aws / aws-toolkit-vscode

Amazon Q, CodeCatalyst, Local Lambda debug, SAM/CFN syntax, ECS Terminal, AWS resources
https://marketplace.visualstudio.com/items?itemName=AmazonWebServices.amazon-q-vscode
Apache License 2.0
1.45k stars 377 forks source link

Codewhisperer can not be used behind proxy #4056

Open hdbdn77 opened 9 months ago

hdbdn77 commented 9 months ago

Problem

2023-11-17 14:02:30 [ERROR]: webviewId="authWebview": Error: Webview error -> Error: Webview backend command failed: "startCodeWhispererBuilderIdSetup()" -> Error: Failed to connect to AWS Builder ID [FailedToConnect] -> Error: Hostname/IP does not match certificate's altnames: Host: oidc.us-east-1.amazonaws.com. is not in the cert's altnames: DNS:tremorhub.com, DNS:.partners.tremorhub.com, DNS:.eb.tremorhub.com, DNS:.cast.telaria.com, DNS:.telaria.com, DNS:.ads.tremorhub.com, DNS:.tremorhub.com, DNS:*.publishers.tremorhub.com [ERR_TLS_CERT_ALTNAME_INVALID]

Steps to reproduce the issue

Expected behavior

System details (run the AWS: About Toolkit command)

