VS Code: Failed to retrieve toolchain due to ZScaler Root Cert

RE: VS Code: Failed to retrieve toolchain due to ZScaler Root Cert

Øyvind — Mon, 01 Jul 2024 06:56:21 GMT

Hi Andreas,

I've forwarded the inquiry to our team, however, due to summer vacation period starting in our office this week there will be a delay in our answers.

Sorry for the inconvenience.

Kind regards,
Øyvind

RE: VS Code: Failed to retrieve toolchain due to ZScaler Root Cert

Andreas Schurz — Thu, 27 Jun 2024 10:37:31 GMT

I tried the following:

C:\Users\d3bkbz>nrfutil toolchain-manager search
Error: Failed to bootstrap core functionality before executing command.

HTTP request to default bootstrap resource

  https://files.nordicsemi.com/artifactory/swtools/external/nrfutil/index/bootstrap.json

failed.

Please check that your internet connection is functioning. If you use a proxy, please try the --detect-proxy flag or
manually set the appropriate HTTP_PROXY-style environment variable(s).

To use a custom bootstrap config, set NRFUTIL_BOOTSTRAP_CONFIG_URL. To bootstrap directly from a nrfutil-core package
tarball, set NRFUTIL_BOOTSTRAP_TARBALL_PATH.


Caused by:
    0: error sending request for url (https://files.nordicsemi.com/artifactory/swtools/external/nrfutil/index/bootstrap.json)
    1: client error (Connect)
    2: tcp connect error: Es konnte keine Verbindung hergestellt werden, da der Zielcomputer die Verbindung verweigerte. (os error 10061)
    3: Es konnte keine Verbindung hergestellt werden, da der Zielcomputer die Verbindung verweigerte. (os error 10061)

C:\Users\d3bkbz>nrfutil toolchain-manager search --detect-proxy
Error: The 'proxy' helper program was not found in the system PATH nor $HOME/.nrfutil/proxy_utils/

So it does not work at the first glance...

Could you advice me how to install the proxy helper program on Windows 10?

RE: VS Code: Failed to retrieve toolchain due to ZScaler Root Cert

Øyvind — Thu, 27 Jun 2024 09:24:39 GMT

Our nRF Connect for VS Code extension developers inform me that the extension uses nrfutil toolchain-manager v0.14.1, while support for native certificates were added in nrfutil toolchain-manager v0.14.2.

The team has been working on updating the version used with the extension and have a planned release in the coming weeks. This will update the nrfutil toolchain-manager in the extension to v0.14.4.

If for some reason you cannot wait until then, you can use nrfutil in the command line. This tool is independent of VS code, and toolchain-manager is a CLI tool for managing and using toolchains for the nRF Connect SDK.

Let me know how that works for you!

Kind regards,
Øyvind

RE: VS Code: Failed to retrieve toolchain due to ZScaler Root Cert

Øyvind — Thu, 27 Jun 2024 08:07:43 GMT

Still working on a proper answer to why you have this issue.

Please have a look at this thread nrfutil toolchain-manager "Error: Failed to retrieve toolchain-index" due to corporate SSL/TLS inspection where there have been similar issues that you have.

Kind regards,
Øyvind

RE: VS Code: Failed to retrieve toolchain due to ZScaler Root Cert

Andreas Schurz — Wed, 26 Jun 2024 14:30:52 GMT

This happens right after I click "Install Toolchain" - so I don't see available versions.

Support Information:

IMPORTANT: The data below could contain sensitive or confidential information about your environment.
If you do not wish this to be seen by others, please make sure to remove it before sharing.

For help and support, visit the Nordic DevZone at https://devzone.nordicsemi.com/.

