Intellij - Illuminated cloud connection error

[세포개발]

Intellij tries to access the Salesforce environment through the Illuminated cloud2 plugin, but an error occurs. How can I fix it?

[LOG]

2021-05-13 09:25:45,920 [ 685085]   WARN - cloud.client.ForceComApiClient - Login failed for connection 'New Connection': Could not send Message. 

2021-05-13 09:25:55,202 [ 694367]   WARN - .AbstractProgressIndicatorBase - This progress indicator is indeterminate, this may lead to visual inconsistency. Please call setIndeterminate(false) before you start progress.

com.illuminatedcloud.intellij.settings.application.IlluminatedCloudApplicationConnectionsTab$19.run(SourceFile:1444) 

2021-05-13 09:25:55,203 [ 694368]   INFO - y.ReflectionServiceFactoryBean - Creating Service {urn:partner.soap.sforce.com}PartnerService from class com.sforce.soap.partner.PartnerApi 

2021-05-13 09:25:55,429 [ 694594]   WARN - xf.phase.PhaseInterceptorChain - Interceptor for {urn:partner.soap.sforce.com}PartnerService#{urn:partner.soap.sforce.com}login has thrown exception, unwinding now 

org.apache.cxf.interceptor.Fault: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target

at org.apache.cxf.interceptor.AbstractOutDatabindingInterceptor.writeParts(AbstractOutDatabindingInterceptor.java:109)

at org.apache.cxf.wsdl.interceptors.BareOutInterceptor.handleMessage(BareOutInterceptor.java:68)

at org.apache.cxf.phase.PhaseInterceptorChain.doIntercept(PhaseInterceptorChain.java:308)

at org.apache.cxf.endpoint.ClientImpl.doInvoke(ClientImpl.java:531)

at org.apache.cxf.endpoint.ClientImpl.invoke(ClientImpl.java:440)

at org.apache.cxf.endpoint.ClientImpl.invoke(ClientImpl.java:355)

at org.apache.cxf.endpoint.ClientImpl.invoke(ClientImpl.java:313)

at org.apache.cxf.frontend.ClientProxy.invokeSync(ClientProxy.java:96)

at org.apache.cxf.jaxws.JaxWsClientProxy.invoke(JaxWsClientProxy.java:140)

at com.sun.proxy.$Proxy231.login(Unknown Source)

at com.illuminatedcloud.client.ForceComApiClient.doLoginWithCredentials(SourceFile:829)

at com.illuminatedcloud.client.ForceComApiClient.lambda$testLogin$10(SourceFile:1147)

at com.illuminatedcloud.client.ForceComApiClient.runWithClientClassLoader(SourceFile:681)

at com.illuminatedcloud.client.ForceComApiClient.testLogin(SourceFile:1144)

at com.illuminatedcloud.intellij.settings.application.IlluminatedCloudApplicationConnectionsTab$19.run(SourceFile:1447)

at com.intellij.openapi.progress.impl.CoreProgressManager$TaskRunnable.run(CoreProgressManager.java:998)

at com.intellij.openapi.progress.impl.CoreProgressManager$4.run(CoreProgressManager.java:545)

at com.intellij.openapi.progress.impl.ProgressRunner.lambda$new$0(ProgressRunner.java:78)

at com.intellij.openapi.progress.impl.ProgressRunner.lambda$submit$3(ProgressRunner.java:228)

at com.intellij.openapi.progress.impl.CoreProgressManager.lambda$runProcess$2(CoreProgressManager.java:178)

at com.intellij.openapi.progress.impl.CoreProgressManager.registerIndicatorAndRun(CoreProgressManager.java:688)

at com.intellij.openapi.progress.impl.CoreProgressManager.executeProcessUnderProgress(CoreProgressManager.java:634)

at com.intellij.openapi.progress.impl.ProgressManagerImpl.executeProcessUnderProgress(ProgressManagerImpl.java:64)

at com.intellij.openapi.progress.impl.CoreProgressManager.runProcess(CoreProgressManager.java:165)

at com.intellij.openapi.progress.impl.ProgressRunner.lambda$submit$4(ProgressRunner.java:228)

at java.base/java.util.concurrent.CompletableFuture$AsyncSupply.run(CompletableFuture.java:1700)

at java.base/java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1128)

at java.base/java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:628)

at java.base/java.util.concurrent.Executors$PrivilegedThreadFactory$1$1.run(Executors.java:668)

at java.base/java.util.concurrent.Executors$PrivilegedThreadFactory$1$1.run(Executors.java:665)

at java.base/java.security.AccessController.doPrivileged(Native Method)

at java.base/java.util.concurrent.Executors$PrivilegedThreadFactory$1.run(Executors.java:665)

at java.base/java.lang.Thread.run(Thread.java:834)

Caused by: com.ctc.wstx.exc.WstxIOException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target

at com.ctc.wstx.sw.BaseStreamWriter.flush(BaseStreamWriter.java:262)

at org.apache.cxf.interceptor.AbstractOutDatabindingInterceptor.writeParts(AbstractOutDatabindingInterceptor.java:107)

