Features does not work with proxy MITM certificate on windows

[EagleIJoe]

Since the introduction of 'features', I am unable to use VS code devcontainers as it does not seem to access the Windows certificate store to get the CA certificates.

[2022-12-14T09:49:28.955Z] --- Processing User Features ----
[2022-12-14T09:49:28.956Z] * Processing feature: ghcr.io/devcontainers/features/node:1
[2022-12-14T09:49:28.956Z] > input: ghcr.io/devcontainers/features/node:1
[2022-12-14T09:49:28.956Z] >
[2022-12-14T09:49:28.956Z] > resource: ghcr.io/devcontainers/features/node
[2022-12-14T09:49:28.956Z] > id: node
[2022-12-14T09:49:28.956Z] > version: 1
[2022-12-14T09:49:28.956Z] > owner: devcontainers
[2022-12-14T09:49:28.956Z] > namespace: devcontainers/features
[2022-12-14T09:49:28.956Z] > registry: ghcr.io
[2022-12-14T09:49:28.956Z] > path: devcontainers/features/node
[2022-12-14T09:49:28.956Z] manifest url: https://ghcr.io/v2/devcontainers/features/node/manifests/1
[2022-12-14T09:49:28.957Z] No oauth authentication credentials found.
[2022-12-14T09:49:28.957Z] url: https://ghcr.io/token?scope=repository:devcontainers/features/node:pull&service=ghcr.io
[2022-12-14T09:49:29.068Z] Failed to get registry auth token with error: Error: unable to get local issuer certificate
[2022-12-14T09:49:29.139Z] (!) WARNING: Falling back to deprecated GitHub Release syntax. See https://github.com/devcontainers/spec/blob/main/proposals/devcontainer-features.md#referencing-a-feature for updated specification.
[2022-12-14T09:49:29.139Z] Github feature.
[2022-12-14T09:49:29.139Z] Could not resolve Feature 'ghcr.io/devcontainers/features/node:1'. Ensure the Feature is published and accessible from your current environment.

Accessing the specified URL with any other application works.

[samruddhikhandale]

ℹ️ Looks similar to the issues reported in microsoft/vscode-remote-release#7648

[joshspicer]

I sadly have not been able to reproduce the issue yet. Are there any other details about your windows environment or network that you think could be useful to get a repro? (ie: Is this your personal computer, or corporate-managed, which version of Windows/VS Code/Dev Containers are you on?)

Also, is this intermittent, or consistently ending up in the same state for you?

Lastly, to help me gather more data, would you mind sending me the results of http://github-debug.com/ over email? (@github.com)

[EagleIJoe]

I sadly have not been able to reproduce the issue yet. Are there any other details about your windows environment or network that you think could be useful to get a repro? (ie: Is this your personal computer, or corporate-managed, which version of Windows/VS Code/Dev Containers are you on?)

Corporate-managed Windows 10 22H2. CA root certificates in question are distributed via GPOs to the Windows Local Machine Certificate Store. VS Code 1.74.2 , Dev Containers v0.268.0 pre-releae or v0.266.1 (no difference).

Also, is this intermittent, or consistently ending up in the same state for you?

It consistently fails to the same state. The component in question does not seem to respect the setting "Application -> Proxy -> System Certificates". ?

Lastly, to help me gather more data, would you mind sending me the results of http://github-debug.com/ over email? (@github.com)

Will send you an email, once I find it. ;-)

[samruddhikhandale]

@EagleIJoe does the solution mentioned in microsoft/vscode-remote-release#7648 (comment) work for you?

[andrebell]

It seems like I do have the same problem. Switching back to Dev Containers 0.255.4 works and I can use "Add Dev Container Configuration Files..." command again. I'm on a Win 10 21H2 Build 19044.2075 corporate managed system. Access to internet is through MITM proxy with managed certificates.

[EagleIJoe]

@EagleIJoe does the solution mentioned in microsoft/vscode-remote-release#7648 (comment) work for you?

I am on Windows, hence it does not apply.

[bdsoha]

This seems related to:

• Launching Dev Container - Local workstation w/ corporate MITM SSL erroring microsoft/vscode-dev-containers#1745
• System Certificates: Support trusted intermediate CAs microsoft/vscode#177139
• [Bug]When working with a proxy, the extensions cannot be automatically installed. spec#225