GitHub Copilot behind a Proxy with a self-signed certificate chain does still not work #35544
-
Hello, I try to use GitHub Copilot for IntelliJ behind a ZScaler Proxy with a self-signed certificate chain. Sadly, after hours of googling I found no solution/workaround which helped. The stacktrace I get in the IntelliJ-log is the following:
Finally, I am not able to activate the plugin and I find no way to use it for IntelliJ or related JetBrains products (including PyCharm, etc.). Some information:
Note: for VSCode, I do not have the problem using the win-ca extension. I want to develop with IntelliJ, not with VSCode. There seem to be other people also waiting for solutions:
Please, can you provide any solution for this and work on this important issue? |
Beta Was this translation helpful? Give feedback.
Replies: 21 comments 66 replies
-
@Fumapps Our copilot team is investigating this issue |
Beta Was this translation helpful? Give feedback.
-
@Fumapps The error message unable to get local issuer certificate means a proxy that uses self-signed certificates is being used. Unfortunately, self-signed certificates is something we currently don't support. Support for self-signed certificates is a known limitation in our current proxy support. We understand that there's a number of Copilot users that work in environments where this is a necessary requirement, that's why we have support for self-signed certificates on our radar and aim to implement the functionality in the future. We are unable to share a specific timeline for adding self-signed certificate support at this point in time. We'd recommend that you keep an eye on our official GitHub public product roadmap, our Changelog and our GitHub Blog for future updates. |
Beta Was this translation helpful? Give feedback.
-
Any update? |
Beta Was this translation helpful? Give feedback.
-
Even after update to 1.1.36.2164 which seems to "Allow users to accept non-trusted certificates" and enabling the option in Tools -> Server Certificates, the plugin is still unable to connect due to: |
Beta Was this translation helpful? Give feedback.
-
Updates on this? |
Beta Was this translation helpful? Give feedback.
-
I found a solution for this which works for me. I have blogged about it at https://sidd.io/2023/01/github-copilot-self-signed-cert-issue/ Fix is as follows :
|
Beta Was this translation helpful? Give feedback.
-
Still cannot find a solution for visual studio. cancelling my subscription until this is fixed. |
Beta Was this translation helpful? Give feedback.
-
Visual Studio Code. Why isn't there a flag to ignore certificate errors in copilot extension settings? Should be global in VS Code, but that's a Microsoft issue. This is such a ubiquitous problem, it should have a very simple and readily accessible solution. |
Beta Was this translation helpful? Give feedback.
-
For intellij and other jetbrains products, just import the certificate in |
Beta Was this translation helpful? Give feedback.
-
My system administrator has agreed to add the urls to the bypass SSL list. Does anyone have a complete list? I know at least this: Has anyone tried "CoPilot for business"? https://github.blog/2023-02-14-github-copilot-for-business-is-now-available/ |
Beta Was this translation helpful? Give feedback.
-
If you're familiar with Docker, there's a solution. There is a docker image of the famous Squid proxy that we are familiar with. And go to Jetbrains IDE such as IntelliJ, WebStorm, Pycharm, etc. and go to It works well in my environment (Windows 10, Under Zscaler 4.0.0.X, WebStorm 2023.1 Build #WS-231.8109.174, built on March 28, 2023). Enjoy. |
Beta Was this translation helpful? Give feedback.
-
I can't get this to work! Using IntelliJ IDEA 2021.3.2 (Ultimate Edition) with Github Copilot 1.2.6.2594 Set user level variable to (I do not have permission for system level on this corporate controlled windows 11 machine) These certificates have been downloaded as der files, and converted to pem by certutil.exe Github copilot login works fine, but when it tries to do any autocomplete, the status goes to logged out, with the following error in the log:
Anything else anyone can recommend to try? PS: Same error when I try with Visual Studio Code - Insiders |
Beta Was this translation helpful? Give feedback.
-
Adding my own 2cts, from my reply to another comment. And hoping githubers can help us ! Same here, i'm happy to provide more logs & info if needed.
When i run a curl (with my HTTP_PROXY, HTTPS_PROXY set), it works well and I get a json response with the current timestamp and an ok status.: When I run an openSSL command and craft an HTTP request in there, it works well and i get the same answer (timestamp changed of course)
I'm using IntelliJ Again, I'd be glad to help ! So I don't think there's any issue with the proxy itself. Seems like an openssl+proxy handling from the plugin. |
Beta Was this translation helpful? Give feedback.
-
See this conversaiton: https://stackoverflow.com/questions/71367058/self-signed-certificate-in-certificate-chain-on-github-copilot?newreg=86e63ae2f702484ba8520c8161c6d4a2 |
Beta Was this translation helpful? Give feedback.
-
Ok, I finally found a workaround.
Working like a charm now |
Beta Was this translation helpful? Give feedback.
-
reference this url |
Beta Was this translation helpful? Give feedback.
-
none of the above workarounds has worked for me so far besides the spinning up a docker squid container as proxy server. |
Beta Was this translation helpful? Give feedback.
-
Frustrating. Anyone using Pycharm 2023.2.1 working? |
Beta Was this translation helpful? Give feedback.
-
i'm running IntelliJ behind Zscaler.. and it works after steps below.
|
Beta Was this translation helpful? Give feedback.
-
When using VDI, I encountered a self-signed certificate issue (I find VDI environments similar to internal corporate VPNs). My development environment is Windows 11 (VDI) with IntelliJ IDEA 2024. I resolved it by following these steps:
Now your GitHub Copilot should work. |
Beta Was this translation helpful? Give feedback.
-
yeah that worked for me besides that I had to add my certificate via terminal. |
Beta Was this translation helpful? Give feedback.
I found a solution for this which works for me. I have blogged about it at https://sidd.io/2023/01/github-copilot-self-signed-cert-issue/
Fix is as follows :
.pem
format if not already.pem
cert toNODE_EXTRA_CA_CERTS
variable