http://kernel.org redirects to https://

workaround for uninstalled certs, add --no-check-certificate parameter