#678 not fixed

[reza25305]

The problem was not fixed same thing

[therealaleph]

@reza25305 — sorry to hear it's still failing. The "import via Settings → Tools → Server Certificates" path can be unreliable for some IntelliJ versions — the cert ends up trusted by IntelliJ's HTTP layer but not by the bundled JBR's cacerts keystore that Maven and Gradle wrappers use.

Try this more direct path (works on every IntelliJ version):

1. Find the JBR (JetBrains Runtime) IntelliJ is using:

   • Settings → Build, Execution, Deployment → Build Tools → Gradle → Gradle JVM
   • Note the path (e.g. /Users/you/Library/Application Support/JetBrains/Toolbox/apps/IDEA-U/.../jbr/Contents/Home)

2. Find the cacerts file:

   find <jbr-path> -name cacerts

   Usually at <jbr-path>/lib/security/cacerts (default password: changeit)

3. Import the mhrv-rs CA into it:

   # macOS
   sudo keytool -importcert \
     -file ~/Library/Application\ Support/mhrv-rs/ca/ca.crt \
     -alias mhrv-rs \
     -keystore <jbr-path>/lib/security/cacerts \
     -storepass changeit -noprompt
   
   # Windows (PowerShell as Administrator):
   keytool -importcert `
     -file "$env:APPDATA\mhrv-rs\ca\ca.crt" `
     -alias mhrv-rs `
     -keystore "<jbr-path>\lib\security\cacerts" `
     -storepass changeit -noprompt
   
   # Linux
   sudo keytool -importcert \
     -file ~/.config/mhrv-rs/ca/ca.crt \
     -alias mhrv-rs \
     -keystore <jbr-path>/lib/security/cacerts \
     -storepass changeit -noprompt

4. Restart IntelliJ (the cacerts is loaded at JVM startup).

5. Also configure the IntelliJ proxy: Settings → Appearance & Behavior → System Settings → HTTP Proxy → Manual proxy → Host: 127.0.0.1, Port: 8085.

6. For Gradle wrappers specifically, also add to gradle.properties (project-level, NOT global ~/.gradle/gradle.properties):

   systemProp.http.proxyHost=127.0.0.1
   systemProp.http.proxyPort=8085
   systemProp.https.proxyHost=127.0.0.1
   systemProp.https.proxyPort=8085
   

If after this Gradle still fails with unable to find valid certification path, the JBR detected a different keystore than expected. Run with verbose mode:

./gradlew --stacktrace -Djavax.net.debug=ssl,handshake build 2>&1 | head -100

The output shows which keystore it tried to load. Add the cert there with the same keytool -importcert command.

می‌بندم #714 و #678 رو reopen می‌کنم چون path‌های قبلی کار نکردن. اگه بعد از این روش direct-keystore هم gradle بهت unable to find valid cert path می‌ده، خروجی --stacktrace -Djavax.net.debug=ssl رو paste کن.

---

_{[reply via Anthropic Claude | reviewed by @therealaleph]}