[JetBrains] IntelliJ Certificate problems

Checklist

• I'm using the latest version of the extension (see the latest version in the right column of this page)
  • Extension version: Duo 2.9.0
• Version of JetBrains IDE I'm using:
  • JetBrains IDE Version: Rider & Webstorm
  • JetBrains IDE: Webstorm 2024.1.5
• I'm using a supported version of GitLab (see README for the supported version)
  • GitLab version: Ultimate Dotcom subscription

Summary

Ultimate Dotcom customer who owns Duo Pro licensing is unable to use IntelliJ

Rider

• Rider plugin for Duo is not taking the proxy config when it attempts to contact the server for autofill
• We can prove this out by ensuring our environment variables are set in a terminal and then opening the IDE from within the terminal - then the plugin accepts the terminal's environment variables and has no conflicts
• Updating the plugin in Rider, even launching from terminal is now broken
• The same errors as WebStorm

Webstorm

• Trying to use GitLab Duo within JetBrains WebStorm is completely broken
• The "Verify setup" button in the settings throws an error (even launching from the terminal doesn't resolve it)

Steps to reproduce

What is the current bug behavior?

What is the expected correct behavior?

Relevant logs and/or screenshots

I have put in a request for customer's idea.log and variables mentioned in Summary:Rider

Possible fixes

added Category:Editor Extensions Editor ExtensionsJetBrains devopscreate groupeditor extensions typebug labels

added sectiondev label

cc @dashaadu @jgdoyon1 @bohdanpk

changed the description

cc @sbailey1

changed the description

assigned to @jgdoyon1

assigned to @bohdanpk

Updates from customer:

• Environment variables, it’s the http_proxy, https_proxy, and no_proxy variables (although I don’t think the no_proxy is relevant here).

• “Ignore certificate errors” seemed to have gotten reset from the plugin update. Selecting that allows Duo Code Suggestions to work when I launch from the terminal but does not work when I launch normally.

01-08-2024 Update

We are able to reproduce the bug and are making progress on a resolution. We have opened a draft merge request with and in-progress fix. We are still investigating the language server issues due to certificates.

cc: @kkwentus1 @bohdanpk @erran @kisha.mavryck

Hi all, I'm the user who originally devised the "launch from the terminal" workaround. I want to add that I never needed to utilize "Ignore Certificate Errors" to get completions running.

My working theory was that during startup, there is call made that is not honoring the global proxy settings, and that by getting these environment variables into Rider's environment, they would make it to any spawned process.

I did come up with a different solution that also works:

1. disable proxy settings in Rider
2. quit Rider
3. disconnect from VPN
4. start Rider, select a project
5. reenable proxy settings
6. connect to VPN

And completions will continue to function until Rider is exits.

Thanks!

assigned to @erran

It sounds like we are going to have more information available soon and the process will be smoother, but in the interim I wanted to share one approach that was confirmed by one of my customers to get Code Suggestions working in IntelliJ IDEA:

(1) Install the GitLab Duo plugin into IntelliJ (version 2024.1 in this particular instance). (2) Choose "Ignore Certificate Errors." (3) Restart their computer (Windows in this instance).

05-08-2024 Update

We have resolved the issue on the JetBrains side in this merge request. The issue was that some trusted certificates at the OS level were not included by default to our store. Meaning that the plugin could not confirm that the certificate was trusted and therefore would reject the request.

We are investigating if the language server (responsible for code suggestions) has the same issue as well.

mentioned in issue gitlab-org/quality/quality-engineering/team-tasks#2933

changed milestone to %17.3

changed title from IntelliJ Certificate problems to [JetBrains] IntelliJ Certificate problems