Disable sslverify for rpm-ostree

Ask Fedora
1

This is a follow-up of SSL peer certificate or SSH remote key was not OK because the solution provided to enable a VPN doesnt work for me.
I would rather disable ssl verification as it is possible with the

sslverify=False

for dnf: dnf.conf
Any suggestion how to achieve that on silverblue?

2

What error do you have? You should never have to disable this as this means that someone is doing a man in the middle on your connection and could change the content of the update.

3

The error is the following:

error: While pulling fedora/42/x86_64/silverblue: While fetching mirrorlist 'https://ostree.fedoraproject.org/mirrorlist': While fetching https://ostree.fedoraproject.org/mirrorlist: [60] SSL peer certificate or SSH remote key was not OK

I know it is caused by zscaler and there is no man-in-the-middle; and it is something I can not change.
So I am looking to disable ssl check.
This option should be provided for rpm-ostree, as it is provided for all major tools supporting ssl, ie dnf, curl, wget.

Some background:
Certificate Pinning and SSL Inspection