"SSL peer certificate or SSH remote key was not OK" error on fresh Nix install on macOS

[johncoopertr]

sorry for the necro thread, but I solved a similar issue:

NixOs in corporate

Hi all, I ran into the same issue - hopefully this is helpful for you guys or someone else: find the Zscaler root cert in your browser, export it. [zscaler_cert] Set nix.settings.ssl-cert-file explicitly to /etc/ssl/certs/ca-bundle.crt Use security.pki.certificates to grab the .crt file we exported earlier. [zscaler_config] From what I understand, security.pki.certificates will stick the exported .crt into /etc/ssl/certs/ca-bundle.crt at build time.