VS Code: Failed to retrieve toolchain due to ZScaler Root Cert

[Andreas Schurz]

Hi,

I have to use Nordic SDK and VS Code Dev Kit on my company enterprise PC but I cannot fetch the toolchain or install SDKs via VSCode or nRF Connect for Desktop

nrfutil-toolchain-manager: Error: Failed to retrieve toolchain-index

Caused by:

    0: Failed to download index

    1: Get request failed

    2: developer.nordicsemi.com/.../index-windows-x86_64.json: Connection Failed: tls connection init failed: invalid peer certificate: UnknownIssuer

    3: invalid peer certificate: UnknownIssuer

The issue lies in our ZScaler Root Cert. However this is part of our trusted certs in keystore and VS Code uses Chromium Engine for Web Access.

Other VS Code plugins which are doing almost the same work fine.

 

Do you have a solution for this issue?

Many thanks in advance.

Regards, Andreas

[Øyvind]

Hello Andreas, 

From the first look of this, this does sound like an issue with missing user privileges on the computer. Have you been in contact with your IT department? There was also an issue with our certificates a week or two ago, where we had to have our own IT department delete the cache on the server. There could be some connection to this in your case. 

Kind regards,
Øyvind

[Andreas Schurz]

Hi,

I am also in contact with my IT department.

I have Administrator permissions on my PC.

This is what they came up with:

as mentioned based on debug 2: developer.nordicsemi.com/.../index-windows-x86_64.json: Connection Failed: tls connection init failed: invalid peer certificate: UnknownIssuer issue is point two you need to configure your app to trust this certificate keyserver.dhl.com/.../ZscalerRootCertificate-2048-SHA256.crt. that is app specific every developer tool can have it slightly different and most of them dont look into default windows CA storage and they use its own. thanks

Opening the URL:

https://developer.nordicsemi.com/.pc-tools/toolchain-v3/index-windows-x86_64.json

... in Chrome or IE works without problems. It just does not work in VS Code.

The ZScaler Root Cert is in the Cert Store as recommended.

However it is currently still not working.

What me confuses is that there is no problem when calling the URL in Chrome or Edge.

[Øyvind]

Andreas Schurz said:

What me confuses is that there is no problem when calling the URL in Chrome or Edge.

Very confusing. I have forwarded to the VS Code developers in order to find a solution. 

but I cannot fetch the toolchain or install SDKs via VSCode or nRF Connect for Desktop

Could you provide a screenshot of the issue and the full log output? Are you able to install any toolchain or sdk, meaning, do you see the versions that are available?

Also, could you please provide the output from running nRF Connect: Generate Support information from the VS Code Command Palette?

Thanks!

[Andreas Schurz]

This happens right after I click "Install Toolchain" - so I don't see available versions.

Support Information:

IMPORTANT: The data below could contain sensitive or confidential information about your environment.
If you do not wish this to be seen by others, please make sure to remove it before sharing.

For help and support, visit the Nordic DevZone at https://devzone.nordicsemi.com/.

