Certificate expiration error thrown when adding rss source

[kecrily]

I tried to add https://www.solidot.org/index.rss as a feed, but an expired certificate error was thrown. I'm currently only having this problem when I add this feed.

RequestError: certificate has expired

But it doesn't actually expire. It will expire on Fri, 15 Oct 2021 23:59:59 GMT.

Other information that may be useful

• VSCode: 1.59.1 x64 (3866c3553be8b268c8a7f8c0482c0c0177aa8bfa)
• RSS: 0.10.1

[luyuhuang]

It looks good in my environment. Do you have any proxy that alters the certificate?

[kecrily]

It looks good in my environment. Do you have any proxy that alters the certificate?

I don't think so, but I did try to turn off all the proxies, no change.

[luyuhuang]

That's sounds weird. Is your system time correct? Or, if you run the extension in other device via remote-ssh, is the system time of that device correct?

[kecrily]

I am using this extension locally, and I have checked the local time, and everything looks fine, but something is just wrong with the extension.

I also feel very strange. Is there any way I can provide you with more information?

[luyuhuang]

You can try running curl and see the certificate:

curl -v https://www.solidot.org/index.rss

It'll print some things like this:

* Server certificate:
*  subject: OU=Domain Control Validated; OU=PositiveSSL Multi-Domain; CN=*.solidot.org
*  start date: Oct 16 00:00:00 2019 GMT
*  expire date: Oct 15 23:59:59 2021 GMT
*  subjectAltName: host "www.solidot.org" matched cert's "*.solidot.org"
*  issuer: C=CN; ST=Guangdong; L=Shenzhen; O=WoTrus CA Limited; OU=Controlled by Sectigo exclusively for WoTrus CA Limited; CN=WoTrus DV Server CA
*  SSL certificate verify ok.

If you have a Node.js environment, you can also try these and see what happens.

mkdir test-got && cd test-got
npm install [email protected]
cat > t.js <<EOF
const got = require('got');
got('https://www.solidot.org/index.rss', {
    timeout: 10 * 1000, retry: 1, encoding: 'binary',
    headers: {
        'Accept-Encoding': 'gzip, br',
    }
}).then(res => {
    console.log('ok', res.statusCode);
}).catch(err => {
    console.log('err', err);
});
EOF
node t.js

[danieltuzes]

I also have a similar issue. I was using this module for a while but today it failed to retrieve the news. If I click on the RSS feed and click refresh button, it says "updating RSS...", but then a "X" appears in the front of the feed. I right click -> refresh, I get the "RequestError: certificate has expired" error.

VS Code version:

(base) PS C:\Users\daniel\source\collection> code --version
[1110/195941.164:ERROR:registration_protocol_win.cc(102)] CreateFile: The system cannot find the file specified. (0x2)
1.62.1
f4af3cbf5a99787542e2a30fe1fd37cd644cc31f
x64

Extension version: RSS v0.10.2

(base) PS C:\Users\daniel\source\collection> curl -v https://www.solidot.org/index.rss
VERBOSE: GET https://www.solidot.org/index.rss with 0-byte payload
VERBOSE: received -1-byte response of content type application/xml;charset=utf-8


StatusCode        : 200
StatusDescription : OK
Content           : <?xml version="1.0" encoding="UTF-8"?>
                    <rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom">
                    <channel>
                    <title>奇客Solidot&#8211;传递最新科技情报</title>
                    <link>https://www.solidot.org</link>
                    <description>...
RawContent        : HTTP/1.1 200 OK
                    Keep-Alive: timeout=5, max=100
                    Connection: Keep-Alive
                    Transfer-Encoding: chunked
                    Content-Type: application/xml;charset=utf-8
                    Date: Wed, 10 Nov 2021 19:56:36 GMT
                    Set-Cookie: solid...
Forms             : {}
Headers           : {[Keep-Alive, timeout=5, max=100], [Connection, Keep-Alive], [Transfer-Encoding, chunked], [Content-Type, application/xml;charset=utf-8]...}
Images            : {}
InputFields       : {}
Links             : {@{innerHTML=表示; innerText=表示; outerHTML=<A href="https://cn.reuters.com/article/tencent-profit-q3-1110-wedn-idCNKBS2HV15Q?il=0">表示</A>; outerText=表示; tagName=A; href=https://cn.reuters.com/article/tencent-profit-q3-1110-wedn-idCNKBS2HV15Q?il=0}, @{innerHTML=与低心脏病患病风险相关;
                    innerText=与低心脏病患病风险相关; outerHTML=<A href="https://www.escardio.org/The-ESC/Press-Office/Press-releases/Bedtime-linked-with-heart-health">与低心脏病患病风险相关</A>; outerText=与低心脏病患病风险相关; tagName=A; href=https://www.escardio.org/The-ESC/Press-Office/Press-releases/Bedtime-linked-with-heart-health},
                    @{innerHTML=电子邮件; innerText=电子邮件; outerHTML=<A href="https://twitter.com/MattNavarra/status/1455904634850140160">电子邮件</A>; outerText=电子邮件; tagName=A; href=https://twitter.com/MattNavarra/status/1455904634850140160}, @{innerHTML=操作项; innerText=操作项; outerHTML=<A        
                    href="https://www.nearmedia.co/does-the-gmb-rebranding-mean-more-or-less-than-google-say/">操作项</A>; outerText=操作项; tagName=A; href=https://www.nearmedia.co/does-the-gmb-rebranding-mean-more-or-less-than-google-say/}...}
ParsedHtml        : mshtml.HTMLDocumentClass
RawContentLength  : 28640

[luyuhuang]

I also have a similar issue. I was using this module for a while but today it failed to retrieve the news. If I click on the RSS feed and click refresh button, it says "updating RSS...", but then a "X" appears in the front of the feed. I right click -> refresh, I get the "RequestError: certificate has expired" error.

Is the RSS URL also https://www.solidot.org/index.rss ?

[danieltuzes]

No, I try to get news from stackoverflow. How can I obtain the RSS URL? It would be a great feature to get it somehow easier than exporting the account and reading the code.

[luyuhuang]

I tried to fix the problem and packed a package: rss.zip. You can try it in your own environment. Download and unzip it and you'll get a vsix file. Then open vscode and switch to the extensions tab, click "Install from VSIX..." and select that vsix file to install it. If it works, I'll release a new version to fix that bug.

[luyuhuang]

Also, it seems that this is a vscode bug: microsoft/vscode#136787 . You can try to use the setting http.systemCertificates: false to resolve this problem.

[lovefengruoqing]

Also, it seems that this is a vscode bug: microsoft/vscode#136787 . You can try to use the setting http.systemCertificates: false to resolve this problem.

Thank you! I encountered the same problem, this method is useful.