Context

Occasionally users will run into authentication issues while attempting to log in to the CLI. Common error messages include:

• Authentication failed: Failed to exchange authorization code: unable to get local issuer certificate

• Authentication failed: Failed to exchange authorization code: self signed certificate in certificate chain

This often occurs because the customer is on a corporate proxy/VPN/firewall that intercepts and re-signs the encryption with a different certificate.

Answer

Target your company certificate while logging in using the command:

NODE_EXTRA_CA_CERTS=/path/to/your-company-ca.pem coderabbit auth login

Your company's security or IT team should be able to direct you to your certificate.

To make it permanent:

1. Add the file export NODE_EXTRA_CA_CERTS=/path/to/your-ca.pem to your ~/.bashrc (for Bash) or ~/.zshrc (for Z Shell).

2. Restart your shell or run:

   1. source ~/.bashrc (for Bash), or

   2. source ~/.zshrc (for Z Shell)