{
"platform": {
"os": "win32",
"osVersion": "Windows 10 Enterprise",
"osKernel": "10.0.19045",
"vscode": "1.88.1",
"electron": "28.2.8",
"node": "v18.18.2"
},
"system": {
"date": "2024-06-26T14:29:51.921Z",
"vscodeRoot": "c:\\Program Files\\Microsoft VS Code\\resources\\app",
"nrfConnectForDesktopInstalled": true,
"vscodeUptime": "00:04:14",
"osUptime": "06:28:20",
"cpu": "Intel(R) Core(TM) i7-10610U CPU @ 1.80GHz"
},
"workspace": {
"name": null,
"workspaceFile": null,
"folders": []
},
"sdks": [],
"apps": [],
"workspaceState": "empty-ready",
"toolchains": [],
"connectedDevices": [],
"deviceProvider": "nrfutil",
"tools": {},
"nrfutil": {
"nrfutil-device": {
"version": "2.0.0",
"binPath": "c:\\Users\\d3bkbz\\.vscode\\extensions\\nordic-semiconductor.nrf-connect-2024.3.25-win32-x64\\platform\\nrfutil\\bin\\nrfutil-device"
},
"nrfutil-toolchain-manager": {
"version": "0.14.1",
"binPath": "c:\\Users\\d3bkbz\\.vscode\\extensions\\nordic-semiconductor.nrf-connect-2024.3.25-win32-x64\\platform\\nrfutil\\bin\\nrfutil-toolchain-manager"
}
},
"environment": {
"westEnv": {
"ELECTRON_RUN_AS_NODE": "1",
"HOME": "C:\\Users\\d3bkbz",
"HOMEDRIVE": "C:",
"HOMEPATH": "\\Users\\d3bkbz",
"PATH": "C:\\Program Files (x86)\\Common Files\\Oracle\\Java\\javapath;C:\\Program Files\\Microsoft\\jdk-11.0.21.9-hotspot\\bin;C:\\app\\client\\d3bkbz\\product\\19.0.0\\client_1\\bin;C:\\Program Files (x86)\\VMware\\VMware Workstation\\bin\\;C:\\Program Files\\OpenJDK\\jdk-11.0.17.8-hotspot\\bin;C:\\Program Files\\Eclipse Foundation\\jdk-8.0.302.8-hotspot\\bin;C:\\Program Files\\Microsoft\\jdk-11.0.12.7-hotspot\\bin;C:\\windows\\system32;C:\\windows;C:\\windows\\System32\\Wbem;C:\\windows\\System32\\WindowsPowerShell\\v1.0\\;C:\\windows\\System32\\OpenSSH\\;C:\\Program Files\\Microsoft SQL Server\\130\\Tools\\Binn\\;C:\\Program Files\\Microsoft SQL Server\\Client SDK\\ODBC\\170\\Tools\\Binn\\;C:\\Program Files (x86)\\curl;C:\\Program Files (x86)\\Microsoft SQL Server\\150\\DTS\\Binn\\;C:\\Program Files\\Azure Data Studio\\bin;C:\\Program Files (x86)\\Microsoft SQL Server\\150\\Tools\\Binn\\;C:\\Program Files\\Microsoft SQL Server\\150\\Tools\\Binn\\;C:\\Program Files\\Microsoft SQL Server\\150\\DTS\\Binn\\;C:\\Program Files (x86)\\Microsoft SQL Server\\110\\DTS\\Binn\\;C:\\Program Files (x86)\\Microsoft SQL Server\\120\\DTS\\Binn\\;C:\\Program Files (x86)\\Microsoft SQL Server\\130\\DTS\\Binn\\;C:\\Program Files (x86)\\Microsoft SQL Server\\140\\DTS\\Binn\\;C:\\Program Files\\Microsoft VS Code\\bin;C:\\WINDOWS\\system32;C:\\WINDOWS;C:\\WINDOWS\\System32\\Wbem;C:\\WINDOWS\\System32\\WindowsPowerShell\\v1.0\\;C:\\WINDOWS\\System32\\OpenSSH\\;C:\\Program Files\\dotnet\\;C:\\Program