How do I make this work with NODE_EXTRA_CA_CERTS?

[tillig]

We have some pretty awesome security software that does this man-in-the-middle-attack TLS interception where it decrypts and re-encrypts all TLS traffic.

For Node apps, I've been able to add the environment variable NODE_EXTRA_CA_CERTS and point it to the security software certificate.

It doesn't seem that this obeys that construct. I started trying to dig down into the request-light repo but didn't see it in there, either. I wasn't sure if this was something that should be built into Node or what. I filed an issue there for the same thing.

[winstliu]

Huh. What functionality are you seeing where it's failing? I do see this package makes use of request-light, but I don't believe any of that code is actually being used (this package was originally forked from Red Hat's general-purpose YAML server, which does make HTTP requests).

[tillig]

When I try to use Intelligence, the language server attempts to download the Azure pipeline schema from GitHub so it can validate and provide the feature. The error I see indicates the schema can't be downloaded due to a certificate issue... which is always due to this awesome security software.

[winstliu]

Gotcha - transferred to the client extension, as that's what actually does the schema downloading. This uses azure-devops-node-api which in turn uses https://github.com/microsoft/typed-rest-client - maybe that has a setting to help you.

[winstliu]

Closing - I don't think this is something we can control.