Feature Request: Option to disable strict SSL

[PaulHMason]

I'm behind a corporate firewall the uses a self-signed certificate for SSL interception which breaks pub for Dart and Flutter. I haven't been able to get any of the proposed solutions to work (proxy and certificate path). Other package managers (npm and bower) offer the option to disable strict SSL - would it not be possible to do this with pub as well?

[kiran-cmyk]

Hi Paul, Did you find any workaround to resolve this issue?

[PaulHMason]

Hi Paul, Did you find any workaround to resolve this issue?

Unfortunately not - I've tried all the things with certificate paths that I've found, but nothing works. It pretty much puts Flutter out of the running for me.

[jonasfj]

Have you tried setting the environment variable: DART_VM_OPTIONS="--root-certs-file=path/to/cert.pem" (disclaimer I haven't tried to reproduce the issue)

Also set environment variables: https_proxy, http_proxy (see Troubleshooting pub).

Before doing pub run, flutter pub get or flutter packages get. Check that the certificate PEM encoded?

What OS are you on?

---

I think adding a --ca-file=path/to/file.pem flag to pub would be more reasonable (I think that's what motivated flutter/flutter#56607).
Allowing users to disable TLS outright seems dangerous... From what I can see npm currently advocates a config option to set a custom certificate.

[sigurdm]

Closing as stale as there was no response.

Please open a new issue if this is still a problem, and the suggestion above didn't help.