UNABLE_TO_GET_ISSUER_CERT_LOCALLY

[gbritton1]

re: microsoft/vscode-mssql#1563

According to the closing note:

That's an issue you can open against vscode. The extension installation belongs to them, but if you see any issues with the extension itself, feel free to open an issue.

[ERROR] Error: Request error: UNABLE_TO_GET_ISSUER_CERT_LOCALLY

Note: I am behind a corp fw. FWIW I tried the suggestion here: Network Connections in Visual Studio Code

where it says, in part:

If all else fails, you can tell VS Code to ignore all certificate errors using the --ignore-certificate-errors command-line flag. Warning: This is dangerous and not recommended, since it opens the door to security issues.

However, that is an invalid flag :

code --ignore-certificate-errors
Option 'ignore-certificate-errors' is unknown. Ignoring.
Version: 1.41.1 (system setup)
Commit: 26076a4
Date: 2019-12-18T14:58:56.166Z
Electron: 6.1.5
Chrome: 76.0.3809.146
Node.js: 12.4.0
V8: 7.6.303.31-electron.0
OS: Windows_NT x64 10.0.18362

VS Code version: Code 1.41.1 (26076a4, 2019-12-18T14:58:56.166Z)
OS version: Windows_NT x64 10.0.18362

System Info
Item Value
CPUs Intel(R) Core(TM) i7-8650U CPU @ 1.90GHz (8 x 2112)
GPU Status 2d_canvas: enabled
flash_3d: enabled
flash_stage3d: enabled
flash_stage3d_baseline: enabled
gpu_compositing: enabled
metal: disabled_off
multiple_raster_threads: enabled_on
oop_rasterization: disabled_off
protected_video_decode: enabled
rasterization: enabled
skia_renderer: disabled_off
surface_control: disabled_off
surface_synchronization: enabled_on
video_decode: enabled
viz_display_compositor: enabled_on
viz_hit_test_surface_layer: disabled_off
webgl: enabled
webgl2: enabled
Load (avg) undefined
Memory (System) 15.88GB (2.82GB free)
Process Argv
Screen Reader no
VM 0%
Extensions (9)
Extension Author (truncated) Version
githistory don 0.4.13
gitlens eam 10.2.0
code-runner for 0.9.15
gc-excelviewer Gra 2.1.32
mssql ms- 1.8.0
python ms- 2020.1.57204
powershell ms- 2019.12.0
partial-diff ryu 1.4.0
vscode-hexdump sle 1.7.2

[vscodebot]

(Experimental duplicate detection)
Thanks for submitting this issue. Please also check if it is already covered by an existing one, like:

• 100% cpu usage (#88478)
• Unable to install extensions due to certificates (#88489)

[gbritton1]

Yes, it is related to https://www.github.com/microsoft/vscode/issues/88489. But that issue was specific to a particular extension. This new issue is in general to extension installation across the board and to errors in the documentation for suggested remedies.

…

On Fri, Jan 17, 2020, 8:11 PM vscodebot[bot] ***@***.***> wrote: (Experimental duplicate detection) Thanks for submitting this issue. Please also check if it is already covered by an existing one, like: - 100% cpu usage (#88478) <https://www.github.com/microsoft/vscode/issues/88478> - Unable to install extensions due to certificates (#88489) <https://www.github.com/microsoft/vscode/issues/88489> — You are receiving this because you authored the thread. Reply to this email directly, view it on GitHub <#88887?email_source=notifications&email_token=AC5R66HKMOPO7UF4CSKMH23Q6JJNLA5CNFSM4KIQFSOKYY3PNVWWK3TUL52HS4DFVREXG43VMVBW63LNMVXHJKTDN5WW2ZLOORPWSZGOEJJMSPY#issuecomment-575850815>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/AC5R66ENDHJADJH2WVOFWQDQ6JJNLANCNFSM4KIQFSOA> .

[chrmarti]

Just to check your setup: Can you download the extension using Chrome? (From: https://marketplace.visualstudio.com/items?itemName=ms-mssql.mssql)

@aeschli Should we allow-list --ignore-certificate-errors?

[gbritton1]

Sure I can do that. I can download anything from there. However this post is not about that extension in particular. It's about all extensions. There's seems to be something quirky in the extension installer. I know of at least two extensions that caused this error upon installation. I suppose there probably are more. Note that the question about the flag is not whether the flag should be allowed or not, because the flag itself is invalid. It's not accepted by the executable. to me that means that, at least, the documentation needs to be updated.

…

On Mon, Jan 20, 2020, 4:20 AM Christof Marti ***@***.***> wrote: Just to check your setup: Can you download the extension using Chrome? (From: https://marketplace.visualstudio.com/items?itemName=ms-mssql.mssql) @aeschli <https://github.com/aeschli> Should we allow-list --ignore-certificate-errors? — You are receiving this because you authored the thread. Reply to this email directly, view it on GitHub <#88887?email_source=notifications&email_token=AC5R66DBEK36WS3TN4SVAUTQ6VUEFA5CNFSM4KIQFSOKYY3PNVWWK3TUL52HS4DFVREXG43VMVBW63LNMVXHJKTDN5WW2ZLOORPWSZGOEJL5K5A#issuecomment-576181620>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/AC5R66GA5DPAI4DBNHY4IT3Q6VUEFANCNFSM4KIQFSOA> .

