microsoft / microsoft/vscode-remote-release

Support self-signed certs / custom CAs for devtunnels

Open
#9,923 6 comments 24 reactions 1 assignee View on GitHub

@connor4312 is already working on this.

Since May 31, 2024.

feature-request tunnels
Dominant language
Dockerfile
Stars
4.2k
Forks
470
Avg merge
1d 1h
Merged PRs (30d)
1

Description

I'm able to use vs code and dev tunnels via the browser, but when I attempt to use it on a local install of VS Code I get an error Tunnel service HTTPS certificate is invalid. This may be caused by the use of a self signed certificate or a firewall intercepting the connection.

It looks like VS Code has a setting to disable strictSSL which is used in some part of VSCode (like here https://github.com/microsoft/vscode/blob/937aa312c99eb80924a19ab0f58ee07164946638/src/vs/platform/request/node/requestService.ts#L141C63-L141C72) but this setting doesn't appear to be respected by the tunnel extension. (If I manually unmini

VS Code also allows me to download extensions without disabling strictSSL so I believe the extension is not respecting the system CA store nor node's NODE_EXTRA_CA_CERTS?

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.