{"code":"UNABLE_TO_VERIFY_LEAF_SIGNATURE"}

SonarQube Server / Community Build
1

Version using : 9.2.4 ( Developer Edition )

Hi ,
I have integrated azuredevops with sonarqube using service connection. In service connection , i have provided sonarqube secured url . Eg. https://sonarqube.mydomain.com. When triggering azure pipeline for code analysis , the pipeline fails with following error.

##[error][SQ] API GET ‘/api/server/version’ failed, error was: {“code”:“UNABLE_TO_VERIFY_LEAF_SIGNATURE”}

But if i change the server url to insecure url in service connection for Eg. http://sonarqube.mydomain.com. The azure pipeline successfully publish the result in sonarqube.

http url gets success but https url gets failed.

Please suggest a solution.Thanks in Advance.

Regards,
Darwin

2

Hi Darwin,

UNABLE_TO_VERIFY_LEAF_SIGNATURE is about your SSL certificate. That’s why analysis works when you bypass SSL.

I guess you’re using a self-signed cert?

 
Ann