Files\\TortoiseGit\\bin;C:\\Program Files\\nodejs\\;C:\\Users\\d3bkbz\\AppData\\Roaming\\npm;C:\\Users\\d3bkbz\\AppData\\Roaming\\npm\\node_modules\\@angular\\cli;C:\\Program Files\\OpenSSL-Win64\\bin;C:\\Program Files\\apache-maven\\bin;C:\\WINDOWS\\system32\\config\\systemprofile\\AppData\\Local\\Microsoft\\WindowsApps;C:\\Program Files\\Nordic Semiconductor\\nrf-command-line-tools\\bin\\;C:\\Program Files\\Adaptiva\\AdaptivaClient\\bin\\x32;C:\\Program Files\\Adaptiva\\AdaptivaClient\\bin\\x64;C:\\Users\\d3bkbz\\AppData\\Local\\Microsoft\\WindowsApps;C:\\Users\\d3bkbz\\.dotnet\\tools;C:\\Users\\d3bkbz\\AppData\\Local\\Programs\\Git\\cmd;C:\\Projects\\PLAPP\\adb;"
},
"inherited": {
"ELECTRON_RUN_AS_NODE": "1",
"HOME": "C:\\Users\\d3bkbz",
"HOMEDRIVE": "C:",
"HOMEPATH": "\\Users\\d3bkbz",
"Path": "C:\\Program Files (x86)\\Common Files\\Oracle\\Java\\javapath;C:\\Program Files\\Microsoft\\jdk-11.0.21.9-hotspot\\bin;C:\\app\\client\\d3bkbz\\product\\19.0.0\\client_1\\bin;C:\\Program Files (x86)\\VMware\\VMware Workstation\\bin\\;C:\\Program Files\\OpenJDK\\jdk-11.0.17.8-hotspot\\bin;C:\\Program Files\\Eclipse Foundation\\jdk-8.0.302.8-hotspot\\bin;C:\\Program Files\\Microsoft\\jdk-11.0.12.7-hotspot\\bin;C:\\windows\\system32;C:\\windows;C:\\windows\\System32\\Wbem;C:\\windows\\System32\\WindowsPowerShell\\v1.0\\;C:\\windows\\System32\\OpenSSH\\;C:\\Program Files\\Microsoft SQL Server\\130\\Tools\\Binn\\;C:\\Program Files\\Microsoft SQL Server\\Client SDK\\ODBC\\170\\Tools\\Binn\\;C:\\Program Files (x86)\\curl;C:\\Program Files (x86)\\Microsoft SQL Server\\150\\DTS\\Binn\\;C:\\Program Files\\Azure Data Studio\\bin;C:\\Program Files (x86)\\Microsoft SQL Server\\150\\Tools\\Binn\\;C:\\Program Files\\Microsoft SQL Server\\150\\Tools\\Binn\\;C:\\Program Files\\Microsoft SQL Server\\150\\DTS\\Binn\\;C:\\Program Files (x86)\\Microsoft SQL Server\\110\\DTS\\Binn\\;C:\\Program Files (x86)\\Microsoft SQL Server\\120\\DTS\\Binn\\;C:\\Program Files (x86)\\Microsoft SQL Server\\130\\DTS\\Binn\\;C:\\Program Files (x86)\\Microsoft SQL Server\\140\\DTS\\Binn\\;C:\\Program Files\\Microsoft VS Code\\bin;C:\\WINDOWS\\system32;C:\\WINDOWS;C:\\WINDOWS\\System32\\Wbem;C:\\WINDOWS\\System32\\WindowsPowerShell\\v1.0\\;C:\\WINDOWS\\System32\\OpenSSH\\;C:\\Program Files\\dotnet\\;C:\\Program Files\\TortoiseGit\\bin;C:\\Program Files\\nodejs\\;C:\\Users\\d3bkbz\\AppData\\Roaming\\npm;C:\\Users\\d3bkbz\\AppData\\Roaming\\npm\\node_modules\\@angular\\cli;C:\\Program Files\\OpenSSL-Win64\\bin;C:\\Program Files\\apache-maven\\bin;C:\\WINDOWS\\system32\\config\\systemprofile\\AppData\\Local\\Microsoft\\WindowsApps;C:\\Program Files\\Nordic Semiconductor\\nrf-command-line-tools\\bin\\;C:\\Program Files\\Adaptiva\\AdaptivaClient\\bin\\x32;C:\\Program Files\\Adaptiva\\AdaptivaClient\\bin\\x64;C:\\Users\\d3bkbz\\AppData\\Local\\Microsoft\\WindowsApps;C:\\Users\\d3bkbz\\.dotnet\\tools;C:\\Users\\d3bkbz\\AppData\\Local\\Programs\\Git\\cmd;C:\\Projects\\PLAPP\\adb;",
