Configuring R libcurl to work with Netskope Certification

Hi everyone.

I'm running R 4.4 on a corporate Windows device. The device sits behind Netskope for certification.

Browsers can access CRAN and Posit sites normally, but R package installation is failing when using the default libcurl/OpenSSL networking stack. I get a 'SSL connect error' message.

We confirmed that all of the following are working:

  • internet connectivity
  • DNS
  • firewall access

Even package installation itself is working when I use the wininet method.

It is also definitely not a permissions issue as it doesn't work when we install using admin users.

Our IT team supplied Netskope root/intermediate certificates, and we configured CURL_CA_BUNDLE to point to the combined PEM bundle, but libcurl requests still fail when trying to download from CRAN.

Has anyone successfully configured R/libcurl to trust Netskope (or similar TLS inspection products such as ZScaler) on Windows? How can I determined whether libcurl is using the supplied certificates correctly or whether an additional certificate-chain or trust-store configuration step is required?

I am using install.packages.