-
Notifications
You must be signed in to change notification settings - Fork 44
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
UNABLE_TO_GET_ISSUER_CERT_LOCALLY in Copilot Chat #525
Comments
I assume you're using a corporate proxy or some other non-standard network environment? Can you tell me what you know about it? |
Let me check soon, as my current working environment is quite new to me too. What I can say for now is, that a fresh npm/ yarn installation works out of the box, without the need to configure proxy etc. Also vanilla VSCode "networking" seems to work. However, what I researched so far is: the error code most probably is sourced from node. But this is just a guess. Kind, Pawel |
This normally means you have a self signed certificate in your certificate chain. You may want to try disabling |
Go into settings (ctl+,) and search for "http proxy". Then deselect the check box on "Http: Proxy Strict SSL". This allowed me to use copilot through a Zscaler proxy. |
Hi, I have been using copilot for a long time without any problems. I installed the latest version of VSC (1.84 for win32 X64). Since then I have had exactly the same problem.
Have a nice day Version: 1.83.1 (user setup) |
@gil31 Can you share your logs and some information about your network setup? |
Hi Logan, Unfortunately when installing version 1.83.1, I lost information related to the current problem. Have a good day |
Is anyone still blocked on this before I close the issue out? |
Why do you want to close it? This is an issue reported by many people out there. |
Are you still blocked? We've made some changes here |
Yes, this is still an issue |
I am behind zscaler and this did not seem to resolve the issue. NODE EXTRA CERTS is set as well |
Can you try adding this to your settings.json to try out some new experimental fetcher code we're working on
|
I will give that a try when I’m back at my desk
…On Sun, Nov 19, 2023 at 11:45 Logan Ramos ***@***.***> wrote:
Yes, this is still an issue
Can you try adding this to your settings.json to try out some new
experimental fetcher code we're working on
"github.copilot.advanced": {
"debug.useNodeFetcher": true
}
—
Reply to this email directly, view it on GitHub
<#525 (comment)>,
or unsubscribe
<https://github.com/notifications/unsubscribe-auth/AALK42BOFLKVWLYZVVEG2KLYFIZTTAVCNFSM6AAAAAA6ZTRUDKVHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMYTQMJXHEYTCNZVGU>
.
You are receiving this because you commented.Message ID:
***@***.***>
|
Works for me! (GitHub Copilot Chat - v0.11.2023112001 - Pre-Release) |
Same issue here. I'm using Zscaler. I have tried all the solutions here and nothing worked. (Downgrade Vscode, add "github.copilot.advanced", change "Http: Proxy Strict SSL") |
I get the same issue here. I'm using Zscaler. Disabling Version: 1.84.2 (user setup) |
@balexandermunoz What error do you see using the advanced setting |
@lramos15 Same as before: |
Could you install the Network Proxy Test extension (https://marketplace.visualstudio.com/items?itemName=chrmarti.network-proxy-test) and check the output of When asked for the URL enter |
@lramos15 like this? It's a 404, but I still don't get answer |
@balexandermunoz Apologies I didn't realize you weren't on the pre-release version of the extension. Could you try VS Code insiders with the latest pre-release version of the extension
as that setting is not in the release version yet. It should be in the release version next week. Based on the proxy test that should unblock you |
I didn’t move to prerelease either
…On Mon, Nov 27, 2023 at 10:51 Logan Ramos ***@***.***> wrote:
@balexandermunoz <https://github.com/balexandermunoz> Apologies I didn't
realize you weren't on the pre-release version of the extension.
Could you try VS Code insiders <https://code.visualstudio.com/insiders/>
with the latest pre-release version of the extension v0.11.2023112701 or
greater. As well as the setting
"github.copilot.advanced": {
"debug.useNodeFetcher": true
}
as that setting is not in the release version yet. It should be in the
release version next week.
Based on the proxy test that should unblock you
—
Reply to this email directly, view it on GitHub
<#525 (comment)>,
or unsubscribe
<https://github.com/notifications/unsubscribe-auth/AALK42BLN4PL4OLHQZF3UMLYGSZHBAVCNFSM6AAAAAA6ZTRUDKVHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMYTQMRYGEYDIMZSHE>
.