... 32 more

Caused by: javax.net.ssl.SSLHandshakeException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target

at java.base/sun.security.ssl.Alert.createSSLException(Alert.java:131)

at java.base/sun.security.ssl.TransportContext.fatal(TransportContext.java:349)

at java.base/sun.security.ssl.TransportContext.fatal(TransportContext.java:292)

at java.base/sun.security.ssl.TransportContext.fatal(TransportContext.java:287)

at java.base/sun.security.ssl.CertificateMessage$T12CertificateConsumer.checkServerCerts(CertificateMessage.java:654)

at java.base/sun.security.ssl.CertificateMessage$T12CertificateConsumer.onCertificate(CertificateMessage.java:473)

at java.base/sun.security.ssl.CertificateMessage$T12CertificateConsumer.consume(CertificateMessage.java:369)

at java.base/sun.security.ssl.SSLHandshake.consume(SSLHandshake.java:392)

at java.base/sun.security.ssl.HandshakeContext.dispatch(HandshakeContext.java:443)

at java.base/sun.security.ssl.HandshakeContext.dispatch(HandshakeContext.java:421)

at java.base/sun.security.ssl.TransportContext.dispatch(TransportContext.java:182)

at java.base/sun.security.ssl.SSLTransport.decode(SSLTransport.java:171)

at java.base/sun.security.ssl.SSLSocketImpl.decode(SSLSocketImpl.java:1409)

at java.base/sun.security.ssl.SSLSocketImpl.readHandshakeRecord(SSLSocketImpl.java:1315)

at java.base/sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:440)

at java.base/sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:411)

at java.base/sun.net.www.protocol.https.HttpsClient.afterConnect(HttpsClient.java:567)

at java.base/sun.net.www.protocol.https.AbstractDelegateHttpsURLConnection.connect(AbstractDelegateHttpsURLConnection.java:197)

at java.base/sun.net.www.protocol.http.HttpURLConnection.getOutputStream0(HttpURLConnection.java:1367)

at java.base/sun.net.www.protocol.http.HttpURLConnection.getOutputStream(HttpURLConnection.java:1342)

at java.base/sun.net.www.protocol.https.HttpsURLConnectionImpl.getOutputStream(HttpsURLConnectionImpl.java:246)

at org.apache.cxf.transport.http.URLConnectionHTTPConduit$URLConnectionWrappedOutputStream.setupWrappedStream(URLConnectionHTTPConduit.java:274)

at org.apache.cxf.transport.http.HTTPConduit$WrappedOutputStream.handleHeadersTrustCaching(HTTPConduit.java:1345)

at org.apache.cxf.transport.http.HTTPConduit$WrappedOutputStream.onFirstWrite(HTTPConduit.java:1306)

at org.apache.cxf.transport.http.URLConnectionHTTPConduit$URLConnectionWrappedOutputStream.onFirstWrite(URLConnectionHTTPConduit.java:307)

at org.apache.cxf.io.AbstractWrappedOutputStream.write(AbstractWrappedOutputStream.java:47)

at org.apache.cxf.io.AbstractThresholdOutputStream.write(AbstractThresholdOutputStream.java:69)

at com.ctc.wstx.io.UTF8Writer.flush(UTF8Writer.java:100)

at com.ctc.wstx.sw.BufferingXmlWriter.flush(BufferingXmlWriter.java:242)

at com.ctc.wstx.sw.BaseStreamWriter.flush(BaseStreamWriter.java:260)

... 33 more

Caused by: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target

at java.base/sun.security.validator.PKIXValidator.doBuild(PKIXValidator.java:439)

at java.base/sun.security.validator.PKIXValidator.engineValidate(PKIXValidator.java:306)

at java.base/sun.security.validator.Validator.validate(Validator.java:264)

at java.base/sun.security.ssl.X509TrustManagerImpl.validate(X509TrustManagerImpl.java:313)

at java.base/sun.security.ssl.X509TrustManagerImpl.checkTrusted(X509TrustManagerImpl.java:222)

at java.base/sun.security.ssl.X509TrustManagerImpl.checkServerTrusted(X509TrustManagerImpl.java:129)

at java.base/sun.security.ssl.CertificateMessage$T12CertificateConsumer.checkServerCerts(CertificateMessage.java:638)

... 58 more

Caused by: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target

at java.base/sun.security.provider.certpath.SunCertPathBuilder.build(SunCertPathBuilder.java:141)

at java.base/sun.security.provider.certpath.SunCertPathBuilder.engineBuild(SunCertPathBuilder.java:126)

at java.base/java.security.cert.CertPathBuilder.build(CertPathBuilder.java:297)

at java.base/sun.security.validator.PKIXValidator.doBuild(PKIXValidator.java:434)

... 64 more

2021-05-13 09:25:55,434 [ 694599]   WARN - cloud.client.ForceComApiClient - Login failed for connection 'New Connection': org.apache.cxf.interceptor.Fault: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target 

2021-05-13 09:33:11,422 [1130587]   WARN - tions.ex.ConfigurableCardPanel - auto-dispose 'Illuminated Cloud' id=IlluminatedCloud 

2021-05-13 09:33:17,218 [1136383]   INFO - j.ide.actions.RevealFileAction - Exit code 1 

2021-05-13 09:33:18,081 [1137246]   INFO - rationStore.ComponentStoreImpl - Saving appGeneralSettings took 11 ms 

2021-05-13 09:34:27,000 [1206165]   INFO - ellij.license.LicenseValidator - Server license validation result was NotGenuine. 

