IDEA updates secure connection option

This option is no longer available as all the updates require the secure connection now. Help will be updated.

I am struggling with this. We are behind a corporate firewall and all updates and plugin downloads broke for IDEA recently.

I've managed to locate the keystore that IDEA is using and imported our corporate certificate. This allows the update check to work, but plugin downloads still fail with a 400 error.

Any idea how to fix this?

2019-10-21 13:42:05,332 [337654761] WARN - Settings.impl.PluginDownloader - Cannot download 'https://plugins.jetbrains.com/pluginManager/?action=download&id=Lombook%20Plugin&build=IU-192.6817.14&uuid=c49545e8-47c5-4163-9359-940b4cb9c3f8': Connection reset
java.io.IOException: Cannot download 'https://plugins.jetbrains.com/pluginManager/?action=download&id=Lombook%20Plugin&build=IU-192.6817.14&uuid=c49545e8-47c5-4163-9359-940b4cb9c3f8': Connection reset
at com.intellij.util.io.HttpRequests$RequestImpl.saveToFile(HttpRequests.java:482)
at com.intellij.openapi.updateSettings.impl.PluginDownloader.lambda$downloadPlugin$1(PluginDownloader.java:237)
at com.intellij.util.io.HttpRequests.doProcess(HttpRequests.java:537)
at com.intellij.util.io.HttpRequests.process(HttpRequests.java:513)
at com.intellij.util.io.HttpRequests.access$100(HttpRequests.java:61)
at com.intellij.util.io.HttpRequests$RequestBuilderImpl.connect(HttpRequests.java:363)
at com.intellij.openapi.updateSettings.impl.PluginDownloader.downloadPlugin(PluginDownloader.java:236)
at com.intellij.openapi.updateSettings.impl.PluginDownloader.prepareToInstall(PluginDownloader.java:134)
at com.intellij.ide.plugins.PluginInstaller.prepareToInstall(PluginInstaller.java:225)
at com.intellij.ide.plugins.PluginInstaller.prepareToInstall(PluginInstaller.java:113)
at com.intellij.ide.plugins.PluginInstaller.prepareToInstall(PluginInstaller.java:52)
at com.intellij.ide.plugins.newui.MyPluginModel.lambda$installPlugin$3(MyPluginModel.java:177)
at com.intellij.openapi.application.impl.ApplicationImpl$1.run(ApplicationImpl.java:294)
at java.base/java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:515)
at java.base/java.util.concurrent.FutureTask.run(FutureTask.java:264)
at java.base/java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1128)
at java.base/java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:628)
at java.base/java.lang.Thread.run(Thread.java:834)
Caused by: java.net.SocketException: Connection reset
at java.base/java.net.SocketInputStream.read(SocketInputStream.java:186)
at java.base/java.net.SocketInputStream.read(SocketInputStream.java:140)
at java.base/java.io.BufferedInputStream.fill(BufferedInputStream.java:252)
at java.base/java.io.BufferedInputStream.read1(BufferedInputStream.java:292)
at java.base/java.io.BufferedInputStream.read(BufferedInputStream.java:351)
at java.base/sun.net.www.http.HttpClient.parseHTTPHeader(HttpClient.java:746)
at java.base/sun.net.www.http.HttpClient.parseHTTP(HttpClient.java:689)
at java.base/sun.net.www.protocol.http.HttpURLConnection.doTunneling(HttpURLConnection.java:2080)
at java.base/sun.net.www.protocol.https.AbstractDelegateHttpsURLConnection.connect(AbstractDelegateHttpsURLConnection.java:183)
at java.base/sun.net.www.protocol.http.HttpURLConnection.followRedirect0(HttpURLConnection.java:2774)
at java.base/sun.net.www.protocol.http.HttpURLConnection.followRedirect(HttpURLConnection.java:2686)
at java.base/sun.net.www.protocol.http.HttpURLConnection.getInputStream0(HttpURLConnection.java:1849)
at java.base/sun.net.www.protocol.http.HttpURLConnection.getInputStream(HttpURLConnection.java:1515)
at java.base/sun.net.www.protocol.https.HttpsURLConnectionImpl.getInputStream(HttpsURLConnectionImpl.java:250)
at com.coverity.truststore.url.HttpsTrustStoreUrlConnection.getInputStream(HttpsTrustStoreUrlConnection.java:124)
at java.base/java.net.HttpURLConnection.getResponseCode(HttpURLConnection.java:527)
at com.intellij.util.io.HttpRequests.openConnection(HttpRequests.java:626)
at com.intellij.util.io.HttpRequests.access$300(HttpRequests.java:61)
at com.intellij.util.io.HttpRequests$RequestImpl.getConnection(HttpRequests.java:389)
at com.intellij.util.io.HttpRequests$RequestImpl.getInputStream(HttpRequests.java:398)
at com.intellij.util.io.HttpRequests$RequestImpl.saveToFile(HttpRequests.java:475)
... 17 more