You are receiving this because you commented.Message ID:
***@***.***>
|
This fixed it for me |
Was able to get this fixed by switching to pre-release and using
|
This also solved the issue for me. MacOS 14.2.1 |
After upgrading to latest MacOS 14.3 many of our corporate VSCode copilot plugins fail due to SSL errors, as our company uses MITM / VPN with self signed certs. I tried the insider version, fresh install, add the plugins, added the above settings but no luck. Have raised a support ticket with Microsoft github service desk, and also working with Palo Alto to resolve for 100s of users. Any ideas, help, appreciated. |
Same Zscaler attack here, had to go to pre-release and also add the settings "github.copilot.advanced": { |
Hi, |
Same Zscaler attack here, had to go to pre-release and also add the settings "github.copilot.advanced": { |
This works pretty well for me. Thanks a lot! Version: 1.87.0 (user setup) |
I'm using Zscaler too
Make sure to reload the extension and VSCode if needed. VSCode : Github Copilot : |
Worked for me. Zscaler here. |
I also have this same issue, but when I enable all the settings, I get this error in the copilot debug output: 2024-04-05 14:17:14.866 [info] [extension] Error on conversation request: Error: unable to get local issuer certificate
at TLSSocket.onConnectSecure (node:_tls_wrap:1600:34)
at TLSSocket.emit (node:events:517:28)
at TLSSocket._finishInit (node:_tls_wrap:1017:8)
at TLSWrap.ssl.onhandshakedone (node:_tls_wrap:803:12)
at Socket.ondata (node:internal/js_stream_socket:77:22)
at Socket.emit (node:events:517:28)
at addChunk (node:internal/streams/readable:335:12)
at readableAddChunk (node:internal/streams/readable:308:9)
at Socket.Readable.push (node:internal/streams/readable:245:10)
at TCP.onStreamRead (node:internal/stream_base_commons:190:23) |
@EliiseS can you try |
@devm33 Unfortunately no help. The code completion co-pilot does work, which is good enough for now I suppose :) This is the error I receive with the above settings in the output terminal: 2024-04-10 09:57:23.257 [info] [extension] Error on conversation request: aJ: unable to get local issuer certificate
at K2e (/root/.vscode-server/extensions/github.copilot-chat-0.14.2024032901/dist/extension.js:92:29514)
at processTicksAndRejections (node:internal/process/task_queues:95:5)
at Git (/root/.vscode-server/extensions/github.copilot-chat-0.14.2024032901/dist/extension.js:92:31536)
at X8.fetch (/root/.vscode-server/extensions/github.copilot-chat-0.14.2024032901/dist/extension.js:1175:27890)
at hCe (/root/.vscode-server/extensions/github.copilot-chat-0.14.2024032901/dist/extension.js:1143:7965)
at wg.fetchMany (/root/.vscode-server/extensions/github.copilot-chat-0.14.2024032901/dist/extension.js:1143:12855)
at wg.fetchOne (/root/.vscode-server/extensions/github.copilot-chat-0.14.2024032901/dist/extension.js:1143:12036)
at aE.fetchConversationResponse (/root/.vscode-server/extensions/github.copilot-chat-0.14.2024032901/dist/extension.js:859:1235)
at aE._provideResponseWithProgress (/root/.vscode-server/extensions/github.copilot-chat-0.14.2024032901/dist/extension.js:857:1617)
at aE.provideResponseWithProgress (/root/.vscode-server/extensions/github.copilot-chat-0.14.2024032901/dist/extension.js:855:1830)
at r.x (/root/.vscode-server/extensions/github.copilot-chat-0.14.2024032901/dist/extension.js:869:859)
at i.$invokeAgent (/vscode/vscode-server/bin/linux-x64/5c3e652f63e798a5ac2f31ffd0d863669328dc4c/out/vs/workbench/api/node/extensionHostProcess.js:154:44359) |
Thanks for trying @EliiseS! That error stacks looks a bit odd to me though, did you restart VS Code after applying the setting? You should see something like |
@devm33 you're right, the setting doesn't seem to be having any effect. I only see I'm using: GitHub Copilot Chat - v0.14.2024032901 (pre-release) |
@EliiseS hm strange, just to sanity check, is that where you have it in your settings json file? "github.copilot.advanced": {
"debug.useElectronFetcher": true
}, Also in the |
@EliiseS Are you using VS Code remote like SSH, WSL, Dev Containers or Tunnels ? |
@alexdima I am using that exactly, for good measure I even set all other fetchers to false. I only get the log message of: @devm33 Ah, I am using a tunnel to a devcontainer, which runs through WSL. On regular windows the copilot chat actually works perfectly: 2024-04-15 15:20:18.925 [info] [FetcherService] Using Helix fetcher
2024-04-15 15:20:18.925 [info] [gitExtensionService] Initializing Git extension service.