[Scott]

Some intermediate proxy or firewall on your network is performing SSL certificate substitution. You can configured the IDE to accept these substitute certificates:

https://bitbucket.org/RoseSilverSoftware/illuminatedcloud/wiki/User_Guide/Configuring_the_IDE_to_Accept_Substitute_SSL_Certificates

If possible you should do so in the IDE proper, but in certain rare situations when that's not possible, you may need to import the certificates into the host JRE's keystore. There's a link for how to do that in the user guide topic above.

I hope that helps.

Regards,

Scott Wells

[세포개발]

Thanks.

But, there is another problem 

Invalid configuration for module 'LS ELECTRIC(Sandbox)'

Module 'LS ELECTRIC(Sandbox)': The following must be configured properly:

module must have a generated offline symbol table

module must use an Illuminated Cloud SDK

Full resolution of these items may require multiple steps.

The module cannot be configured.

2021년 5월 13일 목요일 오전 9시 43분 37초 UTC+9에 Scott님이 작성:

[세포개발]

error : unable to find valid certification path to requested target

2021년 5월 13일 목요일 오전 9시 43분 37초 UTC+9에 Scott님이 작성:

Some intermediate proxy or firewall on your network is performing SSL certificate substitution. You can configured the IDE to accept these substitute certificates:

[Scott]

Hi. You won't be able to solve those module configuration issues until you have network access because offline symbol table generation requires that the IDE be able to communicate with the Salesforce servers. Once the network issues are addressed, you can try using the Resolve link in that notification to wire the module/project together properly.

Regards,

Scott Wells

[세포개발]

I tried several times(resolve), but I can't fix it.

Are there any other options?

Thanks.

[LOG]

2021-05-13 10:36:00,597 [4899762]   INFO - ct.OfflineSymbolTableGenerator - Starting activity Loading installed package namespaces with 1 steps. 

2021-05-13 10:36:00,597 [4899762]   WARN - .AbstractProgressIndicatorBase - This progress indicator is indeterminate, this may lead to visual inconsistency. Please call setIndeterminate(false) before you start progress.

com.illuminatedcloud.intellij.settings.project.OfflineSymbolTableGenerator$OfflineSymbolGenerationProgressListener.activityStarted(SourceFile:342) 

2021-05-13 10:36:01,201 [4900366]   INFO - ct.OfflineSymbolTableGenerator - Completed activity Loading installed package namespaces in 604 ms. 

2021-05-13 10:36:01,201 [4900366]   INFO - ct.OfflineSymbolTableGenerator - Starting activity Initializing local symbols with 1 steps. 

2021-05-13 10:36:01,203 [4900368]   WARN - .AbstractProgressIndicatorBase - This progress indicator is indeterminate, this may lead to visual inconsistency. Please call setIndeterminate(false) before you start progress.

com.illuminatedcloud.intellij.settings.project.OfflineSymbolTableGenerator$OfflineSymbolGenerationProgressListener.activityStepCompleted(SourceFile:406) 

2021-05-13 10:36:01,203 [4900368]   INFO - ct.OfflineSymbolTableGenerator - Completed activity Initializing local symbols in 2 ms. 

2021-05-13 10:36:01,203 [4900368]   INFO - ct.OfflineSymbolTableGenerator - Starting activity Loading system classes with 1 steps. 

2021-05-13 10:36:01,203 [4900368]   WARN - .AbstractProgressIndicatorBase - This progress indicator is indeterminate, this may lead to visual inconsistency. Please call setIndeterminate(false) before you start progress.

com.illuminatedcloud.intellij.settings.project.OfflineSymbolTableGenerator$OfflineSymbolGenerationProgressListener.activityStarted(SourceFile:342) 

2021-05-13 10:36:01,535 [4900700]   INFO - ct.OfflineSymbolTableGenerator - Completed activity Loading system classes in 332 ms. 

2021-05-13 10:36:01,536 [4900701]   WARN - .IlluminatedCloudExceptionUtil - PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target 

javax.net.ssl.SSLHandshakeException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target

at java.base/sun.security.ssl.Alert.createSSLException(Alert.java:131)

at java.base/sun.security.ssl.TransportContext.fatal(TransportContext.java:349)

at java.base/sun.security.ssl.TransportContext.fatal(TransportContext.java:292)

at java.base/sun.security.ssl.TransportContext.fatal(TransportContext.java:287)

at java.base/sun.security.ssl.CertificateMessage$T12CertificateConsumer.checkServerCerts(CertificateMessage.java:654)

at java.base/sun.security.ssl.CertificateMessage$T12CertificateConsumer.onCertificate(CertificateMessage.java:473)

at java.base/sun.security.ssl.CertificateMessage$T12CertificateConsumer.consume(CertificateMessage.java:369)

at java.base/sun.security.ssl.SSLHandshake.consume(SSLHandshake.java:392)

at java.base/sun.security.ssl.HandshakeContext.dispatch(HandshakeContext.java:443)

at java.base/sun.security.ssl.HandshakeContext.dispatch(HandshakeContext.java:421)

at java.base/sun.security.ssl.TransportContext.dispatch(TransportContext.java:182)

at java.base/sun.security.ssl.SSLTransport.decode(SSLTransport.java:171)