2023-11-17 14:02:30 [ERROR]: webviewId="authWebview": Error: Webview error -> Error: Webview backend command failed: "startCodeWhispererBuilderIdSetup()" -> Error: Failed to connect to AWS Builder ID [FailedToConnect] -> Error: Hostname/IP does not match certificate's altnames: Host: oidc.us-east-1.amazonaws.com. is not in the cert's altnames: DNS:tremorhub.com, DNS:.partners.tremorhub.com, DNS:.eb.tremorhub.com, DNS:.cast.telaria.com, DNS:.telaria.com, DNS:.ads.tremorhub.com, DNS:.tremorhub.com, DNS:.publishers.tremorhub.com [ERR_TLS_CERT_ALTNAME_INVALID] 2023-11-17 14:04:16 [INFO]: telemetry: sent batch (size=20) 2023-11-17 14:04:17 [INFO]: telemetry: sent batch (size=7) 2023-11-17 14:07:50 [INFO]: selected AWS ID sign in 2023-11-17 14:07:51 [ERROR]: API response (oidc.us-east-1.amazonaws.com /client/register): { reason: "Host: oidc.us-east-1.amazonaws.com. is not in the cert's altnames: DNS:tremorhub.com, DNS:.partners.tremorhub.com, DNS:.eb.tremorhub.com, DNS:.cast.telaria.com, DNS:.telaria.com, DNS:.ads.tremorhub.com, DNS:.tremorhub.com, DNS:.publishers.tremorhub.com", host: 'oidc.us-east-1.amazonaws.com', cert: { subject: [Object: null prototype] { CN: 'tremorhub.com' }, issuer: [Object: null prototype] { C: 'US', O: 'Amazon', CN: 'Amazon RSA 2048 M02' }, subjectaltname: 'DNS:tremorhub.com, DNS:.partners.tremorhub.com, DNS:.eb.tremorhub.com, DNS:.cast.telaria.com, DNS:.telaria.com, DNS:.ads.tremorhub.com, DNS:.tremorhub.com, DNS:.publishers.tremorhub.com', infoAccess: [Object: null prototype] { 'OCSP - URI': [Array], 'CA Issuers - URI': [Array] }, ca: false, modulus: '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', bits: 2048, exponent: '0x10001', pubkey: <Buffer 30 82 01 22 30 0d 06 09 2a 86 48 86 f7 0d 01 01 01 05 00 03 82 01 0f 00 30 82 01 0a 02 82 01 01 00 b0 bd 75 1f e9 5c 7a 3e a9 c8 58 fa af c4 58 1b 65 ... 244 more bytes>, valid_from: 'Jul 3 00:00:00 2023 GMT', valid_to: 'Jul 30 23:59:59 2024 GMT', fingerprint: '19:A2:1F:26:7D:1F:7E:24:58:53:CE:9D:90:CD:A3:DD:82:1D:61:DD', fingerprint256: '06:06:70:2F:1F:AF:66:09:C5:7E:BA:1D:2A:48:AC:F8:E4:EC:E2:47:59:A6:7A:8C:1E:0B:79:B0:07:61:0F:5A', fingerprint512: 'D8:7F:B1:7D:20:68:9F:3C:11:CE:4A:E5:E0:D5:C8:DA:29:39:94:38:22:00:CD:67:6C:0C:19:B7:1A:02:BC:FC:25:00:E0:BC:D8:5C:09:24:0E:8B:70:5D:D1:92:43:09:83:99:30:EA:E0:E2:E9:5A:AE:5A:CA:11:A9:96:A3:14', ext_key_usage: [ '1.3.6.1.5.5.7.3.1', '1.3.6.1.5.5.7.3.2' ], serialNumber: '048550878c376615fc991bb97d9fafad', raw: <Buffer 30 82 06 5c 30 82 05 44 a0 03 02 01 02 02 10 04 85 50 87 8c 37 66 15 fc 99 1b b9 7d 9f af ad 30 0d 06 09 2a 86 48 86 f7 0d 01 01 0b 05 00 30 3c 31 0b ... 1582 more bytes>, issuerCertificate: { subject: [Object: null prototype], issuer: [Object: null prototype], infoAccess: [Object: null prototype], ca: true, modulus: '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', bits: 2048, exponent: '0x10001', pubkey: <Buffer 30 82 01 22 30 0d 06 09 2a 86 48 86 f7 0d 01 01 01 05 00 03 82 01 0f 00 30 82 01 0a 02 82 01 01 00 bb 43 18 c6 5a a8 79 de 29 e8 b5 6f 2e be a5 43 cf ... 244 more bytes>, valid_from: 'Aug 23 22:25:30 2022 GMT', valid_to: 'Aug 23 22:25:30 2030 GMT', fingerprint: '41:4A:20:60:B7:38:C6:35:CC:7F:C2:43:E0:52:61:55:92:83:0C:53', fingerprint256: 'B0:F3:30:A3:1A:0C:50:98:7E:1C:3A:7B:B0:2C:2D:DA:68:29:91:D3:16:5B:51:7B:D4:4F:BA:4A:60:20:BD:94', fingerprint512: '5A:99:EE:B9:7B:B5:65:26:5F:E6:12:8A:BC:EC:C8:75:5D:BF:64:1C:B8:E7:20:59:6F:44:B9:7D:0F:39:E1:CC:CB:B8:07:48:70:48:B4:4A:5C:F9:B0:94:21:66:09:20:DC:7B:D8:74:48:5F:8A:E0:DF:DA:C2:A7:30:82:7B:F1', ext_key_usage: [Array], serialNumber: '0773124a4bcbd44ec7b53beaf194842d3a0fa1', raw: <Buffer 30 82 04 5e 30 82 03 46 a0 03 02 01 02 02 13 07 73 12 4a 4b cb d4 4e c7 b5 3b ea f1 94 84 2d 3a 0f a1 30 0d 06 09 2a 86 48 86 f7 0d 01 01 0b 05 00 30 ... 1072 more bytes>, issuerCertificate: [Object] } }, code: 'ERR_TLS_CERT_ALTNAME_INVALID' } 2023-11-17 14:07:51 [ERROR]: webviewId="authWebview": Error: Webview error -> Error: Webview backend command failed: "startCodeWhispererBuilderIdSetup()" -> Error: Failed to connect to AWS Builder ID [FailedToConnect] -> Error: Hostname/IP does not match certificate's altnames: Host: oidc.us-east-1.amazonaws.com. is not in the cert's altnames: DNS:tremorhub.com, DNS:.partners.tremorhub.com, DNS:.eb.tremorhub.com, DNS:.cast.telaria.com, DNS:.telaria.com, DNS:.ads.tremorhub.com, DNS:.tremorhub.com, DNS:.publishers.tremorhub.com [ERR_TLS_CERT_ALTNAME_INVALID] 2023-11-17 14:09:17 [INFO]: telemetry: sent batch (size=2)

justinmk3 commented 9 months ago

Looks like you are behind a network proxy. You need to configure vscode: https://code.visualstudio.com/docs/setup/network#_proxy-server-support

hdbdn77 commented 9 months ago

I set "http.proxySupport": "on", which solved the setup failed problem. But in the proceed to browser link, after clicking Confirm and continue, I received TypeError Failed to fetch. But when writing code in vscode, I can still see and use the toolbar. Is this the offline codewhisperer?