SSL handshake failure on authentication against Team Services using corporate ADFS about azure-devops-intellij HOT 5 CLOSED

Thanks @jtidmus for reporting this issue. Do you have a proxy in place and does that proxy server requires authentication?

from azure-devops-intellij.

@yacaovsnc No proxy but it looks like the ADFS uses a self-signed SSL certificate for internal users. Presumably, JavaFX cannot render this page causing the shown handshake failure. Does this seem like the likely explanation?

from azure-devops-intellij.

@jtidmus Yes, that does make sense -- Java by default can't establish secure connection with self-signed certs. We need to instruct Java to trust the self signed cert either by import it to the default trust store, or create a new trust store and direct IntelliJ to use that.

I am a little bit confused, if you are connecting to VSTS, I thought the site should be protected by our cert? Are you connecting to a ****.visualstudio.com account or an on prem TFS instance?

Thanks!

from azure-devops-intellij.

@yacaovsnc I can confirm that the workaround for the self-signed ADFS SSL certificate was to install the certificate chain into the JVM running IntelliJ. Then when attempting to access VSTS account at *****.visualstudio.com the plugin is redirected to the corporate ADFS signin page at adfs.*****.com. The corporate self-signed certificate is accepted by the JavaFX renderer and the authentication completes successfully allowing the plugin to access the repos.

Thanks for your help.

from azure-devops-intellij.

@jtidmus Glad you have found the workaround. Thanks!

from azure-devops-intellij.