SignatureException: Signature doesn't match or Signature length not correct: got 256 but was expecting 512

You may get

JetProfile connection error: SSLHandshakeException: java.security.cert.CertificateException: java.security.SignatureException: Signature length not correct: got 256 but was expecting 512

or

java.security.cert.CertificateException: java.security.SignatureException: Signature does not match.

error when trying to login with your JetBrains account, here are the possible causes and workarounds:

  • Proxy server between you and our server (https://account.jetbrains.com/) that intercepts SSL traffic and substitutes our certificate with its own one, which is different and will not be accepted by the IDE. Note that this proxy server may be completely transparent to you and may work without any explicit proxy configuration in your system. Please contact your organization IT helpdesk or ISP support to get it resolved.
  • Make sure there is no -Djsse.enableSNIExtension=false in the product .vmoptions.
  • If you are using Linux, your JDK may have incomplete keystore without thawte CA, therefore, JDK can't verify SSL certs from our server. Please see this issue for details. You can install Oracle JDK 1.8 and configure IDE to use this new JDK installation instead of the system JDK. Make sure to install manually from Oracle site. JDK installed by the package manager will use the same cacerts file that may be incomplete or even empty/corrupted.
  • IBM JDK will have issues connecting to account server, please use Oracle JDK or OpenJDK.
  • Another option is to obtain offline key from the account and enter it in the registration dialog. This is not available for student/academic accounts.
  • If you are using an old product version (released before 24 August 2014), it will not be able to connect to the account server, please update to a more recent product version or contact support for the special build of the product with a fix for this problem.

If this issue prevents you from converting your license to a new format, please use a web site form instead.

4 comments

I was able to resolve this issue by using the following:

sudo apt-get -f install

Seems like perhaps the ca-certificates didn't get installed when openJDK was. Hope this helps someone.

0

The 'obtain offline key' link in this article is broken. I found what I assume is the correct page here: https://resharper-support.jetbrains.com/hc/en-us/articles/207327790-How-to-execute-an-offline-activation-

0

I am getting this issue while trying to activate the product using a license server hosted on our network. If we had a way to tell the product not to use the proxy for that address it would fix it. I do not see a way to do this for the registration screen.

0

Please sign in to leave a comment.

Have more questions?

Submit a request