{
"platform": {
"os": "win32",
"osVersion": "Windows 10 Enterprise",
"osKernel": "10.0.19045",
"vscode": "1.88.1",
"electron": "28.2.8",
"node": "v18.18.2"
},
"system": {
"date": "2024-06-26T14:29:51.921Z",
"vscodeRoot": "c:\\Program Files\\Microsoft VS Code\\resources\\app",
"nrfConnectForDesktopInstalled": true,
"vscodeUptime": "00:04:14",
"osUptime": "06:28:20",
"cpu": "Intel(R) Core(TM) i7-10610U CPU @ 1.80GHz"
},
"workspace": {
"name": null,
"workspaceFile": null,
"folders": []
},
"sdks": [],
"apps": [],
"workspaceState": "empty-ready",
"toolchains": [],
"connectedDevices": [],
"deviceProvider": "nrfutil",
"tools": {},
"nrfutil": {
"nrfutil-device": {
"version": "2.0.0",
"binPath": "c:\\Users\\d3bkbz\\.vscode\\extensions\\nordic-semiconductor.nrf-connect-2024.3.25-win32-x64\\platform\\nrfutil\\bin\\nrfutil-device"
},
"nrfutil-toolchain-manager": {
"version": "0.14.1",
"binPath": "c:\\Users\\d3bkbz\\.vscode\\extensions\\nordic-semiconductor.nrf-connect-2024.3.25-win32-x64\\platform\\nrfutil\\bin\\nrfutil-toolchain-manager"
}
},
"environment": {
"westEnv": {
"ELECTRON_RUN_AS_NODE": "1",
"HOME": "C:\\Users\\d3bkbz",
"HOMEDRIVE": "C:",
"HOMEPATH": "\\Users\\d3bkbz",
"PATH": "C:\\Program Files (x86)\\Common Files\\Oracle\\Java\\javapath;C:\\Program Files\\Microsoft\\jdk-11.0.21.9-hotspot\\bin;C:\\app\\client\\d3bkbz\\product\\19.0.0\\client_1\\bin;C:\\Program Files (x86)\\VMware\\VMware Workstation\\bin\\;C:\\Program Files\\OpenJDK\\jdk-11.0.17.8-hotspot\\bin;C:\\Program Files\\Eclipse Foundation\\jdk-8.0.302.8-hotspot\\bin;C:\\Program Files\\Microsoft\\jdk-11.0.12.7-hotspot\\bin;C:\\windows\\system32;C:\\windows;C:\\windows\\System32\\Wbem;C:\\windows\\System32\\WindowsPowerShell\\v1.0\\;C:\\windows\\System32\\OpenSSH\\;C:\\Program Files\\Microsoft SQL Server\\130\\Tools\\Binn\\;C:\\Program Files\\Microsoft SQL Server\\Client SDK\\ODBC\\170\\Tools\\Binn\\;C:\\Program Files (x86)\\curl;C:\\Program Files (x86)\\Microsoft SQL Server\\150\\DTS\\Binn\\;C:\\Program Files\\Azure Data Studio\\bin;C:\\Program Files (x86)\\Microsoft SQL Server\\150\\Tools\\Binn\\;C:\\Program Files\\Microsoft SQL Server\\150\\Tools\\Binn\\;C:\\Program Files\\Microsoft SQL Server\\150\\DTS\\Binn\\;C:\\Program Files (x86)\\Microsoft SQL Server\\110\\DTS\\Binn\\;C:\\Program Files (x86)\\Microsoft SQL Server\\120\\DTS\\Binn\\;C:\\Program Files (x86)\\Microsoft SQL Server\\130\\DTS\\Binn\\;C:\\Program Files (x86)\\Microsoft SQL Server\\140\\DTS\\Binn\\;C:\\Program Files\\Microsoft VS Code\\bin;C:\\WINDOWS\\system32;C:\\WINDOWS;C:\\WINDOWS\\System32\\Wbem;C:\\WINDOWS\\System32\\WindowsPowerShell\\v1.0\\;C:\\WINDOWS\\System32\\OpenSSH\\;C:\\Program Files\\dotnet\\;C:\\Program Files\\TortoiseGit\\bin;C:\\Program Files\\nodejs\\;C:\\Users\\d3bkbz\\AppData\\Roaming\\npm;C:\\Users\\d3bkbz\\AppData\\Roaming\\npm\\node_modules\\@angular\\cli;C:\\Program Files\\OpenSSL-Win64\\bin;C:\\Program Files\\apache-maven\\bin;C:\\WINDOWS\\system32\\config\\systemprofile\\AppData\\Local\\Microsoft\\WindowsApps;C:\\Program Files\\Nordic Semiconductor\\nrf-command-line-tools\\bin\\;C:\\Program Files\\Adaptiva\\AdaptivaClient\\bin\\x32;C:\\Program Files\\Adaptiva\\AdaptivaClient\\bin\\x64;C:\\Users\\d3bkbz\\AppData\\Local\\Microsoft\\WindowsApps;C:\\Users\\d3bkbz\\.dotnet\\tools;C:\\Users\\d3bkbz\\AppData\\Local\\Programs\\Git\\cmd;C:\\Projects\\PLAPP\\adb;"
},
"inherited": {
"ELECTRON_RUN_AS_NODE": "1",
"HOME": "C:\\Users\\d3bkbz",
"HOMEDRIVE": "C:",
"HOMEPATH": "\\Users\\d3bkbz",
