Had a similar question a few month back when I start playing with UXP (see question at the bottom of Allowing Network access to a specific PORT?“maybe UXP require to have a non-self signed cert ?“ )
…but did not get any answer.
Hopefully you’ll be more lucky than me and get one
Is this a known bug ? Is there a fix coming at one point (or not in radar / too low priority ) ?
Known limitation to enforce more security (Hmmm… probably not, restricting access to specific site & https is already available from manifest, sounds more strict anyway).
This is really painful not to be able to test locally without a real / not self-signed cert.
In my use-case, the API the extension needs to call is only reachable from within the internal infrastructure. For security reasons, it cannot be exposed publicly.
With the CEP version, we worked around this by using Axios and attaching our internal CA certificate through the HTTPS agent.