When a package is configured to fetch bzr sources, select environments may have issues attempting to download from Launchpad (or other hosting) due to legacy certificates.
bzr help ssl.ca_certsfor how to specify trusted CAcertificates.
Pass -Ossl.cert_reqs=none to disable certificate verification entirely.
If a user's environment has
certifi installed, a user can invoke
releng-tool with the quirk
releng.bzr.certifi enabled to use certifi's
certificates instead. For example:
releng-tool --quirk releng.bzr.certifi