This article will show you how to correct issues regarding TLS certificates in Coder.
Coder may sometimes fail to download extensions for your IDE if the remote extension marketplace URL is untrusted. This might happen for one of the following reasons:
- The image doesn't come with any ca-certificates
- You're using an internal certificate authority
To add certificates to your image and have them recognized by Coder:
Add the certificate(s) to the image
NODE_EXTRA_CA_CERTSenvironment variable to the file in the image that contains the certificates
Add the following to your Dockerfile to ensure that Coder finds and uses your newly added certificates when making requests:
COPY my-certs.crt /etc/ssl/certs/my-certs.crt ENV NODE_EXTRA_CA_CERTS /etc/ssl/certs/my-certs.crt
You can add certificates at the system level so that any process that runs within the workspace will use the certificates when making requests.
The specific process to add system-level certificates depends on the Linux distribution that you're using, but it is typically done by adding your certificates to your system's trusted CA repository.