2024-04-15 15:20:18.925 [info] [gitExtensionService] Successfully activated the vscode.git extension.
2024-04-15 15:20:18.925 [info] [gitExtensionService] Enablement state of the vscode.git extension: true.
2024-04-15 15:20:18.925 [info] [gitExtensionService] Successfully registered Git commit message provider.
2024-04-15 15:20:19.655 [info] [auth] Logged in as EliiseS
2024-04-15 15:20:19.979 [info] [chat] copilot token chat_enabled: true
2024-04-15 15:20:19.983 [info] [chat] Registration of interactive providers failed:,Error: Extension 'GitHub.copilot-chat' CANNOT use API proposal: aiTextSearchProvider.
Its package.json#enabledApiProposals-property declares: handleIssueUri, interactive, terminalDataWriteEvent, terminalExecuteCommandEvent, terminalSelection, terminalQuickFixProvider, chatParticipant, chatParticipantAdditions, defaultChatParticipant, chatVariableResolver, chatProvider, mappedEditsProvider, aiRelatedInformation, codeActionAI, findTextInFiles, textSearchProvider, contribSourceControlInputBoxMenu, newSymbolNamesProvider, findFiles2, extensionsAny, authLearnMore, testObserver but NOT aiTextSearchProvider.
The missing proposal MUST be added and you must start in extension development mode or use the following command line switch: --enable-proposed-api GitHub.copilot-chat
2024-04-15 15:20:19.983 [info] [githubTitleAndDescriptionProvider] Initializing GitHub PR title and description provider provider.
2024-04-15 15:20:19.983 [info] [githubTitleAndDescriptionProvider] GitHub.vscode-pull-request-github extension is not yet activated.
2024-04-15 15:20:19.991 [info] [auth] Got Copilot token for EliiseS
2024-04-15 15:20:27.520 [info] [chat fetch] url https://api.githubcopilot.com/chat/completions
2024-04-15 15:20:27.520 [info] [chat fetch] modelMaxPromptTokens 3072
2024-04-15 15:20:27.520 [info] [chat fetch] modelMaxResponseTokens 4096
2024-04-15 15:20:27.520 [info] [chat fetch] chat model gpt-4
2024-04-15 15:20:30.417 [info] [chat fetch] request.response: [https://api.githubcopilot.com/chat/completions], took 2896 ms
2024-04-15 15:20:30.440 [info] [streamMessages] message 0 returned. finish reason: [stop]
2024-04-15 15:20:30.441 [info] [streamChoices] request done: requestId: [8e03e798-97ff-46ad-8d10-a29303d2e942] responseId: [8e03e798-97ff-46ad-8d10-a29303d2e942] model deployment ID: []
2024-04-15 15:20:30.445 [info] [chat fetch] url https://api.githubcopilot.com/chat/completions
2024-04-15 15:20:30.445 [info] [chat fetch] modelMaxPromptTokens 7168
2024-04-15 15:20:30.445 [info] [chat fetch] modelMaxResponseTokens 4096
2024-04-15 15:20:30.445 [info] [chat fetch] chat model gpt-3.5-turbo
2024-04-15 15:20:31.510 [info] [chat fetch] request.response: [https://api.githubcopilot.com/chat/completions], took 1065 ms
2024-04-15 15:20:31.543 [info] [streamMessages] message 0 returned. finish reason: [stop]
2024-04-15 15:20:31.544 [info] [streamChoices] request done: requestId: [17e35bac-66d0-46b3-a979-0b6d58375af5] responseId: [17e35bac-66d0-46b3-a979-0b6d58375af5] model deployment ID: [x4dff5e5d11fc]
2024-04-15 15:20:46.327 [info] [chat fetch] url https://api.githubcopilot.com/chat/completions
2024-04-15 15:20:46.327 [info] [chat fetch] modelMaxPromptTokens 3072
2024-04-15 15:20:46.327 [info] [chat fetch] modelMaxResponseTokens 4096
