docs: describe gateway and internal certs #7747
Conversation
There was a problem hiding this comment.
Thanks for doing this, this will be huge since a ton of our users use custom CAs or self-signed certificates. Are these steps necessary if the user's operating system trusts the CA?
@code-asher - Can you think of any UX enhancements around this in the plugin itself or ways we could point users to this doc when they run into an error? No need to do this now, but would be awesome to represent as an issue in coder/jetbrains-coder
I believe so, as this error has been returned when the client trusts CA. To that point, users are able to run |
There was a problem hiding this comment.
Nice!
Are these steps necessary if the user's operating system trusts the CA?
Just confirming Eric's response that this does appear to be the case. It looks like JetBrains is shipping their own CA certs via the trust store so nothing you do to the operating system has any effect which...is interesting, but maybe there is a part of this we are not understanding.
UX enhancements
Good idea! Opened coder/jetbrains-coder#251
Gotcha. In that case, I don't think self-signed certs is the right term. Perhaps "internally signed certificates"? |
docs/ides/gateway.md
Outdated
| $<Gateway installation directory>/jre/lib/security/cacerts | ||
|
|
||
| # Windows | ||
| C:\Program Files (x86)\<Gateway installation directory>\jre<version>\lib\security\cacerts |
There was a problem hiding this comment.
If using JetBrains Toolbox, the path is,
%USERPROFILE%\AppData\Local\JetBrains\Toolbox\bin\jre\lib\security\cacerts
docs/ides/gateway.md
Outdated
| For example: | ||
|
|
||
| ```powershell | ||
| & 'C:\Program Files\JetBrains\JetBrains Gateway <version>/jbr/bin/keytool.exe' 'C:\Program Files\JetBrains\JetBrains Gateway <version>/jbr/lib/security/cacerts' -import -alias coder -file <cert> |
There was a problem hiding this comment.
similarly
& '%USERPROFILE%\AppData\Local\JetBrains\Toolbox\apps\Gateway\ch-0\<VERSION>\jbr\bin\keytool.exe' '%USERPROFILE%\AppData\Local\JetBrains\Toolbox\bin\jre\lib\security\cacerts' -import -alias coder -file <cert>
this PR documents steps for configuring JetBrains Gateway to connect to a Coder deployment with self-signed certificates.