Ignoring bad certificate does not work

[farao]

For testing purposes, I need to ignore a self-signed certificate. I have tried getWith using the TLSSimpleSettings as shown here: https://gist.github.com/j-keck/4f025ea39d6da259c1dc - but I'm still getting the certificate error:

(InternalException (HandshakeFailed (Error_Protocol ("certificate has unknown CA",True,UnknownCa))))

Simplified example code:

let opts = defaults & manager .~ Left (mkManagerSettings (TLSSettingsSimple True False False) Nothing)
r <- getWith opts url