Test: Certificates loaded from OS

[chrmarti]

#52880

• macOS @kieferrm
• linux @sandy081
• windows @roblourens

Complexity: 3

Run the https-server.zip in a terminal.

Run this code in an extension:

https.get('https://localhost:3000', res => console.log(res.statusCode))
	.on('error', console.error);

• Verify that the request fails because the certificate is self-signed.
• Add the certificate (attached) to the root certificates of your OS. (See, e.g., https://www.bounca.org/tutorials/install_root_certificate.html)
• Reload VS Code window to pick up the additional certificate.
• Verify that the request succeeds.
• Turn the http.systemCertificates setting off.
• Verify that the request fails again.
• Remove the certificate from the root certificates of your OS to clean up.

[sandy081]

Verified as per the steps mentioned.

[roblourens]

Which one is the crt I added, is it the one called localhost?

[kieferrm]

FYI, on macOS, adding the key to the keychain did not suffice. I had to reboot my machine to make it effective.

[chrmarti]

@roblourens Yep, it's the 3/7/2020 one.