Can you download manually from the plug-ins site using the browser? Do you use the same proxy configuration in IntelliJ IDEA and in the browser?

Does your Internet connection permit downloads from the plug-ins site?

I should also mention everything works fine for Webstorm 2019.2.3, but fails for IDEA 2019.2.3.

I have the same proxy setting for both.

I am able to download the plugins by putting the URLs from the log into a browser and then installing manually.

It is a workaround, but quite annoying.

Yes, same proxy settings in the browser as configured for IDEA. This is Windows 10 Pro.

Try reinstalling the certs per https://intellij-support.jetbrains.com/hc/en-us/community/posts/115000094584-IDEA-Ultimate-2016-3-4-throwing-unable-to-find-valid-certification-path-to-requested-target-when-trying-to-refresh-gradle?page=1#community_comment_115000405564 .

Add -Djavax.net.debug=ssl in Help | Edit Custom VM Options and start IntelliJ IDEA using idea.bat/sh from the command line/terminal or `/Applications/IntelliJ\ IDEA.app/Contents/MacOS/idea` on macOS. The console SSL log may have the clue why the connection is reset.

Stack trace is below, I'm not sure there is anything useful there.

Is there a chance a different keystore is used for the update check vs. the plugin download?

I found adding our corporate certificate to the following fixed the update check:

    C:\Users\XXXXXXXXXX\AppData\Local\JetBrains\Toolbox\apps\IDEA-U\ch-0\192.6817.14\jbr\lib\security\cacerts

How can I tell where IDEA locates the keystore for the plugin download?