"Path": "C:\\Program Files (x86)\\Common Files\\Oracle\\Java\\javapath;C:\\Program Files\\Microsoft\\jdk-11.0.21.9-hotspot\\bin;C:\\app\\client\\d3bkbz\\product\\19.0.0\\client_1\\bin;C:\\Program Files (x86)\\VMware\\VMware Workstation\\bin\\;C:\\Program Files\\OpenJDK\\jdk-11.0.17.8-hotspot\\bin;C:\\Program Files\\Eclipse Foundation\\jdk-8.0.302.8-hotspot\\bin;C:\\Program Files\\Microsoft\\jdk-11.0.12.7-hotspot\\bin;C:\\windows\\system32;C:\\windows;C:\\windows\\System32\\Wbem;C:\\windows\\System32\\WindowsPowerShell\\v1.0\\;C:\\windows\\System32\\OpenSSH\\;C:\\Program Files\\Microsoft SQL Server\\130\\Tools\\Binn\\;C:\\Program Files\\Microsoft SQL Server\\Client SDK\\ODBC\\170\\Tools\\Binn\\;C:\\Program Files (x86)\\curl;C:\\Program Files (x86)\\Microsoft SQL Server\\150\\DTS\\Binn\\;C:\\Program Files\\Azure Data Studio\\bin;C:\\Program Files (x86)\\Microsoft SQL Server\\150\\Tools\\Binn\\;C:\\Program Files\\Microsoft SQL Server\\150\\Tools\\Binn\\;C:\\Program Files\\Microsoft SQL Server\\150\\DTS\\Binn\\;C:\\Program Files (x86)\\Microsoft SQL Server\\110\\DTS\\Binn\\;C:\\Program Files (x86)\\Microsoft SQL Server\\120\\DTS\\Binn\\;C:\\Program Files (x86)\\Microsoft SQL Server\\130\\DTS\\Binn\\;C:\\Program Files (x86)\\Microsoft SQL Server\\140\\DTS\\Binn\\;C:\\Program Files\\Microsoft VS Code\\bin;C:\\WINDOWS\\system32;C:\\WINDOWS;C:\\WINDOWS\\System32\\Wbem;C:\\WINDOWS\\System32\\WindowsPowerShell\\v1.0\\;C:\\WINDOWS\\System32\\OpenSSH\\;C:\\Program Files\\dotnet\\;C:\\Program Files\\TortoiseGit\\bin;C:\\Program Files\\nodejs\\;C:\\Users\\d3bkbz\\AppData\\Roaming\\npm;C:\\Users\\d3bkbz\\AppData\\Roaming\\npm\\node_modules\\@angular\\cli;C:\\Program Files\\OpenSSL-Win64\\bin;C:\\Program Files\\apache-maven\\bin;C:\\WINDOWS\\system32\\config\\systemprofile\\AppData\\Local\\Microsoft\\WindowsApps;C:\\Program Files\\Nordic Semiconductor\\nrf-command-line-tools\\bin\\;C:\\Program Files\\Adaptiva\\AdaptivaClient\\bin\\x32;C:\\Program Files\\Adaptiva\\AdaptivaClient\\bin\\x64;C:\\Users\\d3bkbz\\AppData\\Local\\Microsoft\\WindowsApps;C:\\Users\\d3bkbz\\.dotnet\\tools;C:\\Users\\d3bkbz\\AppData\\Local\\Programs\\Git\\cmd;C:\\Projects\\PLAPP\\adb;",
"PATH": "C:\\Program Files (x86)\\Common Files\\Oracle\\Java\\javapath;C:\\Program Files\\Microsoft\\jdk-11.0.21.9-hotspot\\bin;C:\\app\\client\\d3bkbz\\product\\19.0.0\\client_1\\bin;C:\\Program Files (x86)\\VMware\\VMware Workstation\\bin\\;C:\\Program Files\\OpenJDK\\jdk-11.0.17.8-hotspot\\bin;C:\\Program Files\\Eclipse Foundation\\jdk-8.0.302.8-hotspot\\bin;C:\\Program Files\\Microsoft\\jdk-11.0.12.7-hotspot\\bin;C:\\windows\\system32;C:\\windows;C:\\windows\\System32\\Wbem;C:\\windows\\System32\\WindowsPowerShell\\v1.0\\;C:\\windows\\System32\\OpenSSH\\;C:\\Program Files\\Microsoft SQL Server\\130\\Tools\\Binn\\;C:\\Program Files\\Microsoft SQL Server\\Client SDK\\ODBC\\170\\Tools\\Binn\\;C:\\Program Files (x86)\\curl;C:\\Program Files (x86)\\Microsoft SQL Server\\150\\DTS\\Binn\\;C:\\Program Files\\Azure Data Studio\\bin;C:\\Program Files (x86)\\Microsoft SQL Server\\150\\Tools\\Binn\\;C:\\Program Files\\Microsoft SQL Server\\150\\Tools\\Binn\\;C:\\Program Files\\Microsoft SQL Server\\150\\DTS\\Binn\\;C:\\Program Files (x86)\\Microsoft SQL Server\\110\\DTS\\Binn\\;C:\\Program Files (x86)\\Microsoft SQL Server\\120\\DTS\\Binn\\;C:\\Program Files (x86)\\Microsoft SQL Server\\130\\DTS\\Binn\\;C:\\Program Files (x86)\\Microsoft SQL Server\\140\\DTS\\Binn\\;C:\\Program Files\\Microsoft VS