Does SonarQube VSTS marketplace extension 4.9.0 require Node.js be installed on the build Server?

Does the VSTS SonarQube extension ver 4.9.0 require that Node.js be installed on the build server?
I added the SonarQube extension to our (on premise) Windows build server. I am analyzing a VB.NET solution. I am getting the following error:

[SQ] API GET ‘/api/server/version’ failed, error was: {“code”:“UNABLE_TO_VERIFY_LEAF_SIGNATURE”}

So it’s some sort of a Cert issue, but what I am trying to figure out is if I need to have Node.js installed on the build server. I’ve stumbled across some posts that say this version of the extension uses node.

Does this extension require node. (The build Server is running on Windows)


Hey there.

If I understand correctly, some version of Node is included with the VSTS agent. If you’ve made it as far as that error message, there’s probably no need to worry about that (with one caveat).

These tasks using the Node.js framework under the hood, and the error you’ve been hitting so far is related to Node’s ability to handle custom certificates.

The UNABLE_TO_VERIFY_LEAF_SIGNATURE error is typically seen when you’re using a self-signed certificate on your SonarQube server – or more generically, any certificate not trusted by NodeJS.

It turns out that NodeJS offers a possible workaround. This involves the NODE_EXTRA_CA_CERTS environment/system variable, which can help pass custom CA information to the Node layer. See related documentation here. Based on the docs – this is available for NodeJS 7.3+, so you might want to double-check what version of NodeJS is installed (since we know some version is installed).

Hope this helps!


1 Like