Can't install remote extensions

[afarntrog]

When I attempt to install a remote extension I get the following error:

[2021-07-07 13:20:37.906] [remoteagent] [error] Failed to install extension: ms-python.python unable to get local issuer certificate

 
[2021-07-07 09:20:37.942] [window] [error] ["Error: unable to get local issuer certificate","    at TLSSocket.onConnectSecure (_tls_wrap.js:1502:34)","    at TLSSocket.emit (events.js:314:20)","    at TLSSocket._finishInit (_tls_wrap.js:937:8)","    at TLSWrap.ssl.onhandshakedone (_tls_wrap.js:711:12)"]

[2021-07-07 09:20:37.965] [window] [error] unable to get local issuer certificate: Error: unable to get local issuer certificate

    at TLSSocket.onConnectSecure (_tls_wrap.js:1502:34)

    at TLSSocket.emit (events.js:314:20)

    at TLSSocket._finishInit (_tls_wrap.js:937:8)

    at TLSWrap.ssl.onhandshakedone (_tls_wrap.js:711:12)

I run the code-server using the official image like so:
docker run -it --name code-server-test -p SERVER_IP:8080:8080 -v "$HOME/.config:/home/coder/.config" -v "$PWD:/home/coder/project" -u "$(id -u):$(id -g)" -e "DOCKER_USER=$USER" codercom/code-server:latest

What has to be done to fix this?

[jsjoeio]

That's very strange. I have never seen this error before 🤔

Hmm... looks like this worked in the past. Not sure about now.

Or this fix.

Basically, putting NODE_EXTRA_CA_CERTS=/etc/ssl/certs/ca-certificates.crt in your environment. Not sure why that's happening to you though

[code-asher]

I should also add NODE_TLS_REJECT_UNAUTHORIZED has no effect because VS Code basically overrides that option.

[valibali]

I could progrees with the issue. With adding the correct certificate, the TLS verification issue is now gone, but I have another one when trying to do the same (install an extension from the UI)
2023-07-07 12:50:13.188 [error] Error: Server returned 403 at p (/usr/lib/code-server/lib/vscode/out/vs/server/node/server.main.js:93:16505) at e.ExtensionGalleryServiceWithNoStorageService.getManifest (/usr/lib/code-server/lib/vscode/out/vs/server/node/server.main.js:141:89634) at processTicksAndRejections (node:internal/process/task_queues:96:5) at async e.ExtensionManagementService.G (/usr/lib/code-server/lib/vscode/out/vs/server/node/server.main.js:141:32581) at async e.ExtensionManagementService.installFromGallery (/usr/lib/code-server/lib/vscode/out/vs/server/node/server.main.js:141:23897) 2023-07-07 12:50:13.206 [error] Server returned 403: Error: Server returned 403 at p (/usr/lib/code-server/lib/vscode/out/vs/server/node/server.main.js:93:16505) at e.ExtensionGalleryServiceWithNoStorageService.getManifest (/usr/lib/code-server/lib/vscode/out/vs/server/node/server.main.js:141:89634) at processTicksAndRejections (node:internal/process/task_queues:96:5) at async e.ExtensionManagementService.G (/usr/lib/code-server/lib/vscode/out/vs/server/node/server.main.js:141:32581) at async e.ExtensionManagementService.installFromGallery (/usr/lib/code-server/lib/vscode/out/vs/server/node/server.main.js:141:23897)

code-server: v4.14.1
Code: 1.79.2
Commit: 695af097c7bd098fbf017ce3ac85e09bbc5dda06
Date: 2023-06-22T06:47:55.646Z (2 wks ago)
Browser: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/99.114.0.0 Safari/537.36 Edg/99.114.1823.67

[valibali]

I think this is because our corporate proxy is blocking gallery address. Strange. How crosscheck this?

[code-asher]

That sounds plausible. Does curl https://open-vsx.org give you the same 403? What if you open it in your browser?

[valibali]

Afterall I managed to solve this issue - it was a combination of a corporate proxy replacing the certificate + a wrong NODE_EXTRA_CA_CERTS value.