This adds support for automatically recovering from SSL handshake errors when certificates expired. When an SSL error occurs, the plugin will now attempt to execute a configured external command to refresh certificates. If successful, the SSL context is reloaded and the failed request is transparently retried. This improves reliability in environments with short-lived or frequently rotating certificates.

Netflix requested this, they don't have a reliable mechanism to detect and refresh the certificates before any major disruption in Coder Toolbox.

fioan89 added2 commits

November 27, 2025 00:04

feat: automatic mTLS certificate regeneration and retry mechanism

3f5c8c4

This adds support for automatically recovering from SSL handshake errors when certificates expired.When an SSL error occurs, the plugin will now attempt to execute a configured external commandto refresh certificates. If successful, the SSL context is reloaded and the failed request istransparently retried. This improves reliability in environments with short-lived or frequentlyrotating certificates.Netflix requested this, they don't have a reliable mechanism to detect and refresh the certificatesbefore any major disruption in Coder Toolbox.

chore: update changelog

e3d42e9

fioan89 marked this pull request as draft

November 26, 2025 22:07

fioan89 requested review fromcode-asher,f0ssel andjcjiang

November 26, 2025 22:07

code-asher approved these changes

Dec 1, 2025

View reviewed changes

Copy link

Member

code-asher left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others.Learn more.

Neat! Do you know if we have plans to do this for the VS Code extension as well?

fioan89 marked this pull request as ready for review

December 1, 2025 23:03

Copy link

CollaboratorAuthor

fioan89 commentedDec 1, 2025

Neat! Do you know if we have plans to do this for the VS Code extension as well?

Yes.. it should be and I talked with@jcjiang to implement this on VS Code but I'm not sure when it will be. Netflix was apparently keen to have this in Toolbox.