Error: request to xxx failed, reason: certificate expired

[artcathcl]

OS: Mac (will try windows)
Version: 1.17.0

Steps:

1. add registry which uses Let's Encrypt certificate
2. open docker vscode plugin, expand registry

Expect:
Should see list of images for that registry (rather than error message)

Actual:
See image below

Background:
We have a docker registry which uses Let's Encrypt certificate. We've recently (last few days) noticed an error reported by the VSCode Docker extension (when expanding Connected Registries for our server).

Error: request to xxx failed, reason: certificate expired

But ... the certificate is not expired :)

Operations (such as docker login) are working fine from command line.

Using Mac, by the way.

Interestingly, i just saw that POSTMAN fixed something that sounds very similar.
postmanlabs/postman-app-support#10338

[bwateratmsft]

I saw something similar once when the system time was wrong. Is your clock and date right?

[artcathcl]

seems to be fine:

Tue Oct 5 16:12:38 EDT 2021

and happening for other people on my team.

[bwateratmsft]

Wait, it's 2021?!

Just kidding 😄

I'll have to look into it further. We're ultimately just using Node's HTTP libraries, so I imagine this would affect anything in the extension host process trying to communicate with that site--not only the registry connection. It seems the Docker CLI is verifying the certificate in a different way and so isn't affected.

[bwateratmsft]

Actually, I think maybe the fix will need to come from VSCode via Electron: electron/electron#31213, microsoft/vscode#134244

@artcathcl They mentioned that it's now fixed in Insiders, can you try VSCode Insiders and see if the issue is still there?

[artcathcl]

woohoo :)

yes, that works. thanks for the tip!