This article will show you how to correct issues regarding TLS certificates in Coder.


Coder may sometimes fail to download extensions for your IDE if the remote extension marketplace URL is untrusted. This might happen for one of the following reasons:

  • The image doesn't come with any ca-certificates
  • You're using an internal certificate authority

Adding certificates for Coder

To add certificates to your image and have them recognized by Coder:

  1. Add the certificate(s) to the image

  2. Set the NODE_EXTRA_CA_CERTS environment variable to the file in the image that contains the certificates

  3. Add the following to your Dockerfile to ensure that Coder finds and uses your newly added certificates when making requests:

     COPY my-certs.crt /etc/ssl/certs/my-certs.crt
     ENV NODE_EXTRA_CA_CERTS /etc/ssl/certs/my-certs.crt

Adding certificates at the system level

You can add certificates at the system level so that any process that runs within the workspace will use the certificates when making requests.

The specific process to add system-level certificates depends on the Linux distribution that you're using, but it is typically done by adding your certificates to your system's trusted CA repository.

See an opportunity to improve our docs? Make an edit.