2024-04-15 15:20:46.327 [info] [chat fetch] chat model gpt-4
2024-04-15 15:20:49.819 [info] [chat fetch] request.response: [https://api.githubcopilot.com/chat/completions], took 3491 ms
2024-04-15 15:20:49.857 [info] [streamMessages] message 0 returned. finish reason: [stop]
2024-04-15 15:20:49.857 [info] [streamChoices] request done: requestId: [9400238c-4450-4996-a89c-67cb9a6d3897] responseId: [9400238c-4450-4996-a89c-67cb9a6d3897] model deployment ID: []
2024-04-15 15:20:49.863 [info] [chat fetch] url https://api.githubcopilot.com/chat/completions
2024-04-15 15:20:49.863 [info] [chat fetch] modelMaxPromptTokens 7168
2024-04-15 15:20:49.863 [info] [chat fetch] modelMaxResponseTokens 4096
2024-04-15 15:20:49.863 [info] [chat fetch] chat model gpt-3.5-turbo
2024-04-15 15:20:50.701 [info] [chat fetch] request.response: [https://api.githubcopilot.com/chat/completions], took 837 ms
2024-04-15 15:20:50.723 [info] [streamMessages] message 0 returned. finish reason: [stop]
2024-04-15 15:20:50.724 [info] [streamChoices] request done: requestId: [eb166036-3202-4e56-b392-5ad9bb0cfd4b] responseId: [eb166036-3202-4e56-b392-5ad9bb0cfd4b] model deployment ID: [x4dff5e5d11fc] On just WSL, it won't even let me log in: 2024-04-15 13:41:54.223 [info] [fetcher] Using Helix fetcher, Electron fetcher is not available.
2024-04-15 13:44:07.656 [error] [auth] Extension activation failed: "tunneling socket could not be established, cause=connect ETIMEDOUT 127.0.0.42:9000" On just devcontainer, I get the same error as in devcontainer w/ tunneling. |
I am also behind Zscaler and this seams to have fixed the issue for me. |
Just to add to the solution and description, I'm also behind Zscaler. The reason it's not working out of the box is that your companies are using SSL inspection which involves replacing the certificate you're using on some or all sites so they can decrypt/re-encrypt the traffic, usually to log or analyze. You can confirm this by visiting https://api.githubcopilot.com/ and looking at the parent of the issued cert, it'll be Zscaler. The same is likely true for other proxy or VPN solutions that work similarly. The internal (to the company) fix would be to stop SSL inspection on the domains identified here. For me, the solution to use the pre-release of the GitHub Copilot and GitHub Copilot Chat along with the latest version of VSCode resolved the issue. I did not need to modify the Proxy SSL or the NodeFetcher values. Version: 1.89.0 (user setup) |
I had this issue on the newest version of 0.15.2, rolling back to 0.15.1 solved it for me |
this work for me. |
This comment worked for me. I am behind Zscaler and in WSL. And this has worked in my case Updated the following in "http.proxyStrictSSL": false, And in workspace "github.copilot.advanced": {
"debug.useNodeFetcher": true
}, |
@sairaghavak thank you! same on WSL behind Zscaler in my case
|
Worked for me thanks. |
VS Code Version:
Version: 1.84.0-insider (Universal)
Commit: d037ac076cee195194f93ce6fe2bdfe2969cc82d
Date: 2023-11-01T10:18:23.824Z (6 hrs ago)
Electron: 25.9.2
ElectronBuildId: 24603566
Chromium: 114.0.5735.289
Node.js: 18.15.0
V8: 11.4.183.29-electron.0
OS: Darwin arm64 23.1.0
OS Version: macOs 14.1 (23B74)
Logs: n/A
Steps to Reproduce:
The text was updated successfully, but these errors were encountered: