Unable to connect do a https repository with enterprise CA certificate.

[MiguelTVMS]

I'm trying to connect to a private repository that uses a https certificate signed by our enterprise CA. My docker does to login command correctly with this repository and and CA certificate is in windows certificate store. One more informations this repository works fine and it's not in the insecure registry settings in my docker.

Action: vscode-docker.connectCustomRegistry
Error type: RequestError
Error Message: Error: unable to verify the first certificate

Version: 0.2.0
OS: win32

[yashwanth-l]

enable this in the settings.json of JSCode:
"http.proxyStrictSSL": false

[grhm]

I have the same issue. However, I'm using mkcert) as a very simple to setup internal CA. I thought it worth mentioning here, in case you need an easy way to get an "enterprise CA" going to dev/test this issue.

[StephenWeatherford]

Thanks. I assume you have your certificate in the Windows certificate store?

[grhm]

Yes. Certificate is in the windows cert store.

[StephenWeatherford]

Please note that setting http.proxyStrictSSL=false is not recommended due to security reasons.

[StephenWeatherford]

@aarongilliland @SebastianSchuette @grhm @MiguelTVMS @a5hw4nth Would one of you be willing to try a private drop and see if it fixes the issue? I'm having a hard time setting this up properly myself to test...

Just go to https://dev.azure.com/ms-azuretools/AzCode/_build/results?buildId=376&view=logs, click on Artifacts, download the VSIX, and use F1-> Install from VSIX in vscode.
Be sure that you have http.proxyStrictSSL=true (default) and let me know if it solves your problem. Thanks!

[grhm]

@StephenWeatherford Just tried that build and I'm still seeing the "unable to verifiy the first certificate" error. The certificate is in my Windows certificate store, and going to https://<my_ip>:<my_port>/v2/_catalog in Edge works and shows root and server certificates as trusted.