Two potential solutions:

[terrypin999]

          Two potential solutions:

Use your browser to go to https://drazzy.com/package_drazzy.com_index.json and when it complains about the certificate expiring, tell it that it's OK, save the file to disk and then in your IDE you can use file:///path/from/root/of/disk/to/file/package_drazzy.com_index.json or for Windows file:///c:/path/from/root/of/disk/to/file.package_drazzy.com_index.json.

Or if you figure that I've got many better things to do than try to hack in to peoples computers because they visited one of my web servers, you can use https://descartes.net/package_drazzy.com_index.json as a temporary measure. I can't hack in to your computer by altering the JSON file either but I could do odd things to the board support files if I had nothing better to do.

Anyone who wants to get all pointy fingered will have me delete this workaround, so please just don't.

Originally posted by @HeadBoffin in https://github.com/SpenceKonde/megaTinyCore/issues/1059#issuecomment-1950286469

[terrypin999]

Hobbyist, not programmer here, and find github navigation hard work. Seemed unable to simply comment to @HeadBoffin 's helpful post, so here instead. Opened the link you provided. No mention of certificates. How do I get from there to an alternative core, please? Do I simply add https://descartes.net/package_drazzy.com_index.json to these in IDE Preferences ? https://mcudude.github.io/MiniCore/package_MCUdude_MiniCore_index.json http://digistump.com/package_digistump_index.json http://drazzy.com/package_drazzy.com_index.json https://raw.githubusercontent.com/damellis/attiny/ide-1.6.x-boards-manager/package_damellis_attiny_index.json https://raw.githubusercontent.com/MHEtLive/arduino-boards-index/master/package_mhetlive_index.json

[tyeth]

Just to say last time the certificate expired I setup a mirror on a subdomain using cloudflare to proxy the content and provide a valid SSL certificate. This ignores all certificate issues on drazzy.com and is zero cost (free cloudflare plan)

E.g. https://drazzy.good-enough.cloud [via cloudflare SSL] = https://drazzy.com

So the board support package URL becomes https://drazzy.good-enough.cloud/package_drazzy.com_index.json

Here is our board URL change:

https://github.com/adafruit/ci-arduino/commit/6b7a47c49ef963f3712a84ea427a9233bc520cb5

Probably worth me tagging issue #1059

[henrygab]

Fascinating. It does seem like a bug in CloudFlare to allow proxy to an HTTPS site where the certificate is expired, though, doesn't it?

[tyeth]

Hehe, I call it a feature 🐛

I think it's actually part of their ability to protect and very a certificate chain between your server and them (verifying certs from your private certificate signing authority), while offering a public cloudflare certificate for your CDN proxied traffic (web users)