at java.base/sun.security.ssl.SSLSocketImpl.decode(SSLSocketImpl.java:1409)

at java.base/sun.security.ssl.SSLSocketImpl.readHandshakeRecord(SSLSocketImpl.java:1315)

at java.base/sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:440)

at java.base/sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:411)

at org.apache.http.conn.ssl.SSLConnectionSocketFactory.createLayeredSocket(SSLConnectionSocketFactory.java:436)

at org.apache.http.conn.ssl.SSLConnectionSocketFactory.connectSocket(SSLConnectionSocketFactory.java:384)

at org.apache.http.impl.conn.DefaultHttpClientConnectionOperator.connect(DefaultHttpClientConnectionOperator.java:142)

at org.apache.http.impl.conn.PoolingHttpClientConnectionManager.connect(PoolingHttpClientConnectionManager.java:376)

at org.apache.http.impl.execchain.MainClientExec.establishRoute(MainClientExec.java:393)

at org.apache.http.impl.execchain.MainClientExec.execute(MainClientExec.java:236)

at org.apache.http.impl.execchain.ProtocolExec.execute(ProtocolExec.java:186)

at org.apache.http.impl.execchain.RetryExec.execute(RetryExec.java:89)

at org.apache.http.impl.execchain.RedirectExec.execute(RedirectExec.java:110)

at org.apache.http.impl.client.InternalHttpClient.doExecute(InternalHttpClient.java:185)

at org.apache.http.impl.client.CloseableHttpClient.execute(CloseableHttpClient.java:83)

at org.apache.http.impl.client.CloseableHttpClient.execute(CloseableHttpClient.java:108)

at com.illuminatedcloud.client.ForceComApiClient.runWithClient(SourceFile:547)

at com.illuminatedcloud.client.ForceComApiClient.runWithClientSimple(SourceFile:616)

at com.illuminatedcloud.client.ForceComApiClient.runWithClientSimple(SourceFile:643)

at com.illuminatedcloud.symtab.OfflineSymbolTable.downloadSystemSymbols(SourceFile:4426)

at com.illuminatedcloud.symtab.OfflineSymbolTable.runActivity(SourceFile:711)

at com.illuminatedcloud.symtab.OfflineSymbolTable.runActivity(SourceFile:743)

at com.illuminatedcloud.symtab.OfflineSymbolTable.loadSystemClasses(SourceFile:3367)

at com.illuminatedcloud.symtab.OfflineSymbolTable.generateOfflineSymbolTable(SourceFile:858)

at com.illuminatedcloud.intellij.settings.project.OfflineSymbolTableGenerator$2.run(SourceFile:224)

at com.intellij.openapi.progress.impl.CoreProgressManager$TaskRunnable.run(CoreProgressManager.java:998)

at com.intellij.openapi.progress.impl.CoreProgressManager.lambda$runProcessWithProgressAsync$5(CoreProgressManager.java:497)

at com.intellij.openapi.progress.impl.ProgressRunner.lambda$submit$3(ProgressRunner.java:228)

at com.intellij.openapi.progress.impl.CoreProgressManager.lambda$runProcess$2(CoreProgressManager.java:178)

at com.intellij.openapi.progress.impl.CoreProgressManager.registerIndicatorAndRun(CoreProgressManager.java:688)

at com.intellij.openapi.progress.impl.CoreProgressManager.executeProcessUnderProgress(CoreProgressManager.java:634)

at com.intellij.openapi.progress.impl.ProgressManagerImpl.executeProcessUnderProgress(ProgressManagerImpl.java:64)

at com.intellij.openapi.progress.impl.CoreProgressManager.runProcess(CoreProgressManager.java:165)

at com.intellij.openapi.progress.impl.ProgressRunner.lambda$submit$4(ProgressRunner.java:228)

at java.base/java.util.concurrent.CompletableFuture$AsyncSupply.run(CompletableFuture.java:1700)

at java.base/java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1128)

at java.base/java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:628)

at java.base/java.util.concurrent.Executors$PrivilegedThreadFactory$1$1.run(Executors.java:668)

at java.base/java.util.concurrent.Executors$PrivilegedThreadFactory$1$1.run(Executors.java:665)

at java.base/java.security.AccessController.doPrivileged(Native Method)

at java.base/java.util.concurrent.Executors$PrivilegedThreadFactory$1.run(Executors.java:665)

at java.base/java.lang.Thread.run(Thread.java:834)

Caused by: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target

at java.base/sun.security.validator.PKIXValidator.doBuild(PKIXValidator.java:439)

at java.base/sun.security.validator.PKIXValidator.engineValidate(PKIXValidator.java:306)

at java.base/sun.security.validator.Validator.validate(Validator.java:264)

at java.base/sun.security.ssl.X509TrustManagerImpl.validate(X509TrustManagerImpl.java:313)

at java.base/sun.security.ssl.X509TrustManagerImpl.checkTrusted(X509TrustManagerImpl.java:222)

at java.base/sun.security.ssl.X509TrustManagerImpl.checkServerTrusted(X509TrustManagerImpl.java:129)

at java.base/sun.security.ssl.CertificateMessage$T12CertificateConsumer.checkServerCerts(CertificateMessage.java:638)

