How do I get Visual Studio code to trust our self-signed proxy certificate?

Question

Our corporate firewall / proxy server does not allow VS-code to install extensions, because the code does not trust something in the chain. It does not provide reliable error information, but when this happens, it is: "a self-signed certificate in the certificate chain."

This sounds like an OpenSSL error, but I am missing an introduction to OpenSSL to know how to trust a certificate?

Answer 1

This is a terrible answer (not very secure), but it seems to be Microsoft's current official answer. Use "http.proxyStrictSSL": false in your settings.json file.

This should work to get around the problem of installing extensions inside the corporate network, but I would recommend disabling this setting if you intend to work from home / cafe and are not connected to the corporate VPN.

https://github.com/Microsoft/vscode/issues/3492

Answer 2

I had the same problem, not when installing the extension, but when some extension tried to load data. Adding "http.proxyStrictSSL": false to my settings file does not work. Disabling SSL is also a very bad idea.

It was decided to install the win-ca plugin for Visual Studio Code, which makes trusted Windows certificates available for extensions.