Corporate firewall / Cloudflare Warp Help

What issue or error are you experiencing?

Cannot log into localwp in local app while behind cloudflare warp or corporate firewalls. Cannot download local wpplugins.


What steps can be taken to replicate the issue? Feel free to include screenshots, videos, etc

Install cloudflare warp zero trust (or any similar DOH vpn). Log into local, cannot stay logged in while behind corporate network.

The seems like it could be related to a Self Signed Certificate issue that involves Local not trusting the SSl Certificate from the local store. Similar to how docker / NPM / python need to have trust certs added to local stores as described here:

When I turn off Warp, I can log in. when I turn it back on, I am logged out.

No direct errors show in console or network panel, but the flywheel list sites requests do show a self signed cert in the chain.

Previously I’ve been able to solve this for both the hub.localwp.com and WPengine/Getflywheel logins by adding DOH bypasses to several Local/WPengine/Flywheel endpoints eg identity.wpengine.com, api.wpengineapi.com, etc.

Is there is a capacity to add a trusted CAfile to Local, or if there are URLS that do not support DOH (DNS over HTTPS) that can be whitelisted for the Localwp.com login so I can download the plugins on my corporate devices.

If that is not possible, is there a manual installation method for the plugins that are locked behind the local wp login?


System Details

  • Local Version:
    Version 9.2.2+6771

  • Operating System (OS) and OS version:
    MacOS 15.4


Local Logs

Attach your Local Logs here (Help Doc - Retrieving Local’s Log)

local-lightning.log (196.3 KB)


Security Reminder
Local does a pretty good job of scrubbing private info from the logs and the errors it produces, however there’s always the possibility that something private can come through. Because these are public forums, always review the screenshots you are sharing to make sure there isn’t private info like passwords being displayed.

Hi, @m8hue.

Local doesn’t currently offer a way to add a trusted CAfile.

From the error you shared it looks like the bypass you have in place for Local’s domains may not be working (at least for app.getflywheel.com). You could double-check the exclusion process for your corporate firewall or Warp against the list of domains we recommend allowing here: Install Local - Local

If that still fails, you could wait for Local 9.2.4 (already out in beta, should be in production soon). From the beta release notes:

  • No longer require a Local Hub account to use the Image Optimizer, Broken Link Checker, and Instant Reload Addons.

Local Beta 9.2.4

If those addons are the only things you were using a Local login for, then it should no longer be an issue for you under Local 9.2.4 when it’s out.

Note, though, that Broken Link Checker was recently archived — we recommend alternatives here: Link Checker - Local

Local 9.2.4 is out now. It no longer requires a login to download or activate Instant Reload or Image Optimizer in case that proves helpful.

2 Likes

Massively helpful. I guess I timed my post right to get the new version.

2 Likes