... 49 more

Caused by: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target

at java.base/sun.security.provider.certpath.SunCertPathBuilder.build(SunCertPathBuilder.java:141)

at java.base/sun.security.provider.certpath.SunCertPathBuilder.engineBuild(SunCertPathBuilder.java:126)

at java.base/java.security.cert.CertPathBuilder.build(CertPathBuilder.java:297)

at java.base/sun.security.validator.PKIXValidator.doBuild(PKIXValidator.java:434)

... 55 more

2021-05-13 10:36:02,996 [4902161]   INFO - g.FileBasedIndexProjectHandler - Reindexing refreshed files: 302 to update, calculated in 1ms 

2021-05-13 10:36:02,996 [4902161]   INFO - g.FileBasedIndexProjectHandler - Using 4 threads for indexing 

2021-05-13 10:36:03,677 [4902842]   INFO - .diagnostic.PerformanceWatcher - Reindexing refreshed files took 681ms; general responsiveness: ok; EDT responsiveness: ok 

2021-05-13 10:36:04,250 [4903415]   INFO - erver.followMe.FollowMeManager - Unregister user 0:'comsysa' with ClientId=ClientId(value=Host) 

2021-05-13 10:36:04,252 [4903417]   INFO - stubs.SerializationManagerImpl - Start shutting down Stubs/serializerNames/names 

2021-05-13 10:36:04,253 [4903418]   INFO - stubs.SerializationManagerImpl - Finished shutting down Stubs/serializerNames/names 

2021-05-13 10:36:04,385 [4903550]   INFO - BridgeProjectLifecycleListener - Using workspace model to open project 

2021-05-13 10:36:04,409 [4903574]   INFO - rojectCodeStyleSettingsManager - Initialized from default code style settings. 

2021-05-13 10:36:04,411 [4903576]   INFO - tests.impl.DistributedTestHost - Host address=localhost/127.0.0.1 

2021-05-13 10:36:04,411 [4903576]   INFO - lij.diagnostic.DebugLogManager - Set TRACE for the following categories: #com.jetbrains.rdserver.requests, #com.jetbrains.rd.ide.document, #com.jetbrains.rdserver.document, #com.jetbrains.rdserver.editors, #com.jetbrains.rdserver.actions 

2021-05-13 10:36:04,420 [4903585]   INFO - el.ide.impl.WorkspaceModelImpl - Load workspace model from cache in 8 ms 

2021-05-13 10:36:04,425 [4903590]   INFO - ins.rd.platform.codeWithMe.a.i - sessionStatus: null 

2021-05-13 10:36:04,425 [4903590]   INFO - ins.rd.platform.codeWithMe.a.i - freeSessionRemainingTimeMs: null null 

2021-05-13 10:36:04,464 [4903629]   INFO - al.NewToolbarRootPaneExtension - ToolbarSettingsService is ExperimentalToolbarSettings 

2021-05-13 10:36:04,464 [4903629]   INFO - al.NewToolbarRootPaneExtension - Show new toolbar: false, presentation mode: false 

2021-05-13 10:36:04,464 [4903629]   INFO - al.NewToolbarRootPaneExtension - Show old main toolbar: false, old navbar visible: true 

2021-05-13 10:36:04,482 [4903647]   INFO - al.NewToolbarRootPaneExtension - ToolbarSettingsService is ExperimentalToolbarSettings 

2021-05-13 10:36:04,482 [4903647]   INFO - al.NewToolbarRootPaneExtension - Show new toolbar: false, presentation mode: false 

2021-05-13 10:36:04,482 [4903647]   INFO - al.NewToolbarRootPaneExtension - Show old main toolbar: false, old navbar visible: true 

2021-05-13 10:36:04,637 [4903802]  DEBUG - BackendServerFileEditorManager - Opening host editor for C:/Users/comsysa/IdeaProjects/LS ELECTRIC(Sandbox)/src/aura/lacComBase/lacComBase.cmp 

2021-05-13 10:36:04,844 [4904009]  DEBUG - BackendServerFileEditorManager - Opening host editor for C:/Users/comsysa/IdeaProjects/LS ELECTRIC(Sandbox)/src/classes/ChangePasswordController.cls 

2021-05-13 10:36:05,011 [4904176]  DEBUG - BackendServerFileEditorManager - Opening host editor for C:/Users/comsysa/IdeaProjects/LS ELECTRIC(Sandbox)/src/classes/TestResult_tr.cls 

2021-05-13 10:36:05,339 [4904504]   INFO -              PerformancePlugin - Performance Plugin is in silent mode 

2021-05-13 10:36:05,342 [4904507]   INFO - .deployment.AsyncDevicesGetter - adb not found 

2021-05-13 10:36:05,510 [4904675]   WARN - openapi.wm.impl.ToolWindowImpl - ToolWindow icons should be 13x13. Please fix ToolWindow (ID:  Illuminated Cloud) or icon UrlResolver{ownerClass=null, classLoader=PluginClassLoader(plugin=PluginDescriptor(name=Illuminated Cloud 2, id=com.illuminatedcloud2.intellij, descriptorPath=plugin.xml, path=~\AppData\Roaming\JetBrains\IntelliJIdea2021.1\plugins\IlluminatedCloud2, version=2.1.7.5, package=null), packagePrefix=null, instanceId=199, state=active), overriddenPath='/images/IlluminatedCloudLogo_16x16.png', url=file:/unresolved, useCacheOnLoad=true} 

