cannot verify download.geofabrik.de's certificate

[Bear4]

It doesn't load the database when importing the image. Problem with certificates inside the container... On the host where I have docker I can download pbf files.

But in the container it says
root@556d724c8155:/# wget https://download.geofabrik.de/europe/poland/podlaskie-latest.osm.pbf
--2025-03-24 10:44:32-- https://download.geofabrik.de/europe/poland/podlaskie-latest.osm.pbf
Resolving download.geofabrik.de (download.geofabrik.de)... 95.217.45.61, 95.217.63.98, 65.21.229.87, ...
Connecting to download.geofabrik.de (download.geofabrik.de)|95.217.45.61|:443... connected.
ERROR: cannot verify download.geofabrik.de's certificate, issued by ‘emailAddress=’:
Unable to locally verify the issuer's authority.
To connect to download.geofabrik.de insecurely, use `--no-check-certificate'.

How to use --no-check-certificate' inside container or maybe in image?

Import command:
docker run -e UPDATES=enabled -e DOWNLOAD_PBF=https://download.geofabrik.de/europe/poland/podlaskie-latest.osm.pbf -e DOWNLOAD_POLY=https://download.geofabrik.de/europe/poland/podlaskie.poly -v osm-data:/data/database/ -v osm-tiles:/data/tiles overv/openstreetmap-tile-server import
or
docker run -e UPDATES=enabled -v /home/my/podlaskie-latest.osm.pbf:/data/region.osm.pbf -v /home/my/podlaskie.poly:/data.poly -v osm-data:/data/database/ overv/openstreetmap-tile-server import

[Bear4]

Ok. to use --no-check-certificate:
docker run -e UPDATES=enabled -e DOWNLOAD_PBF=https://download.geofabrik.de/europe/poland/podlaskie-latest.osm.pbf -e DOWNLOAD_POLY=https://download.geofabrik.de/europe/poland/podlaskie.poly -e WGET_ARGS="--no-check-certificate" -e REPLICATION_URL=http://download.geofabrik.de/europe/poland/podlaskie-updates/ -e PYTHONHTTPSVERIFY=0 -v osm-data:/data/database/ -v osm-tiles:/data/tiles overv/openstreetmap-tile-server import

But stil have err this time at
requests.exceptions.SSLError: HTTPSConnectionPool(host='osmdata.openstreetmap.de', port=443): Max retries exceeded with url: /download/simplified-water-polygons-split-3857.zip (Caused by SSLError(SSLCertVerificationError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: unable to get local issuer certificate (_ssl.c:997)')))

INFO:root: Fetching https://osmdata.openstreetmap.de/download/simplified-water-polygons-split-3857.zip
Traceback (most recent call last):
File "/usr/lib/python3/dist-packages/urllib3/connectionpool.py", line 699, in urlopen
httplib_response = self._make_request(
File "/usr/lib/python3/dist-packages/urllib3/connectionpool.py", line 382, in _make_request
self._validate_conn(conn)
File "/usr/lib/python3/dist-packages/urllib3/connectionpool.py", line 1012, in validate_conn
conn.connect()
File "/usr/lib/python3/dist-packages/urllib3/connection.py", line 411, in connect
self.sock = ssl_wrap_socket(
File "/usr/lib/python3/dist-packages/urllib3/util/ssl.py", line 449, in ssl_wrap_socket
ssl_sock = ssl_wrap_socket_impl(
File "/usr/lib/python3/dist-packages/urllib3/util/ssl.py", line 493, in _ssl_wrap_socket_impl
return ssl_context.wrap_socket(sock, server_hostname=server_hostname)
File "/usr/lib/python3.10/ssl.py", line 513, in wrap_socket
return self.sslsocket_class._create(
File "/usr/lib/python3.10/ssl.py", line 1071, in _create
self.do_handshake()
File "/usr/lib/python3.10/ssl.py", line 1342, in do_handshake
self._sslobj.do_handshake()
ssl.SSLCertVerificationError: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: unable to get local issuer certificate (_ssl.c:997)

During handling of the above exception, another exception occurred:

Traceback (most recent call last):
File "/usr/lib/python3/dist-packages/requests/adapters.py", line 439, in send
resp = conn.urlopen(
File "/usr/lib/python3/dist-packages/urllib3/connectionpool.py", line 755, in urlopen
retries = retries.increment(
File "/usr/lib/python3/dist-packages/urllib3/util/retry.py", line 574, in increment
raise MaxRetryError(_pool, url, error or ResponseError(cause))
urllib3.exceptions.MaxRetryError: HTTPSConnectionPool(host='osmdata.openstreetmap.de', port=443): Max retries exceeded with url: /download/simplified-water-polygons-split-3857.zip (Caused by SSLError(SSLCertVerificationError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: unable to get local issuer certificate (_ssl.c:997)')))

During handling of the above exception, another exception occurred:

Traceback (most recent call last):
File "/data/style/scripts/get-external-data.py", line 311, in
main()
File "/data/style/scripts/get-external-data.py", line 235, in main
download = s.get(source["url"], headers=headers)
File "/usr/lib/python3/dist-packages/requests/sessions.py", line 557, in get
return self.request('GET', url, **kwargs)
File "/usr/lib/python3/dist-packages/requests/sessions.py", line 544, in request
resp = self.send(prep, **send_kwargs)
File "/usr/lib/python3/dist-packages/requests/sessions.py", line 657, in send
r = adapter.send(request, **kwargs)
File "/usr/lib/python3/dist-packages/requests/adapters.py", line 514, in send
raise SSLError(e, request=request)
requests.exceptions.SSLError: HTTPSConnectionPool(host='osmdata.openstreetmap.de', port=443): Max retries exceeded with url: /download/simplified-water-polygons-split-3857.zip (Caused by SSLError(SSLCertVerificationError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: unable to get local issuer certificate (_ssl.c:997)')))