"PATH": "C:\\Program Files (x86)\\Common Files\\Oracle\\Java\\javapath;C:\\Program Files\\Microsoft\\jdk-11.0.21.9-hotspot\\bin;C:\\app\\client\\d3bkbz\\product\\19.0.0\\client_1\\bin;C:\\Program Files (x86)\\VMware\\VMware Workstation\\bin\\;C:\\Program Files\\OpenJDK\\jdk-11.0.17.8-hotspot\\bin;C:\\Program Files\\Eclipse Foundation\\jdk-8.0.302.8-hotspot\\bin;C:\\Program Files\\Microsoft\\jdk-11.0.12.7-hotspot\\bin;C:\\windows\\system32;C:\\windows;C:\\windows\\System32\\Wbem;C:\\windows\\System32\\WindowsPowerShell\\v1.0\\;C:\\windows\\System32\\OpenSSH\\;C:\\Program Files\\Microsoft SQL Server\\130\\Tools\\Binn\\;C:\\Program Files\\Microsoft SQL Server\\Client SDK\\ODBC\\170\\Tools\\Binn\\;C:\\Program Files (x86)\\curl;C:\\Program Files (x86)\\Microsoft SQL Server\\150\\DTS\\Binn\\;C:\\Program Files\\Azure Data Studio\\bin;C:\\Program Files (x86)\\Microsoft SQL Server\\150\\Tools\\Binn\\;C:\\Program Files\\Microsoft SQL Server\\150\\Tools\\Binn\\;C:\\Program Files\\Microsoft SQL Server\\150\\DTS\\Binn\\;C:\\Program Files (x86)\\Microsoft SQL Server\\110\\DTS\\Binn\\;C:\\Program Files (x86)\\Microsoft SQL Server\\120\\DTS\\Binn\\;C:\\Program Files (x86)\\Microsoft SQL Server\\130\\DTS\\Binn\\;C:\\Program Files (x86)\\Microsoft SQL Server\\140\\DTS\\Binn\\;C:\\Program Files\\Microsoft VS Code\\bin;C:\\WINDOWS\\system32;C:\\WINDOWS;C:\\WINDOWS\\System32\\Wbem;C:\\WINDOWS\\System32\\WindowsPowerShell\\v1.0\\;C:\\WINDOWS\\System32\\OpenSSH\\;C:\\Program Files\\dotnet\\;C:\\Program Files\\TortoiseGit\\bin;C:\\Program Files\\nodejs\\;C:\\Users\\d3bkbz\\AppData\\Roaming\\npm;C:\\Users\\d3bkbz\\AppData\\Roaming\\npm\\node_modules\\@angular\\cli;C:\\Program Files\\OpenSSL-Win64\\bin;C:\\Program Files\\apache-maven\\bin;C:\\WINDOWS\\system32\\config\\systemprofile\\AppData\\Local\\Microsoft\\WindowsApps;C:\\Program Files\\Nordic Semiconductor\\nrf-command-line-tools\\bin\\;C:\\Program Files\\Adaptiva\\AdaptivaClient\\bin\\x32;C:\\Program Files\\Adaptiva\\AdaptivaClient\\bin\\x64;C:\\Users\\d3bkbz\\AppData\\Local\\Microsoft\\WindowsApps;C:\\Users\\d3bkbz\\.dotnet\\tools;C:\\Users\\d3bkbz\\AppData\\Local\\Programs\\Git\\cmd;C:\\Projects\\PLAPP\\adb;"
}
},
"terminal": {
"defaultProfile": null
},
"config": {
"nordic-semiconductor.nrf-connect": {
"topdir": "",
"toolchain": {
"path": ""
},
"ozonePath": "",
"applications": [],
"applicationOptions": {},
"kconfig": {
"interface": "kconfig"
},
