fix: pass --no-verify-ssl to version check and fix SSL_VERIFY env var

The version check (pypi.org query) was always using default SSL
verification, even when --no-verify-ssl was passed. This caused
startup errors for users behind corporate firewalls with self-signed
certificates.

Also fixes the SSL_VERIFY environment variable from "" to "false"
so LiteLLM correctly recognizes it.

Fixes #664

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

Author: shenpeng.sp0916

aider/main.py

@@ -519,7 +519,7 @@ def main(argv=None, input=None, output=None, force_git_root=None, return_coder=F
     if not args.verify_ssl:
         import httpx
 
-        os.environ["SSL_VERIFY"] = ""
+        os.environ["SSL_VERIFY"] = "false"
         litellm._load_litellm()
         litellm._lazy_module.client_session = httpx.Client(verify=False)
         litellm._lazy_module.aclient_session = httpx.AsyncClient(verify=False)
@@ -720,7 +720,9 @@ def get_io(pretty):
             return main(argv, input, output, right_repo_root, return_coder=return_coder)
 
     if args.just_check_update:
-        update_available = check_version(io, just_check=True, verbose=args.verbose)
+        update_available = check_version(
+            io, just_check=True, verbose=args.verbose, verify_ssl=args.verify_ssl
+        )
         analytics.event("exit", reason="Just checking update")
         return 0 if not update_available else 1
 
@@ -735,7 +737,7 @@ def get_io(pretty):
         return 0 if success else 1
 
     if args.check_update:
-        check_version(io, verbose=args.verbose)
+        check_version(io, verbose=args.verbose, verify_ssl=args.verify_ssl)
 
     if args.git:
         git_root = setup_git(git_root, io)

aider/versioncheck.py

@@ -61,7 +61,7 @@ def install_upgrade(io, latest_version=None):
     return
 
 
-def check_version(io, just_check=False, verbose=False):
+def check_version(io, just_check=False, verbose=False, verify_ssl=True):
     if not just_check and VERSION_CHECK_FNAME.exists():
         day = 60 * 60 * 24
         since = time.time() - os.path.getmtime(VERSION_CHECK_FNAME)
@@ -75,7 +75,10 @@ def check_version(io, just_check=False, verbose=False):
     import requests
 
     try:
-        response = requests.get("https://pypi.org/pypi/aider-chat/json")
+        response = requests.get(
+            "https://pypi.org/pypi/aider-chat/json",
+            verify=verify_ssl,
+        )
         data = response.json()
         latest_version = data["info"]["version"]
         current_version = aider.__version__