2021-05-13 10:36:05,512 [4904677]   WARN - openapi.wm.impl.ToolWindowImpl - ToolWindow icons should be 13x13. Please fix ToolWindow (ID:  Anonymous Apex) or icon RasterizedImageDataLoader(, classLoader=com.intellij.util.lang.PathClassLoader@35fb3008, path='debugger/console.svg') 

2021-05-13 10:36:05,514 [4904679]   WARN - openapi.wm.impl.ToolWindowImpl - ToolWindow icons should be 13x13. Please fix ToolWindow (ID:  SOQL Query) or icon RasterizedImageDataLoader(, classLoader=com.intellij.util.lang.PathClassLoader@35fb3008, path='nodes/dataSchema.svg') 

2021-05-13 10:36:05,516 [4904681]   WARN - openapi.wm.impl.ToolWindowImpl - ToolWindow icons should be 13x13. Please fix ToolWindow (ID:  Log Analyzer) or icon RasterizedImageDataLoader(, classLoader=com.intellij.util.lang.PathClassLoader@35fb3008, path='nodes/logFolder.svg') 

2021-05-13 10:36:05,604 [4904769]   INFO - erver.followMe.FollowMeManager - Register new user 0:'comsysa' with ClientId=ClientId(value=Host) 

2021-05-13 10:36:05,646 [4904811]   INFO - ion.DelayedProjectSynchronizer - Workspace model loaded from cache. Syncing real project state into workspace model in 307 ms. Thread[ApplicationImpl pooled thread 122,4,Idea Thread Group] 

2021-05-13 10:36:05,653 [4904818]   INFO - ge.ExternalProjectsDataStorage - Load external projects data in 1 millis (read time: 0) 

2021-05-13 10:36:05,653 [4904818]   INFO - oudConfig.StatusBarInfoManager - === StatusBar ignored === 

2021-05-13 10:36:05,761 [4904926]   INFO - redIndexChunkConfigurationImpl - Chunk bundled-js-predefined-ffdd448c697d-aacdcbe1a076-JavaScript-IU-211.7142.45 is registered for project 'LS ELECTRIC(Sandbox): matching: (fb=34, stub=75), incompatible: (fb=0, stub=0), unknown: (fb=9, stub=9),  

2021-05-13 10:36:05,762 [4904927]   INFO - SharedIndexPostStartupActivity - Attached 1 pre-built shared indexes: bundled-js-predefined-ffdd448c697d-aacdcbe1a076-JavaScript-IU-211.7142.45 

2021-05-13 10:36:05,832 [4904997]   INFO - ProjectRootPostStartUpActivity - C:/Users/comsysa/IdeaProjects/LS ELECTRIC(Sandbox)/.idea case-sensitivity: expected=false actual=false 

2021-05-13 10:36:05,845 [4905010]   INFO - indexing.UnindexedFilesUpdater - Started 

2021-05-13 10:36:05,845 [4905010]   INFO - indexing.UnindexedFilesUpdater - Pushing properties took 0ms; general responsiveness: ok; EDT responsiveness: ok 

2021-05-13 10:36:05,848 [4905013]   INFO - .diagnostic.PerformanceWatcher - Post-startup activities under progress took 509ms; general responsiveness: ok; EDT responsiveness: ok 

2021-05-13 10:36:05,848 [4905013]   INFO - indexing.UnindexedFilesUpdater - Scanning: use 7 scanning threads 

2021-05-13 10:36:05,904 [4905069]   INFO - al.NewToolbarRootPaneExtension - ToolbarSettingsService is ExperimentalToolbarSettings 

2021-05-13 10:36:05,904 [4905069]   INFO - al.NewToolbarRootPaneExtension - Show new toolbar: false, presentation mode: false 

2021-05-13 10:36:05,904 [4905069]   INFO - al.NewToolbarRootPaneExtension - Show old main toolbar: false, old navbar visible: true 

2021-05-13 10:36:06,083 [4905248]   INFO - tor.impl.FileEditorManagerImpl - Project opening took 1740 ms 

2021-05-13 10:36:06,091 [4905256]   INFO - indexing.UnindexedFilesUpdater - Scanning completed. Number of scanned files: 1111; Number of files for indexing: 0 took 245ms; general responsiveness: ok; EDT responsiveness: ok 

2021-05-13 10:36:06,091 [4905256]   INFO - indexing.UnindexedFilesUpdater - Finish. No files to index with loading content. 

2021-05-13 10:36:06,127 [4905292]   INFO - .services.SpaceKtsFileDetector - SpaceKtsFileDetector 

2021-05-13 10:36:06,394 [4905559]   INFO - ellij.license.LicenseValidator - Server license validation result was NotGenuine. 

2021-05-13 10:36:06,398 [4905563]   INFO - ellij.license.LicenseValidator - Trial has 30 days remaining. 

2021-05-13 10:36:06,398 [4905563]   INFO - ellij.license.LicenseValidator - Informing user of remaining evaluation period (30 days). 

2021-05-13 10:36:06,419 [4905584]   INFO - ellij.license.LicenseValidator - Illuminated Cloud features are enabled. 

