Untrusted Certificate Warning

With all the Superfish nonsense going on, this made me a little nervous:



OS/X Yosemite.   Why isn't the Thawte CA cert in my list?   I ended up rejecting it.

0

What was the message exactly? Can you provide the screenshot?

0
Avatar
Permanently deleted user

Second time I've posted the image.   Don't know why it was deleted before...  hmm, seems cut & paste of images doesn't really work:




Attachment(s):
Screen Shot 2015-03-02 at 10.35.27 AM.png
0

Old Thread, but I've that issue too. Our Servers wildcard certificate has been renewed, but PHPStorm still show up the old, meanwhile expired certificate. How can I cleanup the cache? The message pops up every time the project is opened.

0

It's not that PhpStorm is using an old certificate, it's the old certificate still being used somewhere in your infrastructure & PhpStorm warns you about this, receiving the certificate.

How long ago did you renew the certificate? It might take some time for them to propagate properly.

0

The wildcard-cert was valid until 30.06.22, but has been renewed/replaced on all servers on 02.06.22. PhpStrom started with the dialog after 30.06. .... sounds like some of our servers still use an old certificate (what I do not really believe). Any way to trace which server PhPStorm is trying to connect during "project open"?

0

[SOLVED - for me]

The server hosting one of our Git repositories still had a - currently unused - web server running. And indeed, this web server still had the outdated Wirldcard certificate installed. Possibly PhpStorm also checks port 80 or 443 when accessing the git repository and thus gets the certificate. The server itself was not used for deployments, except for Git. In this respect, PhpStorm "should" not actually access port 443 at all.

1

You can check the list of remotes with git remote -v - perhaps there's https repo?

0

No https, we use ssh: remotes.

0

Then it's probably something different than git remotes. Perhaps a deployment server at File | Settings | Build, Execution, Deployment | Deployment?

0

Sorry, we don't have any "deployment servers".

0

Please open Help > Diagnostic Tools > Debug Log Settings... and add following lines:

#com.intellij.util.net.ssl.CertificateManager
#com.intellij.util.net.ssl.ConfirmingTrustManager

Reproduce the issue, run Help > Collect Logs and Diagnostic Data and share resulting archive. You can upload it to https://uploads.jetbrains.com/ - only JetBrains staff can browse its contents

0

Thanks for your support, I'll upload the archive in a few minutes. Just to let you know, I've picked up an old wildcard Cert from a completely different domain and installed it on that Git-Server ... and the Popup starts as soon as I open a project.

0

Upload id: 2022_07_14_2B1QdwaL4ZLhY8fsyY79Y6 (file: phpstorm-logs-20220714-16445517579670877819810940.zip)

0

Thanks. Sadly this didn't reveal what exactly was making this request. But I can see from another thread that IDE could send a request to check if the remote host is a Github Enterprise server.  Looks like that's our case: https://youtrack.jetbrains.com/issue/IDEA-277010/Unknown-certificate-popup-on-project-opening-due-to-IDEA-wrongly-attempting-to-contact-GitHub-API-for-non-github-projects#focus=Comments-27-5160211.0-0

1

请先登录再写评论。