"west": {
"env": {
"$base": "terminal"
}
},
"boardRoots": [],
"taskBindings": {},
"buildTerminal": {
"condensedProgress": true
},
"debugging": {
"flash": true,
"bindings": {},
"justMyCode": true
},
"activeAppFollowActiveEditor": true,
"deviceProvider": "",
"flash": {
"softreset": false,
"erase": false,
"recover": false
},
"enableTelemetry": true,
"thirdpartyIntegration": {},
"toolchainManager": {
"indexURL": null,
"installDirectory": null
},
"nrfutil": {
"home": null
},
"defaultOpenAction": "ask"
},
"nordic-semiconductor.nrf-terminal": {
"terminalMode": "character"
}
},
"extensions": {
"internal": {
"nordic-semiconductor.nrf-connect": {
"version": "2024.3.25",
"path": "c:\\Users\\d3bkbz\\.vscode\\extensions\\nordic-semiconductor.nrf-connect-2024.3.25-win32-x64",
"isActive": true
},
"nordic-semiconductor.nrf-terminal": {
"version": "2024.3.15",
"path": "c:\\Users\\d3bkbz\\.vscode\\extensions\\nordic-semiconductor.nrf-terminal-2024.3.15",
"isActive": true
},
"nordic-semiconductor.nrf-devicetree": {
"version": "2024.6.20",
"path": "c:\\Users\\d3bkbz\\.vscode\\extensions\\nordic-semiconductor.nrf-devicetree-2024.6.20",
"isActive": true
},
"nordic-semiconductor.nrf-kconfig": {
"version": "2024.6.20",
"path": "c:\\Users\\d3bkbz\\.vscode\\extensions\\nordic-semiconductor.nrf-kconfig-2024.6.20",
"isActive": true
}
},
"external": {
"marus25.cortex-debug": null,
"ms-vscode.cpptools": "1.20.5",
"ms-vscode.js-debug": "1.88.0",
"ms-vscode.js-debug-companion": "1.1.2",
"ms-vscode.vscode-js-profile-table": "1.0.8",
"Angular.ng-template": "18.0.0",
"dbaeumer.vscode-eslint": "3.0.8",
"esbenp.prettier-vscode": "10.4.0",
"firsttris.vscode-jest-runner": "0.4.73",
"fwcd.kotlin": "0.2.34",
"jebbs.plantuml": "2.18.1",
"ms-azuretools.vscode-docker": "1.29.1",
"ms-vscode-remote.remote-containers": "0.369.0",
"ms-vscode-remote.remote-wsl": "0.88.0",
"msjsdiag.vscode-react-native": "1.13.0",
"nrwl.angular-console": "18.23.0",
"redhat.java": "1.31.0",
"trond-snekvik.gnu-mapfiles": "1.1.0",
"twxs.cmake": "0.0.17",
"VisualStudioExptTeam.intellicode-api-usage-examples": "0.2.8",
"VisualStudioExptTeam.vscodeintellicode": "1.3.1",
"vscjava.vscode-gradle": "3.14.1",
"vscjava.vscode-java-debug": "0.57.0",
"vscjava.vscode-java-dependency": "0.23.6",
"vscjava.vscode-java-pack": "0.27.0",
"vscjava.vscode-java-test": "0.41.1",
"vscjava.vscode-maven": "0.44.0",
"Yog.yog-plantuml-highlight": "0.0.5"
}
}
}

[Øyvind]

Still working on a proper answer to why you have this issue. 

Please have a look at this thread nrfutil toolchain-manager "Error: Failed to retrieve toolchain-index" due to corporate SSL/TLS inspection where there have been similar issues that you have. 

Kind regards,
Øyvind