javax.net.ssl|DEBUG|35|ApplicationImpl pooled thread 12|2019-10-21 16:06:41.828 PDT|SSLSocketImpl.java:473|duplex close of SSLSocket
javax.net.ssl|DEBUG|35|ApplicationImpl pooled thread 12|2019-10-21 16:06:41.828 PDT|SSLSocketImpl.java:1362|close the underlying socket
javax.net.ssl|DEBUG|35|ApplicationImpl pooled thread 12|2019-10-21 16:06:41.829 PDT|SSLSocketImpl.java:1381|close the SSL connection (initiative)
javax.net.ssl|DEBUG|35|ApplicationImpl pooled thread 12|2019-10-21 16:06:41.829 PDT|SSLSocketImpl.java:636|close inbound of SSLSocket
javax.net.ssl|WARNING|35|ApplicationImpl pooled thread 12|2019-10-21 16:06:41.830 PDT|SSLSocketImpl.java:494|SSLSocket duplex close failed (
"throwable" : {
java.net.SocketException: Socket is closed
at java.base/java.net.Socket.shutdownInput(Socket.java:1521)
at java.base/sun.security.ssl.BaseSSLSocketImpl.shutdownInput(BaseSSLSocketImpl.java:218)
at java.base/sun.security.ssl.SSLSocketImpl.shutdownInput(SSLSocketImpl.java:651)
at java.base/sun.security.ssl.SSLSocketImpl.bruteForceCloseInput(SSLSocketImpl.java:606)
at java.base/sun.security.ssl.SSLSocketImpl.duplexCloseOutput(SSLSocketImpl.java:566)
at java.base/sun.security.ssl.SSLSocketImpl.close(SSLSocketImpl.java:479)
at java.base/sun.net.www.http.HttpClient.closeServer(HttpClient.java:1058)
at java.base/sun.net.www.protocol.http.HttpURLConnection.disconnectInternal(HttpURLConnection.java:2927)
at java.base/sun.net.www.protocol.http.HttpURLConnection.followRedirect0(HttpURLConnection.java:2698)
at java.base/sun.net.www.protocol.http.HttpURLConnection.followRedirect(HttpURLConnection.java:2686)
at java.base/sun.net.www.protocol.http.HttpURLConnection.getInputStream0(HttpURLConnection.java:1849)
at java.base/sun.net.www.protocol.http.HttpURLConnection.getInputStream(HttpURLConnection.java:1515)
at java.base/sun.net.www.protocol.https.HttpsURLConnectionImpl.getInputStream(HttpsURLConnectionImpl.java:250)
at com.coverity.truststore.url.HttpsTrustStoreUrlConnection.getInputStream(HttpsTrustStoreUrlConnection.java:124)
at java.base/java.net.HttpURLConnection.getResponseCode(HttpURLConnection.java:527)
at com.intellij.util.io.HttpRequests.openConnection(HttpRequests.java:626)
at com.intellij.util.io.HttpRequests.access$300(HttpRequests.java:61)
at com.intellij.util.io.HttpRequests$RequestImpl.getConnection(HttpRequests.java:389)
at com.intellij.util.io.HttpRequests$RequestImpl.getInputStream(HttpRequests.java:398)
at com.intellij.util.io.HttpRequests$RequestImpl.saveToFile(HttpRequests.java:475)
at com.intellij.openapi.updateSettings.impl.PluginDownloader.lambda$downloadPlugin$1(PluginDownloader.java:237)
at com.intellij.util.io.HttpRequests.doProcess(HttpRequests.java:537)
at com.intellij.util.io.HttpRequests.process(HttpRequests.java:513)
at com.intellij.util.io.HttpRequests.access$100(HttpRequests.java:61)
at com.intellij.util.io.HttpRequests$RequestBuilderImpl.connect(HttpRequests.java:363)
at com.intellij.openapi.updateSettings.impl.PluginDownloader.downloadPlugin(PluginDownloader.java:236)
at com.intellij.openapi.updateSettings.impl.PluginDownloader.prepareToInstall(PluginDownloader.java:134)
at com.intellij.ide.plugins.PluginInstaller.prepareToInstall(PluginInstaller.java:225)
at com.intellij.ide.plugins.PluginInstaller.prepareToInstall(PluginInstaller.java:113)
at com.intellij.ide.plugins.PluginInstaller.prepareToInstall(PluginInstaller.java:52)
at com.intellij.ide.plugins.newui.MyPluginModel.lambda$installPlugin$3(MyPluginModel.java:177)
at com.intellij.openapi.application.impl.ApplicationImpl$1.run(ApplicationImpl.java:294)
at java.base/java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:515)
at java.base/java.util.concurrent.FutureTask.run(FutureTask.java:264)
at java.base/java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1128)
at java.base/java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:628)
at java.base/java.lang.Thread.run(Thread.java:834)}

