asciidoctor/asciidoctor-intellij-plugin

Plugin doesn't use system trust store

Open

#1,153 opened on Sep 7, 2022

View on GitHub
 (4 comments) (0 reactions) (0 assignees)Java (155 forks)auto 404
awaiting feedbackhelp wanted

Repository metrics

Stars
 (392 stars)
PR merge metrics
 (PR metrics pending)

Description

Hi, I'm using IntelliJ Idea 2022.2.1 UE and AsciiDoc plugin 0.37.45. I have my own instance of kroki server, available through HTTPS with self-signed certificate. Root CA cert is added to windows trusted root CA store.

With "kroki-fetch-diagram: true" in antora-playbook.yml I'm getting the following error when trying to preview asciidoc page with plantuml diagram inside:

org.jruby.exceptions.StandardError: (SSLError) asciidoctor: FAILED: C:\repos\myrepo\docs\modules\ROOT\pages\mypage.adoc: Failed to load AsciiDoc document - certificate verify failed

In order to asciidoc plugin work correctly I have to either change "kroki-fetch-diagram" to false or add root CA to IntelliJ JRE' cacerts file. I'd expect asciidoc plugin to use system trust store.

Contributor guide

Research direction
Locate where the plugin makes HTTPS calls (likely in the Kroki fetch functionality) and modify the SSL context to use the system trust store instead of a custom or default one.
Tech stack
java
Domain
security
Issue type
Bug
DifficultyEstimated implementation difficulty for a new contributor, from 1 for very small changes to 5 for expert-level work.
2
Estimated timeA rough time range for an experienced contributor to investigate, implement, test, and prepare a pull request.
1-3 hours
Activity statusHow available the issue appears right now: fresh, active, stale, blocked, or waiting on maintainer input.
Active
ClarityHow clearly the issue explains the expected change, acceptance criteria, and next step.
Clear
Prerequisites
Java
Newbie friendlinessA 1-100 score estimating how approachable this issue is for first-time contributors.
70