file
using the --cacert option.
If this HTTPS server uses a certificate signed by a CA represented in
the bundle, the certificate verification probably failed due to a
problem with the certificate (it might be expired, or the name might
not match the domain name in the URL).
If you'd like to turn off curl's verification of the certificate, use
the -k (or --insecure) option.
HTTPS-proxy has similar options --proxy-cacert and --proxy-insecure.

**Tags:** nix, install

---

## 1 answers

### Answer by username_1 on 2022-01-11. Score: 1 | Accepted answer

This is not really Cardano question, but seems your Mac has problem with certificates.
Quick fix will be just to add -k, like this:
sh <(curl -k -L https://nixos.org/nix/install) --darwin-use-unencrypted-nix-store-volume

This will ignore certificate issue.
In longrun you need to dig dipper, maybe you need to reinstall your root certificates, or update your MacOS.
Maybe this will help:
https://www.digicert.com/blog/expired-intermediate-certificate

> **Comments:**
> **username_0**: Thank you for your kind answer. in fact I've tried to add -k option but it is not working as below. MyMac$ sh <(curl -k https://nixos.org/nix/install) --darwin-use-unencrypted-nix-store-volume   % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current                                  Dload  Upload   Total   Spent    Left  Speed   0     0    0     0    0     0      0      0 --:--:-- --:--:-- --:--:--     0, I'll dig into more as your help.  
> **username_1**: You forgot `-L` in your command. Just copy from here `sh <(curl -k -L https://nixos.org/nix/install) --darwin-use-unencrypted-nix-store-volume`  
> **username_0**: Yes, you're right. it seems working. thank you so much!  
> **username_1**: If it worked, I would appreciate if you will accept my answer as solution. Cheers!  
> **username_0**: sure, thank you.  
> **username_2**: I've also up-voted the answer but would caution against having non-Cardano questions here going forward.  
> **username_1**: I totally agree and I do think that non-Cardano question should not be here. I was tending to help, because OP wanted to install nix what is widely used in Cardano project, at lest per my understanding  

---