)
javax.net.ssl|DEBUG|35|ApplicationImpl pooled thread 12|2019-10-21 16:06:42.502 PDT|SSLSocketImpl.java:473|duplex close of SSLSocket
javax.net.ssl|DEBUG|35|ApplicationImpl pooled thread 12|2019-10-21 16:06:42.502 PDT|SSLSocketImpl.java:1362|close the underlying socket
javax.net.ssl|DEBUG|35|ApplicationImpl pooled thread 12|2019-10-21 16:06:42.504 PDT|SSLSocketImpl.java:1381|close the SSL connection (initiative)
javax.net.ssl|DEBUG|35|ApplicationImpl pooled thread 12|2019-10-21 16:06:42.507 PDT|SSLSocketImpl.java:636|close inbound of SSLSocket
javax.net.ssl|WARNING|35|ApplicationImpl pooled thread 12|2019-10-21 16:06:42.509 PDT|SSLSocketImpl.java:494|SSLSocket duplex close failed (
"throwable" : {
java.net.SocketException: Socket is closed
at java.base/java.net.Socket.shutdownInput(Socket.java:1521)
at java.base/sun.security.ssl.BaseSSLSocketImpl.shutdownInput(BaseSSLSocketImpl.java:218)
at java.base/sun.security.ssl.SSLSocketImpl.shutdownInput(SSLSocketImpl.java:651)
at java.base/sun.security.ssl.SSLSocketImpl.bruteForceCloseInput(SSLSocketImpl.java:606)
at java.base/sun.security.ssl.SSLSocketImpl.duplexCloseOutput(SSLSocketImpl.java:566)
at java.base/sun.security.ssl.SSLSocketImpl.close(SSLSocketImpl.java:479)
at java.base/sun.net.www.http.HttpClient.closeServer(HttpClient.java:1058)
at java.base/sun.net.www.protocol.http.HttpURLConnection.disconnectInternal(HttpURLConnection.java:2927)
at java.base/sun.net.www.protocol.http.HttpURLConnection.followRedirect0(HttpURLConnection.java:2698)
at java.base/sun.net.www.protocol.http.HttpURLConnection.followRedirect(HttpURLConnection.java:2686)
at java.base/sun.net.www.protocol.http.HttpURLConnection.getInputStream0(HttpURLConnection.java:1849)
at java.base/sun.net.www.protocol.http.HttpURLConnection.getInputStream(HttpURLConnection.java:1515)
at java.base/sun.net.www.protocol.https.HttpsURLConnectionImpl.getInputStream(HttpsURLConnectionImpl.java:250)
at com.coverity.truststore.url.HttpsTrustStoreUrlConnection.getInputStream(HttpsTrustStoreUrlConnection.java:124)
at java.base/java.net.HttpURLConnection.getResponseCode(HttpURLConnection.java:527)
at com.intellij.util.io.HttpRequests.openConnection(HttpRequests.java:626)
at com.intellij.util.io.HttpRequests.access$300(HttpRequests.java:61)
at com.intellij.util.io.HttpRequests$RequestImpl.getConnection(HttpRequests.java:389)
at com.intellij.util.io.HttpRequests.createErrorMessage(HttpRequests.java:232)
at com.intellij.util.io.HttpRequests$RequestImpl.saveToFile(HttpRequests.java:482)
at com.intellij.openapi.updateSettings.impl.PluginDownloader.lambda$downloadPlugin$1(PluginDownloader.java:237)
at com.intellij.util.io.HttpRequests.doProcess(HttpRequests.java:537)
at com.intellij.util.io.HttpRequests.process(HttpRequests.java:513)
at com.intellij.util.io.HttpRequests.access$100(HttpRequests.java:61)
at com.intellij.util.io.HttpRequests$RequestBuilderImpl.connect(HttpRequests.java:363)
at com.intellij.openapi.updateSettings.impl.PluginDownloader.downloadPlugin(PluginDownloader.java:236)
at com.intellij.openapi.updateSettings.impl.PluginDownloader.prepareToInstall(PluginDownloader.java:134)
at com.intellij.ide.plugins.PluginInstaller.prepareToInstall(PluginInstaller.java:225)
at com.intellij.ide.plugins.PluginInstaller.prepareToInstall(PluginInstaller.java:113)
at com.intellij.ide.plugins.PluginInstaller.prepareToInstall(PluginInstaller.java:52)
at com.intellij.ide.plugins.newui.MyPluginModel.lambda$installPlugin$3(MyPluginModel.java:177)
at com.intellij.openapi.application.impl.ApplicationImpl$1.run(ApplicationImpl.java:294)
at java.base/java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:515)
at java.base/java.util.concurrent.FutureTask.run(FutureTask.java:264)
at java.base/java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1128)
at java.base/java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:628)
at java.base/java.lang.Thread.run(Thread.java:834)}

