Enable the usage of DPI Certs

[robin-weiland]

I have a docker container as part of a coder workspace. The whole server is behind a firewall that uses DPI (not my decision), and clients need to have the right certificate to not freak out about self-signed certs.
Before I added this cert to the container. I couldn't even install the code-server before getting an error.
Afterward, I can install it, but when I want to install an extension (either though the terraform or the code-server UI) I get the certificate error again.
Is there maybe a config or flag that lets code-server use system certs?

Error while installing extensions: self-signed certificate in certificate chain

self-signed certificate in certificate chain

Failed to install extension: ms-python.python: Installing extensions...

[code-asher]

I think this is more of a Node thing. You should be able to point the environment variable NODE_EXTRA_CA_CERTS to your system cert bundle (/etc/ssl/certs/ca-certificates.crt or something like that probably) or to just your self-signed certificate (make sure it is the full chain though).

There might also be a way to tell Node to use system certs via NODE_OPTIONS but I have not tried it.

VS Code has code to add system certificates (which I believe is supposed to run by default) but it has never worked for me unfortunately, probably some kind of bug there.

[robin-weiland]

Apologies for the late reply. I had already tried the NODE_EXTRA_CA_CERTS environment variable, but somehow set it to /usr/local/share/ca-certificates/... which was where I copied it before running update-ca-certificates. No idea, how I overlooked that.
Thank you for leading me to check this again.