Skip to content

Codium not using my ssl certificates #2252

@abijacik

Description

@abijacik

I am trying to fetch extensions in Codium inside a Docker container, but I keep getting the error: "Failed to fetch extensions."

My internet connection goes through a corporate proxy that intercepts SSL traffic (HTTPS decryption) and replaces certificates with its own self-signed certificates. To ensure my system trusts this proxy, I have installed the required certificates by copying them to /usr/local/share/ca-certificates/ and running update-ca-certificates. I verified that my certificates are correctly included in /etc/ssl/certs/ca-certificates.crt.

To start Codium, I run: codium --no-sandbox

When I open the Extensions Marketplace, I get the error Failed to fetch extensions. I checked the Developer Console (Help → Toggle Developer Tools), and I see the following error message:
net::ERR_CERT_AUTHORITY_INVALID

Image

I also tried setting the NODE_EXTRA_CA_CERTS variable before launching Codium:
NODE_EXTRA_CA_CERTS=/etc/ssl/certs/ca-certificates.crt codium --no-sandbox
However, this did not resolve the issue. Codium still does not trust the imported certificates.

As a temporary workaround, I tried launching Codium with the --ignore-certificate-errors flag: codium --no-sandbox --ignore-certificate-errors This allows me to bypass the error, but it is not a proper solution.

Other applications in the system (e.g., curl) trust the proxy's certificate and work without issues. However, Codium, which is based on Electron, seems to ignore system-wide certificates and does not trust the proxy. I expect Codium to recognize and trust my organization's certificates, allowing me to fetch extensions without errors.

Any ideas or workarounds on how to properly make Codium trust imported certificates would be greatly appreciated.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions