Ideaj wants to download from server with self-signed certificate.

Answered

When opening my project this morning for the first time on a new box, I got repeated ( 10 to 20 ) requests to accept a self-signed certificate from somebody from whom I was apparently downloading something.

There was no indication of whether this was related to a plug in, or to a library that my code uses.  There was no indication of what URL it was attempting to hit, nor why it was making this attempt.

Whether the self-signed certificate turns out to be your issue or mine, I think there are a couple of interface issues that could be worked on.  Were I to display such a dialog box from my code, I would probably do a couple of things differently:

1) I would display the URL that delivered the certificate, and an explanation of why I wanted to hit it.

2) I would offer an option for the user to inform the program that he would never, ever, accept that certificate, and make it stop asking.

3) I would offer an option to set a policy that self-signed certificates were a non-starter, unless and until the user indicated otherwise.

Has anybody else seen this?  I compiled the program with gradle, and did not get any warnings about self-signed certificates, so it is probably not Maven.  The Gradle guys don't seem to be the sort that would fail to warn me about such a thing.  They MIGHT be the sort to say “homey don't play that”, and not trouble me about it.

Opening the project in Android Studio displayed 2 of these warnings, rather than 10-20.

I'm hoping that is not because Gradle blindly accepted the cert.

Details:  I downloaded this fresh copy of Idea, as well as the the coy of Studio.

 


IntelliJ IDEA 2023.2.2 (Ultimate Edition)
Build #IU-232.9921.47, built on September 12, 2023
<REDACTED>

Subscription is active until March 16, 2024.
For non-commercial open source development only.
Runtime version: 17.0.8+7-b1000.22 amd64
VM: OpenJDK 64-Bit Server VM by JetBrains s.r.o.
Linux 6.1.52
GC: G1 Young Generation, G1 Old Generation
Memory: 4096M
Cores: 24

Kotlin: 232-1.9.0-IJ9921.47
Current Desktop: XFCE

 

0
2 comments

The dates on the certificate look funky as well.
Looks like it comes from Canada or California.  Who'da guessed?
Asked another 6 times when I opened idea again.
 

0

Could you please share your IDE logs (Help > Collect Logs and Diagnostic Data)? They could contain more detailed information about the certificate popup. You can upload the logs here: https://uploads.jetbrains.com, just provide the uploaded file ID.
Also, please advise at what time approx. you received the notification - to analyze the logs more efficiently?

Are you still receiving this notification?

 

0

Please sign in to leave a comment.