Is it possible to connect to a q process that requires TLS?

[travis-leith]

worst case I can use stunnel probably (maybe).

[jshinonome]

Added TLS option in 2.5.1, not sure if it works. I don't have a process with TLS to test. Give it a try and let me know.

[jshinonome]

[travis-leith]

vs code tells me "unable to verify the first certificate". Not sure if this is a server setup problem or something that can be fixed by the extension. I will try to speak to someone who knows more about TLS than I do, and report back.

[travis-leith]

This StackOverflow question seems to be relevant: https://stackoverflow.com/questions/31673587/error-unable-to-verify-the-first-certificate-in-nodejs

Based on this, the I think the solution is to do one or both of the following

1. provide a mechanism to specify a path to a root certificate
2. provide the ability to disable certificate verification

[jshinonome]

Still required? I will try to add a path option for certificate.

[travis-leith]

Yes, that would be awesome!

[jshinonome]

https://nodejs.org/api/tls.html#tlsconnectoptions-callback
tls.connect(options[, callback])
There is no option for cert path, but servername...
Could you check if any option on the page I can use?

[travis-leith]

I am not an expert on these matters but I don't think servername is the right option here. Another (potentially less secure) option is to have another checkbox to control the rejectUnauthorized parameter. Would that be something you can consider?

[jshinonome]

I will give it a try.

[jshinonome]

I added the option rejectUnauthorized, not sure if it works. Please try v2.5.2 and let me know.

	if (params.useTLS) {
		socketArgs.push({ rejectUnauthorized: false })
	}

[travis-leith]

Thanks, I am away from the office until 11th. Will report back by then.

[travis-leith]

I have managed to test this, I am getting this now

Is this error coming from vscode-q, nodeq, or somewhere else?

[jshinonome]

from node-q...I guess unless you can write some code that connects from node to a q TLS process. I cannot really do anything else.

[travis-leith]

My mistake, this is working, I was not using it properly. Thanks for this!