Chat Error on conversation request: FetchError: The pending stream has been canceled (caused by: self-signed certificate in certificate chain)

[zachariasnuernberger]

Hello,

In my company, we have the problem that the Github Copilot chat does not always work.

When you restart Eclipse, the Copilot chat works, but after about 3 minutes it stops working and the error message appears.

[Error] [chat] Error on conversation request: FetchError: The pending stream has been canceled (caused by: self-signed certificate in certificate chain)
at fetch (C:\snapshot\copilot-client\node_modules@adobe\helix-fetch\src\fetch\index.js:99:11)
at processTicksAndRejections (node:internal/process/task_queues:95:5)
at cachingFetch (C:\snapshot\copilot-client\node_modules@adobe\helix-fetch\src\fetch\index.js:288:16)
at TN.fetch (C:\snapshot\copilot-client\lib\src\network\helix.ts:79:22)
at ZZ.fetchWithParameters (C:\snapshot\copilot-client\lib\src\conversation\openai\fetch.ts:310:16)
at ZZ.fetchAndStreamChat (C:\snapshot\copilot-client\lib\src\conversation\openai\fetch.ts:180:26)
at ka.fetch (C:\snapshot\copilot-client\lib\src\conversation\chatMLFetcher.ts:250:30)
at ka.fetchResponse (C:\snapshot\copilot-client\lib\src\conversation\chatMLFetcher.ts:240:16)
at Vne.fetchConversationResponse (C:\snapshot\copilot-client\lib\src\conversation\turnProcessor.ts:403:29)
at Vne.processWithModel (C:\snapshot\copilot-client\lib\src\conversation\turnProcessor.ts:197:30) {
type: 'system',
_name: 'FetchError',
code: 'ERR_HTTP2_STREAM_CANCEL',
errno: undefined,
erroredSysCall: undefined
}

One fix so that you don't have to restart Eclipse every time is to turn Enable Strict SSL off and then on again,
but it's not a good solution.

When analyzing the error, I noticed that this error is attached as information to every chat message that works.

[Info] [fetchChat] Request 7df3320e-e4cf-4fd5-8596-f335f0873de7 at https://api.business.githubcopilot.com/chat/completions rejected with FetchError: The pending stream has been canceled (caused by: self-signed certificate in certificate chain) after 454.89750000002095ms

I was able to resolve this error by adding a system variable with the certificate from api.business.githubcopilot.com on my Windows laptop.

After that, I only received the following message:

[Info] [fetchChat] Request d59075eb-dab9-4582-ba7a-b9e7a1fc118a at https://api.business.githubcopilot.com/chat/completions finished with 200 status after 362.80309999999736ms

Nevertheless, it did not resolve the aforementioned error, which continues to occur.

The system administrators could not identify anything that the firewall was blocking, but as soon as I disable my company's firewall and use my home network, the error no longer occurs.

For further information, Copilot works fine in Visual Studio, but in Eclipse there is the same problem with both Copilot plugins.

[wayneparrott]

@zachariasnuernberger Thanks for this helpful research. Would you be interested in helpomg us test a dev build that we are hoping addresses this situation? If yes, reach me at support@genuitec.com and include a link to this thread. I hope to have the build available for testing in a few hours.

[wayneparrott]

Actually here is a quick experiment you can try. Add this system property c4e.api.nativeapp.enabled to the vmargs section of your eclipse.ini:

-Dc4e.api.nativeapp.enabled=false

This will force Copilot4Eclipse to downgrade its strategy for running the copilot api to use either the Nodejs runtime packaged in as part of the wildwebdeveloper editors plugin or fallback to using a local version of Node 20+ from your system installation.

[wayneparrott]

re: The pending stream has been canceled (caused by: self-signed certificate in certificate chain) info my thought is the Node process running the copilot api navigating through a corp proxy that is performing HTTPS Inspection and is unable to verify the internal CA of a cert provided by the proxy when creating the internal half of the secure connection thru the proxy. The experiment above will run a bit of code that enables the Node process to accesses trusted CAs from your OS cert manager/keystore.