Why does my Quartus® Prime Installation fail with certificate error: SSL certificate problem: unable to get local issuer certificate (curlcode 60)?

Description

Due to a problem in the Quartus® Prime Installer Software, you might see the error message shown below when you click Download & Install. This happens because the certificate bundled with the Quartus® Prime Installer Software is no longer accepted by the Altera® Content Delivery Network (CDN). As a result, secure downloads initiated during the installation process cannot be verified using the outdated certificate.

The issue impacts the Installer for the following versions of Quartus software:

The KDB workaround provided below applies to the following versions of Quartus software:

Note that for all other affected versions not covered by the KDB, you cannot use the installer workaround and must download Quartus software package files individually without using the installer.  Separate packages can be found in the Individual Files tab of the Quartus Software Download pages.

Resolution

To work around this problem, follow these steps: 

1. Download and unzip the cacert.zip, which contains the cacert.pem certificate file.

2. Specify the new certificate using one of the following methods:

i) Command Line Interface (CLI):
Open a command prompt or terminal and run the installer with the--cacert option, pointing to the new certificate file.

Windows*:

qinst_<version>.exe -sp"--cacert <full path to cacert.pem>"

Linux*:

qinst_<version>.run -- --cacert <full path to cacert.pem>

ii) Graphical User Interface (GUI):
- Open the Quartus® Prime Installer, navigate to Settings, locate the CA Certificate Path, and specify the full path to the cacert.pem certificate file.
- Then, click Apply > OK.

This problem is scheduled to be resolved in a future release of the Quartus® Prime Installer Software.