)
2019-10-21 16:06:42,647 [ 311890] WARN - Settings.impl.PluginDownloader - Cannot download 'https://plugins.jetbrains.com/pluginManager/?action=download&id=Lombook%20Plugin&build=IU-192.6817.14&uuid=c49545e8-47c5-4163-9359-940b4cb9c3f8': Connection reset
java.io.IOException: Cannot download 'https://plugins.jetbrains.com/pluginManager/?action=download&id=Lombook%20Plugin&build=IU-192.6817.14&uuid=c49545e8-47c5-4163-9359-940b4cb9c3f8': Connection reset
at com.intellij.util.io.HttpRequests$RequestImpl.saveToFile(HttpRequests.java:482)
at com.intellij.openapi.updateSettings.impl.PluginDownloader.lambda$downloadPlugin$1(PluginDownloader.java:237)
at com.intellij.util.io.HttpRequests.doProcess(HttpRequests.java:537)
at com.intellij.util.io.HttpRequests.process(HttpRequests.java:513)
at com.intellij.util.io.HttpRequests.access$100(HttpRequests.java:61)
at com.intellij.util.io.HttpRequests$RequestBuilderImpl.connect(HttpRequests.java:363)
at com.intellij.openapi.updateSettings.impl.PluginDownloader.downloadPlugin(PluginDownloader.java:236)
at com.intellij.openapi.updateSettings.impl.PluginDownloader.prepareToInstall(PluginDownloader.java:134)
at com.intellij.ide.plugins.PluginInstaller.prepareToInstall(PluginInstaller.java:225)
at com.intellij.ide.plugins.PluginInstaller.prepareToInstall(PluginInstaller.java:113)
at com.intellij.ide.plugins.PluginInstaller.prepareToInstall(PluginInstaller.java:52)
at com.intellij.ide.plugins.newui.MyPluginModel.lambda$installPlugin$3(MyPluginModel.java:177)
at com.intellij.openapi.application.impl.ApplicationImpl$1.run(ApplicationImpl.java:294)
at java.base/java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:515)
at java.base/java.util.concurrent.FutureTask.run(FutureTask.java:264)
at java.base/java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1128)
at java.base/java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:628)
at java.base/java.lang.Thread.run(Thread.java:834)
Caused by: java.net.SocketException: Connection reset
at java.base/java.net.SocketInputStream.read(SocketInputStream.java:186)
at java.base/java.net.SocketInputStream.read(SocketInputStream.java:140)
at java.base/java.io.BufferedInputStream.fill(BufferedInputStream.java:252)
at java.base/java.io.BufferedInputStream.read1(BufferedInputStream.java:292)
at java.base/java.io.BufferedInputStream.read(BufferedInputStream.java:351)
at java.base/sun.net.www.http.HttpClient.parseHTTPHeader(HttpClient.java:746)
at java.base/sun.net.www.http.HttpClient.parseHTTP(HttpClient.java:689)
at java.base/sun.net.www.protocol.http.HttpURLConnection.doTunneling(HttpURLConnection.java:2080)
at java.base/sun.net.www.protocol.https.AbstractDelegateHttpsURLConnection.connect(AbstractDelegateHttpsURLConnection.java:183)
at java.base/sun.net.www.protocol.http.HttpURLConnection.followRedirect0(HttpURLConnection.java:2774)
at java.base/sun.net.www.protocol.http.HttpURLConnection.followRedirect(HttpURLConnection.java:2686)
at java.base/sun.net.www.protocol.http.HttpURLConnection.getInputStream0(HttpURLConnection.java:1849)
at java.base/sun.net.www.protocol.http.HttpURLConnection.getInputStream(HttpURLConnection.java:1515)
at java.base/sun.net.www.protocol.https.HttpsURLConnectionImpl.getInputStream(HttpsURLConnectionImpl.java:250)
at com.coverity.truststore.url.HttpsTrustStoreUrlConnection.getInputStream(HttpsTrustStoreUrlConnection.java:124)
at java.base/java.net.HttpURLConnection.getResponseCode(HttpURLConnection.java:527)
at com.intellij.util.io.HttpRequests.openConnection(HttpRequests.java:626)
at com.intellij.util.io.HttpRequests.access$300(HttpRequests.java:61)
at com.intellij.util.io.HttpRequests$RequestImpl.getConnection(HttpRequests.java:389)
at com.intellij.util.io.HttpRequests$RequestImpl.getInputStream(HttpRequests.java:398)
at com.intellij.util.io.HttpRequests$RequestImpl.saveToFile(HttpRequests.java:475)
... 17 more

It's the same keystore for everything. I'd contact your network administrators for help so that they can check why the connection is getting reset.