Every time I start IDEA, I get an "expired certificate" error
Answered
Whenever I start IDEA and load my main project, I get an error that an HTTPS certificate is expired, and I have to allow it or reject it. It is one of our internal certificates, but I have no way of knowing which URL was causing the error, as the dialog does not specify this. I also have no idea where to even look besides my git remotes, which can't be the problem since I'm using SSH for that anyhow, and even if I were using https, the certificate on the git server has already been updated with the new certificate.
Where else could I look to try and find out what the url may be?
Please sign in to leave a comment.
I should note that the certificate is for a wildcard domain, so I can't use the CN to determine what server it is.
>Where else could I look to try and find out what the url may be?
It is likely any https URL that IDE is trying to reach. For example on startup it checks IDE updates at https://www.jetbrains.com or plugin updates at https://plugins.jetbrains.com/ but the proxy server in your local network intercepts the remote certificates from these sites and substitutes it with its own certificate.
You can try to accept and import this certificate into IDE trust store.
Please note that some actions (like Maven/Gradle project importing or other external process that IDE launches could require this certificate imported into the java trust store for the JDK which is used to run such process.