There is a common issue to work in WSL under DPI shield. When we have not access to secured endpoints.
The idea is to copy ca certificates from host Windows machine into WSL.
In Windows host machine use the suggested script
get-all-certs.ps1
to extract all windows ca certificates in the specially created folder all-certificates just in current folder.
And after link the created folder to /etc/ssl/certs and import its content. Go to WSL and do the follow
sudo mv /etc/ssl/certs /etc/ssl/certs.orig
sudo ln -s /mnt/<path to the "all-certificates" folder> /etc/ssl/certs
update-ca-certificates ## debian & ubuntu; centos, etc requires something else(?)
Enjoy :)
PS The wrapper around wsl start (to extract certificates before every wsl start) and adding update-ca-certificates into .bashrc I left for you ))