Installing Extension via OpenVSX fails on MacOS with "Signature verification was not executed."

[sourishkrout]

Is there an existing issue for this?

• I have searched the existing issues

OS/Web Information

• Web Browser: Chrome (not relevant though)
• Local OS: MacOS Sonoma 14.7.2 (23H311)
• Remote OS: running locally, MacOS Sonoma 14.7.2 (23H311)
• Remote Architecture: All arm64
• code-server --version: 1.97.2, e54c774e0add60467559eb0d1e229c6452cf8447, arm64

Steps to Reproduce

Run code-server --install-extension redhat.vscode-yaml --force

$ code-server --install-extension redhat.vscode-yaml --force
Installing extensions...
Installing extension 'redhat.vscode-yaml'...
Error while installing extension redhat.vscode-yaml: Signature verification was not executed.
Failed Installing Extensions: redhat.vscode-yaml
[2025-02-19T22:47:01.289Z] error parent:80369 Uncaught exception: Signature verification was not executed.
[2025-02-19T22:47:01.289Z] error parent:80369 SignatureVerificationInternal: Signature verification was not executed.
    at Hc.ub (file:///opt/homebrew/Cellar/code-server/4.96.4/libexec/lib/vscode/out/server-main.js:58:17105)
    at async Hc.tb (file:///opt/homebrew/Cellar/code-server/4.96.4/libexec/lib/vscode/out/server-main.js:58:15571)

Expected

Successfully installs extension via OpenVSX. This works on Linux but not MacOS.

Actual

[2025-02-19T22:47:01.289Z] error parent:80369 Uncaught exception: Signature verification was not executed.
[2025-02-19T22:47:01.289Z] error parent:80369 SignatureVerificationInternal: Signature verification was not executed.
    at Hc.ub (file:///opt/homebrew/Cellar/code-server/4.96.4/libexec/lib/vscode/out/server-main.js:58:17105)
    at async Hc.tb (file:///opt/homebrew/Cellar/code-server/4.96.4/libexec/lib/vscode/out/server-main.js:58:15571)

Logs

Installing extensions...
Installing extension 'redhat.vscode-yaml'...
Error while installing extension redhat.vscode-yaml: Signature verification was not executed.
Failed Installing Extensions: redhat.vscode-yaml
[2025-02-19T22:47:01.289Z] error parent:80369 Uncaught exception: Signature verification was not executed.
[2025-02-19T22:47:01.289Z] error parent:80369 SignatureVerificationInternal: Signature verification was not executed.
    at Hc.ub (file:///opt/homebrew/Cellar/code-server/4.96.4/libexec/lib/vscode/out/server-main.js:58:17105)
    at async Hc.tb (file:///opt/homebrew/Cellar/code-server/4.96.4/libexec/lib/vscode/out/server-main.js:58:15571)

Screenshot/Video

No response

Does this bug reproduce in native VS Code?

No, this works as expected in native VS Code

Does this bug reproduce in GitHub Codespaces?

No, this works as expected in GitHub Codespaces

Are you accessing code-server over a secure context?

• I am using a secure context.

Notes

The only workaround is to run code-server and install the extension from within the Extensions panel explicitly ignoring "Signature Verification".