search

microsoft / vscode-remote-release

Visual Studio Code Remote Development: Open any folder in WSL, in a Docker container, or on a remote machine using SSH and take advantage of VS Code's full feature set.
https://aka.ms/vscode-remote
Other
3.61k stars 275 forks source link

Support self-signed certs / custom CAs for devtunnels #9923

Open matthewarkin opened 3 months ago

matthewarkin commented 3 months ago

I'm able to use vs code and dev tunnels via the browser, but when I attempt to use it on a local install of VS Code I get an error Tunnel service HTTPS certificate is invalid. This may be caused by the use of a self signed certificate or a firewall intercepting the connection.

It looks like VS Code has a setting to disable strictSSL which is used in some part of VSCode (like here https://github.com/microsoft/vscode/blob/937aa312c99eb80924a19ab0f58ee07164946638/src/vs/platform/request/node/requestService.ts#L141C63-L141C72) but this setting doesn't appear to be respected by the tunnel extension. (If I manually unmini

VS Code also allows me to download extensions without disabling strictSSL so I believe the extension is not respecting the system CA store nor node's NODE_EXTRA_CA_CERTS?

VSCodeTriageBot commented 3 months ago

This feature request is now a candidate for our backlog. The community has 60 days to upvote the issue. If it receives 10 upvotes we will move it to our backlog. If not, we will close it. To learn more about how we handle feature requests, please see our documentation.

Happy Coding!

vs-code-engineering[bot] commented 1 month ago

This feature request has not yet received the 10 community upvotes it takes to make to our backlog. 10 days to go. To learn more about how we handle feature requests, please see our documentation.

Happy Coding

vs-code-engineering[bot] commented 1 month ago

:slightly_smiling_face: This feature request received a sufficient number of community upvotes and we moved it to our backlog. To learn more about how we handle feature requests, please see our documentation.

Happy Coding!

inigohidalgo commented 1 month ago

Is there any guidance on possible workarounds? I've been going crazy trying to debug this, trying to figure out which host I'm supposed to stop inspecting. In the GH CodeSpaces documentation there's some guidance related to not inspecting traffic to certain hosts, but I am not sure if the equivalent for Tunnels could work

https://docs.github.com/en/codespaces/troubleshooting/troubleshooting-your-connection-to-github-codespaces#github-codespaces-extension-for-visual-studio-code-cannot-connect