Troubleshooting Untrusted Self-Signed Certificates Intercepting JetBrains IDE Connections

Problem

Users have encountered warnings about untrusted, self-signed certificates when using PyCharm, specifically with connections to api.jetbrains.ai:443.

Cause

The root cause appears to be the use of a Fortinet / Zscaler device in the user's network environment, which acts as a man-in-the-middle (MITM) proxy. This device intercepts and inspects HTTPS requests, inserting its own self-signed certificates.

Resolution

1. Verify Certificate Chain: Use the command openssl s_client -verify 5 -connect jetbrains.com:443 < /dev/null to verify the certificate chain in your terminal.

2. Configure the IDE: If you determine the proxy self-signed certificate is not malicious:

   • Import the Fortinet / Zscaler root certificate into the PyCharm IDE to allow secure connections.
   • Follow the detailed steps in the JetBrains SSL Certificate guide available at JetBrains Help Documentation.

If you have concerns about network security devices compromising secure connections, consult your IT or network administration team for further guidance on managing the network configuration.