2021-05-13 10:36:06,766 [4905931]   INFO - luminatedCloudFileTypeRegistry - Registering external resources http://soap.sforce.com/2006/04/metadata and urn:metadata.tooling.soap.sforce.com as C:/Users/comsysa/AppData/Roaming/JetBrains/IntelliJIdea2021.1/plugins/IlluminatedCloud2/lib/IlluminatedCloud.jar!/xsd/metadata.xsd. 

2021-05-13 10:36:11,017 [4910182]   INFO - gnostic.WindowsDefenderChecker - Windows Defender status: not used 

2021-05-13 10:36:11,021 [4910186]   INFO - m.codeWithMe.CodeWithMeCleanup - running activity to cleanup old thin clients... Root path is 'C:\Users\comsysa\AppData\Local\JetBrains' 

2021-05-13 10:36:11,023 [4910188]   INFO - m.codeWithMe.CodeWithMeCleanup - found 0 Code With Me client system folders to check 

2021-05-13 10:36:11,024 [4910189]   INFO - m.codeWithMe.CodeWithMeCleanup - found 0 Code With Me client config folders to check 

2021-05-13 10:36:11,024 [4910189]   INFO - m.codeWithMe.CodeWithMeCleanup - keep only [] major versions 

2021-05-13 10:36:16,275 [4915440]   INFO - j.ide.actions.RevealFileAction - Exit code 1 

2021년 5월 13일 목요일 오전 10시 30분 25초 UTC+9에 Scott님이 작성:

[Scott]

Hi. As mentioned in the original response, your network appears to be performing SSL certificate substitution. This makes it appear that there is an invalid SSL certificate coming from the Salesforce servers and therefore all server API interactions are failing. You must either configure the IDE to accept those certificates as documented here:

https://bitbucket.org/RoseSilverSoftware/illuminatedcloud/wiki/User_Guide/Configuring_the_IDE_to_Accept_Substitute_SSL_Certificates

or you must have your network/IT administrator disable SSL certificate substitution for connections to the Salesforce servers. Once that's properly addressed it should be possible to generate an offline symbol table as the Salesforce SDK for this project.

Please let me know if that doesn't make sense.

Regards,

Scott Wells

[Johannes Heinen]

Hi Scott, 

working / suffering for a big insurance company behind several web application firewalls, proxies, crappy malware detectors and so on, i am just facing quite similar issues as described above.

Unfortunately both suggested and documented resolutions -- checking "accept non-trusted certificates" as well as adding the substitute certificates to the list of trusted certs IntelliJ -- have no effect here. It seems that the Illuminated Cloud Plugin ignores these settings or uses some unknown trust store. The question is -- if the certs really have to be added to the truststore, where exactly is the truststore located?

Usually, if a connection attempt in IntelliJ -- recognizes a new cert, the user is prompted to accept it (or it is automatically added to the list of trusted certs, based on this particular setting "accept non-trusted certificates".

To test if Illuminated Cloud is basically able to connect to Salesforce through our tunneling proxy, we "misuse" the "test connection" function in the "plugins"-section of IntelliJs Plugins Proxy Settings. As expected, when entering the myDomain name of one of our salesforce sandboxes, intelliJ kindly prompts to accept the certificate(s). 

Heading over to the "configure Application" section in illuminated cloud, after hitting the "Test Connection" control here, said error message appears in a popup ("unable to  find valid certification path ...").

Is it not possible to let Illuminated Cloud respect the same settings that allow the native "Plugins"-Section in IntelliJ? Or is there a totally different "kind" of SSL-connection performed?

Thanks for your support and best regards

Johannes

[Scott]

Hi, Johannes. IC2 uses the base IDE's settings--both proxy and SSL cert settings--for all communications with the Salesforce servers. Under the hood it's just creating HTTPS connections for either SOAP or REST calls, and it's not doing anything special aside from setting certain headers such such. So for communications with Salesforce, the IDE configuration options--and in some rare corner cases, the JVM's keystore--is what you'd use.

IC2 also communicates with the licensing servers if you're using online activations (which given how you've described this network, you probably aren't). The licensing software does not generally use the base IDE's settings, though. It will use a configured manual proxy, but it doesn't recognize proxy configuration scripts, and it doesn't allow any form of SSL certificate substitution as that could be used to bypass its #1 purpose, enforced DRM. In such situations, you'd need to use offline activations.

So that's how it works. I guess I'd need to know the specifics to provide a more useful response, e.g., how are things configured in the JetBrains IDE, what certs have you added to the host JVM's keystore, and what specific types of operations are still failing?

Regards,

Scott Wells

[Johannes Heinen]

Hi Scott, 

thanks for your quick reply. I can confirm that the described issue is caused by the "Configure Application"-section in illuminated cloud, and that i am aware of the fact that the license activation process does not support certificate substituion at all. 

I use the "Configure Application"-Section of IC to test OAuth-Connections in Salesforce (from SFDX) by selecting a connection and then hitting the "Test"-Button. I expect that a popup window is shown that lets me accept new substitute certificates, and i would further expect that the accepted certificate is then listed in the "Server Certificicates" section in IntelliJ`s own settings menu and that subsequent calls to Salesforce using that OAuth-connection work. Instead, no popup window to accept unknown certs is displayed at all. Additionally, manually adding the certs in the settings menu of IntelliJ have no effect.  

