SignatureException: Signature doesn't match or Signature length not correct: got 256 but was expecting 512

You may get

JetProfile connection error: SSLHandshakeException: java.security.cert.CertificateException: java.security.SignatureException: Signature length not correct: got 256 but was expecting 512

or

java.security.cert.CertificateException: java.security.SignatureException: Signature does not match.

error when trying to login with your JetBrains account, here are the possible causes and workarounds:

  • Proxy server between you and our server (https://account.jetbrains.com/) that intercepts SSL traffic and substitutes our certificate with its own one, which is different and will not be accepted by the IDE. Note that this proxy server may be completely transparent to you and may work without any explicit proxy configuration in your system. Please contact your organization IT helpdesk or ISP support to get it resolved.
  • Make sure there is no -Djsse.enableSNIExtension=false in the product .vmoptions.
  • If you are using Linux, your JDK may have incomplete keystore without thawte CA, therefore, JDK can't verify SSL certs from our server. Please see this issue for details. You can install Oracle JDK 1.8 and configure IDE to use this new JDK installation instead of the system JDK. Make sure to install manually from Oracle site. JDK installed by the package manager will use the same cacerts file that may be incomplete or even empty/corrupted.
  • IBM JDK will have issues connecting to account server, please use Oracle JDK or OpenJDK.
  • Another option is to obtain offline key from the account and enter it in the registration dialog. This is not available for student/academic accounts.
  • If you are using an old product version (released before 24 August 2014), it will not be able to connect to the account server, please update to a more recent product version or contact support for the special build of the product with a fix for this problem.

If this issue prevents you from converting your license to a new format, please use a web site form instead.

15 comments
Comment actions Permalink

I was able to resolve this issue by using the following:

sudo apt-get -f install

Seems like perhaps the ca-certificates didn't get installed when openJDK was. Hope this helps someone.

0
Comment actions Permalink

The 'obtain offline key' link in this article is broken. I found what I assume is the correct page here: https://resharper-support.jetbrains.com/hc/en-us/articles/207327790-How-to-execute-an-offline-activation-

0
Comment actions Permalink

I am getting this issue while trying to activate the product using a license server hosted on our network. If we had a way to tell the product not to use the proxy for that address it would fix it. I do not see a way to do this for the registration screen.

0
Comment actions Permalink

IDE can use your system proxy settings automatically, see https://youtrack.jetbrains.com/issue/IDEA-174267.

1
Comment actions Permalink

I got it to work with a workaround. If you are getting stuck because you are behind a corporate proxy, get off the private connection onto a guest wifi or mobile connection, then activate your account, and then get back on to the private connection. That should solve your problem!

2
Comment actions Permalink

Stumbled upon it after updating automatically to 2019.2 (couldn't sync settings, couldn't activate the license). Thing is, I have a zip install into a custom folder instead of the usual installer, so it was possible for some random files to be left as-is instead of them being deleted. Downloaded a clean new zip of 2019.2, removed the old version from custom folder, and unpacked the new version. Works fine now, didn't have to purge my user settings.

0
Comment actions Permalink

Follow these steps:

1. Go to: File -> Settings -> Appearance & Behavior -> System settings -> HTTP Proxy

2. Select Auto-detect proxy setting

3. Click Clear password

4. Click check connection and provide the URL: https://account.jetbrains.com/login

5. Go to Help -> Register and login

5
Comment actions Permalink

I have problem now with 2020.1 , when I use offline key it accepts it but keeps poping up every minute asking for activation

3
Comment actions Permalink

What is the specific error code that you get?

0
Comment actions Permalink

I have the same problem as Mohammad. It's not an error, the activation code is accepted, the license is recognized. But the activation dialog keeps popping up every minute asking for an activation again, even though I just entered the correct activation code a minute ago.

0
Comment actions Permalink

Margo Parmentier

It's a known bug, sorry for the inconvenience: https://youtrack.jetbrains.com/issue/IDEA-237175 .

The fix will be released soon. Until then you can either activate via JetBrains Account or activate the trial mode.

0
Comment actions Permalink

First suggestion to ask for changes of corporate firewall  is not workable in large Enterprise environment. 

Offline activation is broken since 2020.1, it only activates for short time and then pops up again as already indicated by https://intellij-support.jetbrains.com/hc/en-us/articles/206544889/comments/360001162300. 

0
Comment actions Permalink

Michael

It's a known bug, sorry for the inconvenience: https://youtrack.jetbrains.com/issue/IDEA-237175 .

The fix will be released soon. Until then you can activate the trial mode.

0
Comment actions Permalink

I also have this problem when installing 2020.1. It also says that "Your host may be behind a proxy. Intellij IDEA was not able to detect your proxy configuration. You may want to specify HTTPS proxy parameters and try again."

Can you guys help me with that?

kind regards!

0
Comment actions Permalink

CF Zhou in case your proxy intercepts the traffic and replaces the certificates, you have the following options:

  • bypass the proxy somehow or ask your proxy admin to whitelist account.jetbrains.com host
  • use offline activation code to register the IDE instead of the JetBrains Account
  • install the CA used for the self signed proxy certificate into the JVM used to run IntelliJ IDEA via keytool
1

Please sign in to leave a comment.

Have more questions?

Submit a request