This is for Tracker 6.3.0 on macOS 14.7.4. My organization uses a self-signed SSL intercept, for which I have a .pem file. Tracker doesn't know about this, so I get messages like "The web server is unavailable. Please check your network connection." when trying to open the Library Browser.

For most command-line programs I can specify an environment variable like

REQUESTS_CA_BUNDLE=/path/to/cacert.pem
or
SSL_CERT_FILE=/path/to/cacert.pem

on the command line when I call a program that needs network access.

When I run Tracker from the command line via
java -jar /Applications/Tracker.app/Contents/app/tracker_starter.jar

I get the error

OSPLog.debug ResourceLoader failed to read https://opensourcephysics.github.io/tracker-website/css/library.css javax.net.ssl.SSLHandshakeException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target

But my typical environment variables seem to have no effect. Any ideas?