_Another_ way to do this, mentioned in that page, would be to tell curl to trust _any_ CA cert. You could do this by adding another RUN sed command to add the -k command to curl:
RUN sed -i -e 's/run curl/run curl -k/g'  \${SDC_DIST}/libexec/_stagelibs