Code\\bin;C:\\WINDOWS\\system32;C:\\WINDOWS;C:\\WINDOWS\\System32\\Wbem;C:\\WINDOWS\\System32\\WindowsPowerShell\\v1.0\\;C:\\WINDOWS\\System32\\OpenSSH\\;C:\\Program Files\\dotnet\\;C:\\Program Files\\TortoiseGit\\bin;C:\\Program Files\\nodejs\\;C:\\Users\\d3bkbz\\AppData\\Roaming\\npm;C:\\Users\\d3bkbz\\AppData\\Roaming\\npm\\node_modules\\@angular\\cli;C:\\Program Files\\OpenSSL-Win64\\bin;C:\\Program Files\\apache-maven\\bin;C:\\WINDOWS\\system32\\config\\systemprofile\\AppData\\Local\\Microsoft\\WindowsApps;C:\\Program Files\\Nordic Semiconductor\\nrf-command-line-tools\\bin\\;C:\\Program Files\\Adaptiva\\AdaptivaClient\\bin\\x32;C:\\Program Files\\Adaptiva\\AdaptivaClient\\bin\\x64;C:\\Users\\d3bkbz\\AppData\\Local\\Microsoft\\WindowsApps;C:\\Users\\d3bkbz\\.dotnet\\tools;C:\\Users\\d3bkbz\\AppData\\Local\\Programs\\Git\\cmd;C:\\Projects\\PLAPP\\adb;"
}
},
"terminal": {
"defaultProfile": null
},
"config": {
"nordic-semiconductor.nrf-connect": {
"topdir": "",
"toolchain": {
"path": ""
},
"ozonePath": "",
"applications": [],
"applicationOptions": {},
"kconfig": {
"interface": "kconfig"
},
"west": {
"env": {
"$base": "terminal"
}
},
"boardRoots": [],
"taskBindings": {},
"buildTerminal": {
"condensedProgress": true
},
"debugging": {
"flash": true,
"bindings": {},
"justMyCode": true
},
"activeAppFollowActiveEditor": true,
"deviceProvider": "",
"flash": {
"softreset": false,
"erase": false,
"recover": false
},
"enableTelemetry": true,
"thirdpartyIntegration": {},
"toolchainManager": {
"indexURL": null,
"installDirectory": null
},
"nrfutil": {
"home": null
},
"defaultOpenAction": "ask"
},
"nordic-semiconductor.nrf-terminal": {
"terminalMode": "character"
}
},
"extensions": {
"internal": {
"nordic-semiconductor.nrf-connect": {
"version": "2024.3.25",
"path": "c:\\Users\\d3bkbz\\.vscode\\extensions\\nordic-semiconductor.nrf-connect-2024.3.25-win32-x64",
"isActive": true
},
"nordic-semiconductor.nrf-terminal": {
"version": "2024.3.15",
"path": "c:\\Users\\d3bkbz\\.vscode\\extensions\\nordic-semiconductor.nrf-terminal-2024.3.15",
"isActive": true
},
"nordic-semiconductor.nrf-devicetree": {
"version": "2024.6.20",
"path": "c:\\Users\\d3bkbz\\.vscode\\extensions\\nordic-semiconductor.nrf-devicetree-2024.6.20",
"isActive": true
},
"nordic-semiconductor.nrf-kconfig": {
"version": "2024.6.20",
"path": "c:\\Users\\d3bkbz\\.vscode\\extensions\\nordic-semiconductor.nrf-kconfig-2024.6.20",
"isActive": true
}
},
"external": {
"marus25.cortex-debug": null,
"ms-vscode.cpptools": "1.20.5",
"ms-vscode.js-debug": "1.88.0",
"ms-vscode.js-debug-companion": "1.1.2",
"ms-vscode.vscode-js-profile-table": "1.0.8",
"Angular.ng-template": "18.0.0",
"dbaeumer.vscode-eslint": "3.0.8",
"esbenp.prettier-vscode": "10.4.0",
"firsttris.vscode-jest-runner": "0.4.73",
"fwcd.kotlin": "0.2.34",
"jebbs.plantuml": "2.18.1",
"ms-azuretools.vscode-docker": "1.29.1",
"ms-vscode-remote.remote-containers": "0.369.0",
"ms-vscode-remote.remote-wsl": "0.88.0",
"msjsdiag.vscode-react-native": "1.13.0",
"nrwl.angular-console": "18.23.0",
"redhat.java": "1.31.0",
"trond-snekvik.gnu-mapfiles": "1.1.0",
"twxs.cmake": "0.0.17",
"VisualStudioExptTeam.intellicode-api-usage-examples": "0.2.8",
"VisualStudioExptTeam.vscodeintellicode": "1.3.1",
"vscjava.vscode-gradle": "3.14.1",
"vscjava.vscode-java-debug": "0.57.0",
"vscjava.vscode-java-dependency": "0.23.6",
"vscjava.vscode-java-pack": "0.27.0",
"vscjava.vscode-java-test": "0.41.1",
"vscjava.vscode-maven": "0.44.0",
"Yog.yog-plantuml-highlight": "0.0.5"
}
}
}

