Copilot Intellij - unable to verify the first certificate

[adamgrze-luma]

Select Topic Area

Bug

Body

GitHUb Copilot: 1.5.2.5345
IntelliJ: IntelliJ IDEA 2024.1 (Ultimate Edition) Build #IU-241.14494.240, built on March 28, 2024
OS: Windows 10

Right after starting Intellij, copilot only shows one suggestion and then crashes with "unable to verify the first certificate".

Logs:
2024-04-18 19:09:02,248 [3921084] WARN - #copilot - [ghostText] Error on ghost text request: FetchError: The pending stream has been canceled (caused by: unable to verify the first certificate)
at fetch (C:\snapshot\copilot-client\node_modules@adobe\helix-fetch\src\fetch\index.js:99:11)
at processTicksAndRejections (node:internal/process/task_queues:95:5)
at cachingFetch (C:\snapshot\copilot-client\node_modules@adobe\helix-fetch\src\fetch\index.js:288:16)
at WJ.fetch (C:\snapshot\copilot-client\lib\src\network\helix.ts:78:22)
at oH.fetchWithParameters (C:\snapshot\copilot-client\lib\src\openai\fetch.ts:426:26)
at oH.fetchAndStreamCompletions (C:\snapshot\copilot-client\lib\src\openai\fetch.ts:321:26)
at genericGetCompletionsFromNetwork (C:\snapshot\copilot-client\lib\src\ghostText\ghostText.ts:143:21)
at getGhostText (C:\snapshot\copilot-client\lib\src\ghostText\ghostText.ts:692:23)
at getGhostTextWithAbortHandling (C:\snapshot\copilot-client\agent\src\methods\getCompletions.ts:302:16)
at handleGetCompletionsHelper (C:\snapshot\copilot-client\agent\src\methods\getCompletions.ts:154:33) {
type: 'system',
_name: 'FetchError',
code: 'ERR_HTTP2_STREAM_CANCEL',
errno: undefined,
erroredSysCall: undefined
}

The same plugin in Visual Studio Code works fine.

I've already tried:

1. Log out and log back in to GitHub
2. Reinstall the plugin
3. Use 3 previous versions of the plugin
4. Run the plugin on a fresh Intellij installation

[michieldondorp]

This was also happening on our end, it appeared to be eset antivirus security setting (settings -> advanced -> security -> ssl/tls)

[BewaAutomatisierung-RD]

Does anyone know the path of copilot for Visual Studio 2022. I get the same error there but can't find an .exe for the github copilot extension. The path mentioned by @petrsol does not exist on my machine (even without the "Preview").

[BewaAutomatisierung-RD]

Found it. It's located here:
"C:\Users<username>\AppData\Local\Microsoft\VisualStudio\17.0_ec60bf4b\Extensions\okrqpxul.pny\service\dist\copilot-agent-win.exe"

[Matt-PMCT]

This solution shouldn't be considered the permanent fix; we are putting an ESET exception in on a file that is located in essentially a temporary directory.

Every time the IDE updates to a new version, we will have to add a new exception. The root issue seems to be something that Copilot introduced recently since none of us had this problem before. That root issue should be addressed IMO.

[JPG-Digital]

Thank you!

[SilentHG]

Facing similar issue, I am on a company laptop so modifying ESET internals are cumbersome process, please fix github

[Jaben]

Yes -- this is actually a deal-breaker for my company. I cannot enable this for my guys unless this is fixed.

[ohalushchak]

I have the same issue.

Here is error message.

Sign in failed. Reason: Request signInInitiate failed with message: The pending stream has been canceled (caused by: unable to verify the first certificate), request id: 155, error code: -32603

GitHub please fix it.

[dschuck]

Did you see the answer from @michieldondorp? This worked for me. If you / your company is using ESET Protection, you could try to add the "copilot-agent-win.exe" to the list of SSL/TLS filtered applications - the screenshot from @adamgrze-luma shows perfectly what to do in your ESET client.

[ohalushchak]

Ahhh. Sorry I did not notice this answer. Yes, this fix works for me, but any way it's more like workaround then good solution.

[otami]

In my machine, I have confirmed that this problem can also be solved by additionally setting ESET's own certificate for NPM.

In this case, no ESET configuration was required.

The following link has details on how to do it.
the-last-byte/ESET-NPM-Breakage-Fix#1 (comment)

[thomaspemisia]

I had the same issue on a Windows 11 machine, VS 2022.
I confirm that the ESET SSL rule corrected the problem.
Thanks, everyone!