You can connect to Copilot through an HTTP proxy and use custom certificates. This is useful if you're working on a corporate network that requires a proxy server or if you need to inspect the contents of Copilot's secure connection. See Network settings for GitHub Copilot.
Configuring proxy settings for Copilot
You can configure an HTTP proxy for Copilot in your chosen editor. To view instructions for your editor, use the tabs at the top of this article.
-
In your JetBrains IDE, click the File menu (Windows) or the name of the application in the menu bar (macOS), then click Settings.
-
Under Appearance & Behavior, click System Settings and then click HTTP Proxy.
-
Select Manual proxy configuration, and then select HTTP.
-
In the "Host name" field, enter the hostname of your proxy server, and in the "Port number" field, enter the port number of your proxy server.
-
Optionally, to configure Copilot to ignore certificate errors, in the left sidebar, click Tools, click Server Certificates, then select or deselect Accept non-trusted certificates automatically.
警告
Ignoring certificate errors can cause security issues and is not recommended.
If you have configured a proxy but are still encountering connection errors, see Troubleshooting network errors for GitHub Copilot.
Basic authentication
Copilot for JetBrains supports basic authentication. To authenticate, you can select Proxy authentication on the "Manual proxy configuration" page, then enter your credentials.
This stores your credentials as plaintext in your editor's settings. Alternatively, you may prefer to include your credentials in the proxy URL (for example: http://USERNAME:PASSWORD@10.203.0.1:5187/
), and then set this URL as one of the supported environment variables listed in Proxy settings for Copilot.
Overriding the default SPN in JetBrains IDEs
- In your JetBrains IDE, click the File menu (Windows) or the name of the application in the menu bar (macOS), then click Settings.
- In the left sidebar, click Languages & Frameworks, then click GitHub Copilot.
- In the "Advanced" section, in the "Override Kerberos Proxy Service Principal Name" field, type the SPN for your proxy service.
Installing custom certificates
Generally, if you're using company equipment, your company's IT department should have already installed any required certificates on your machine. If you need to install a certificate, see the following instructions.
警告
Installing a custom certificate is an instruction for your computer to trust the creator of the certificate, potentially allowing the creator to intercept all Internet traffic from your machine. You should be very careful to verify that you are installing the correct certificate.
- For Windows, see Installing the trusted root certificate in the Microsoft documentation.
- For macOS, see Add certificates to a keychain using Keychain Access on Mac in the Keychain Access User Guide.
- For Linux, see Installing a root CA certificate in the trust store in the Ubuntu documentation. Similar instructions should apply to most Linux distributions.
If you have installed a certificate but Copilot isn't detecting it, see Troubleshooting network errors for GitHub Copilot.