Do you have any idea why Illuminated Cloud entirely "ignores" IntelliJ`s CA certificate management? For your interest: A collegue of mine uses the same version of both IntelliJ and Illuminated cloud, same startup VM-arguments and so on, and for him, my coworker, everything works as expected, including "certificate accept popup window" shown from the "Configure Application" section in IC.  In contrast to that, i was able to reproduce the issue on two of my computers, and i have absolutely no idea, which secret checkbox or similar i missed.

(Please note that the explicit acceptance of CA certs is only enabled for debugging purposes -- the checkbox "Accept non-trusted certs automatically" also has no effect in my case, IC seems to ignore the entire IntelliJ ssl cert management module.)

In the IDE`s debug logs of my coworker, something like this is displayed indicating that IC respects the built in certificate management to some extend:

r com.sforce.soap.tooling.SessionHeader took 42 ms. 

2021-11-23 09:37:22,293 [3658515]   INFO - cloud.client.ForceComApiClient - JAXB initialization for com.sforce.soap.tooling.CallOptions took 43 ms. 

2021-11-23 09:37:56,989 [3693211]   INFO - net.ssl.ConfirmingTrustManager - Certificate was accepted by user 

2021-11-23 09:37:57,589 [3693811]   INFO - cloud.client.ForceComApiClient - Logging into Salesforce DX as ....@....org.dev. 

2021-11-23 09:37:57,589 [3693811]   INFO - cloud.client.ForceComApiClient - Retrieving org details from Salesforce CLI. 

2021-11-23 09:37:57,589 [3693811]   INFO - cloud.client.ForceComApiClient - Retrieving org details from Salesforce CLI. 

2021-11-23 09:37:57,589 [3693811]   INFO - cloud.client.ForceComApiClient - Retrieving org details for DEV from Salesforce CLI. 

Whereas in my case, there seems to be no no net.ssl.ConfirmingTrustManager or cert management available at all (or from the perspective of IC, at least). -- The "Test Connection"-Button in the IDE's own proxy settings still works as expected, as i already described. For instance, it is possible to copy and paste the URL from this section in the debug logs:

2021-11-23 09:56:28,055 [3887020]   INFO -                         STDERR - Caused by: javax.net.ssl.SSLHandshakeException: SSLHandshakeException invoking https://xxx--dev.my.salesforce.com/services/Soap/m/53.0/00Dxxx: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target 

and use it to test the proxy settings in IntelliJ by hitting the Test Connection button in the proxy settings. et voila: The IDE prompts me to accept the substituted certificate, which i can do, and then connectivity is confirmed and the certificate is added to the list of trusted CAs in IntelliJ. But still, IC ignores the added Cert in subsequent connection attempts, which still leads to the same error. 

Does that help, or should i provide further information?

again, Thanks a lot 

best regards

Johannes

[Johannes Heinen]

Hi Scott,

again, its me ,-). With an update on this, i just realized that the issue is completely gone when i simply switch the boot runtime JRE/JDK under which IntelliJ runs from the bundled default Java 11 JDK to a common OpenJDK 11 (installed elsewhere).

The issue is -- at least for me, running windows 11 reliably reproducible using IntelliJ IDE and IC2 with the following version(s): 

OS Microsoft Windows 10 Enterprise

Version 10.0.19042 Build 19042

IntelliJ IDEA 2021.2.3 (Ultimate Edition)

Build #IU-212.5457.46, built on October 12, 2021

Licensed to AXA Konzern AG / Johannes Heinen

Subscription is active until December 31, 2021.

Runtime version: 11.0.12+7-b1504.40 amd64

VM: OpenJDK 64-Bit Server VM by JetBrains s.r.o.

Windows 10 10.0

GC: G1 Young Generation, G1 Old Generation

Memory: 16384M

Cores: 8

Non-Bundled Plugins: com.illuminatedcloud2.intellij (2.1.9.7)

Kotlin: 212-1.5.10-release-IJ5457.46

The JDK "Label" as shown in the "change boot runtime for the IDE" dialog looks exactly like "11.0.12.7-1504.40-jcef" 

Maybe that helps. If you need further information, feel free to contact me.

Thank you very much and 

best regards

Johannes

[Scott]

That's interesting. There's nothing that the IC2 (or any other) plugin has to do to leverage the host JetBrains IDE's proxy and/or SSL cert settings. Anytime that anything in the IDE process creates an HTTP or HTTPS connection, the IDE automatically sets that connection up properly based on its configuration. The fact that there's a behavioral difference between the JetBrains bundled JRE and a stock standard OpenJDK JRE make this even more curious. I'll be happy to ask JetBrains if they have any ideas when I'm back in town next week. I'll let you know what they say.

Regards,

Scott Wells

[Scott]

Johannes, I asked around a bit just in case and confirmed that there's nothing special IC2 needs to do for its HTTP/S connections to use the IDE's configured proxy or certificate settings. That's certainly backed up by several years of having many, many IC2 users on restricted networks--some extremely so--using those settings successfully to accommodate their networks. The behavior that you're seeing is certainly perplexing by itself, made even more so by the fact that changing host JREs seems to "fix" it. Unfortunately I don't have a satisfactory answer for you. At this point I guess my best response is for you to continue using the workaround that you've found via the alternative JRE. I wish I had a better answer...

Regards,

Scott Wells