RE: VS Code: Failed to retrieve toolchain due to ZScaler Root Cert

Øyvind — Wed, 26 Jun 2024 14:24:34 GMT

[quote user="Andreas Schurz"]What me confuses is that there is no problem when calling the URL in Chrome or Edge.[/quote]

Very confusing. I have forwarded to the VS Code developers in order to find a solution.

[quote user=""]but I cannot fetch the toolchain or install SDKs via VSCode or nRF Connect for Desktop[/quote]

Could you provide a screenshot of the issue and the full log output? Are you able to install any toolchain or sdk, meaning, do you see the versions that are available?

Also, could you please provide the output from running nRF Connect: Generate Support information from the VS Code Command Palette?

Thanks!

RE: VS Code: Failed to retrieve toolchain due to ZScaler Root Cert

Andreas Schurz — Wed, 26 Jun 2024 08:14:48 GMT

Hi,

I am also in contact with my IT department.

I have Administrator permissions on my PC.

This is what they came up with:

as mentioned based on debug 2: developer.nordicsemi.com/.../index-windows-x86_64.json: Connection Failed: tls connection init failed: invalid peer certificate: UnknownIssuer issue is point two you need to configure your app to trust this certificate keyserver.dhl.com/.../ZscalerRootCertificate-2048-SHA256.crt. that is app specific every developer tool can have it slightly different and most of them dont look into default windows CA storage and they use its own. thanks

Opening the URL:

https://developer.nordicsemi.com/.pc-tools/toolchain-v3/index-windows-x86_64.json

... in Chrome or IE works without problems. It just does not work in VS Code.

The ZScaler Root Cert is in the Cert Store as recommended.

However it is currently still not working.

What me confuses is that there is no problem when calling the URL in Chrome or Edge.

RE: VS Code: Failed to retrieve toolchain due to ZScaler Root Cert

Øyvind — Tue, 25 Jun 2024 15:47:08 GMT

Hello Andreas,

From the first look of this, this does sound like an issue with missing user privileges on the computer. Have you been in contact with your IT department? There was also an issue with our certificates a week or two ago, where we had to have our own IT department delete the cache on the server. There could be some connection to this in your case.

Kind regards,
Øyvind