[aeschli]

Added ignore-certificate-error & allow-insecure-localhost to the list of known options and improved the error message. Unknown settings are actually not ignored but still passed to Electron/Chromium.
bc8aaad

@gbritton1 Can you verify if using --ignore-certificate-errors makes a difference in your case (as said, just ignore the unknown option warning)

[gbritton1]

I have the same problem when I use that option.

…

On Tue, Jan 21, 2020, 11:05 AM Martin Aeschlimann ***@***.***> wrote: Added ignore-certificate-error & allow-insecure-localhost to the list of known options and improved the error message. Unknown settings are actually not ignored but still passed to Electron/Chromium. bc8aaad <bc8aaad> @gbritton1 <https://github.com/gbritton1> Can you verify if using --ignore-certificate-errors makes a difference in your case (as said, just ignore the unknown option warning) — You are receiving this because you were mentioned. Reply to this email directly, view it on GitHub <#88887?email_source=notifications&email_token=AC5R66EP24PRMG5JVV5627DQ64MMBA5CNFSM4KIQFSOKYY3PNVWWK3TUL52HS4DFVREXG43VMVBW63LNMVXHJKTDN5WW2ZLOORPWSZGOEJQIUZQ#issuecomment-576752230>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/AC5R66EY7FXUGVTPNK3OJOLQ64MMBANCNFSM4KIQFSOA> .

[chrmarti]

@gbritton1 Do you have system certificates enabled?

[gbritton1]

I believe that system certificates are enabled, however my laptop is locked down by your system administrator so I don't have access to change it either way.

…

On Fri, Jan 24, 2020, 5:22 AM Christof Marti ***@***.***> wrote: @gbritton1 <https://github.com/gbritton1> Do you have system certificates enabled? [image: image] <https://user-images.githubusercontent.com/9205389/73062050-c4c02080-3e9b-11ea-94de-b797c76e50de.png> — You are receiving this because you were mentioned. Reply to this email directly, view it on GitHub <#88887?email_source=notifications&email_token=AC5R66BFNS246OEVULVZE2TQ7K6NZA5CNFSM4KIQFSOKYY3PNVWWK3TUL52HS4DFVREXG43VMVBW63LNMVXHJKTDN5WW2ZLOORPWSZGOEJ2K5FY#issuecomment-578072215>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/AC5R66FH6HTNRYZ3MRQT6ATQ7K6NZANCNFSM4KIQFSOA> .

[gbritton1]

Just confirmed system certificates are enabled On Fri, Jan 24, 2020, 8:59 AM Gerald Britton <notifications@github.com> wrote:

…

I believe that system certificates are enabled, however my laptop is locked down by your system administrator so I don't have access to change it either way. On Fri, Jan 24, 2020, 5:22 AM Christof Marti ***@***.***> wrote: > @gbritton1 <https://github.com/gbritton1> Do you have system certificates > enabled? > [image: image] > < https://user-images.githubusercontent.com/9205389/73062050-c4c02080-3e9b-11ea-94de-b797c76e50de.png > > > — > You are receiving this because you were mentioned. > Reply to this email directly, view it on GitHub > < #88887?email_source=notifications&email_token=AC5R66BFNS246OEVULVZE2TQ7K6NZA5CNFSM4KIQFSOKYY3PNVWWK3TUL52HS4DFVREXG43VMVBW63LNMVXHJKTDN5WW2ZLOORPWSZGOEJ2K5FY#issuecomment-578072215 >, > or unsubscribe > < https://github.com/notifications/unsubscribe-auth/AC5R66FH6HTNRYZ3MRQT6ATQ7K6NZANCNFSM4KIQFSOA > > . > — You are receiving this because you are subscribed to this thread. Reply to this email directly, view it on GitHub <#88887?email_source=notifications&email_token=AC5R66EX3EDJ62VKNJP7QYTQ7LX27A5CNFSM4KIQFSOKYY3PNVWWK3TUL52HS4DFVREXG43VMVBW63LNMVXHJKTDN5WW2ZLOORPWSZGOEJ23WCY#issuecomment-578140939>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/AC5R66CRA7KE3MO7FEUT7OLQ7LX27ANCNFSM4KIQFSOA> .

[chrmarti]

@gbritton1 Can you download https://download.microsoft.com/download/e/7/8/e781cf8f-9c3f-4ad5-bd0c-f3c62b8bc6bd/microsoft.sqltools.servicelayer-win-x64-netcoreapp2.2.zip using Chrome? (Just now saw that in your original report.)

[gbritton1]

Yup I can download it.

…

On Mon, Jan 27, 2020, 4:14 AM Christof Marti ***@***.***> wrote: @gbritton1 <https://github.com/gbritton1> Can you download https://download.microsoft.com/download/e/7/8/e781cf8f-9c3f-4ad5-bd0c-f3c62b8bc6bd/microsoft.sqltools.servicelayer-win-x64-netcoreapp2.2.zip using Chrome? (Just now saw that in your original report.) — You are receiving this because you were mentioned. Reply to this email directly, view it on GitHub <#88887?email_source=notifications&email_token=AC5R66DTCD4KMR4WAMNLORTQ72QXBA5CNFSM4KIQFSOKYY3PNVWWK3TUL52HS4DFVREXG43VMVBW63LNMVXHJKTDN5WW2ZLOORPWSZGOEJ6ZP3I#issuecomment-578656237>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/AC5R66BYUAR3CW5HBELJGRLQ72QXBANCNFSM4KIQFSOA> .