Is it possible to bypass SSL Check in sonar-scanner-cli?

SonarQube Server / Community Build
1

Hello, is it possible to bypass SSL Check in sonar-scanner-cli (for example using SONAR_SCANNER_OPTS )?
I know it is a bad practice, but here is some context:

  • This is for a k3s home lab
  • I can’t create Let’s Encrypt certificates because the cluster is not (and will never be) reachable from the outside of my LAN
  • I don’t want to manually create self-signed certificates (although I might have to if the answer to my question is NO :laughing:) because I often destroy and recreate my cluster in it’s default state for testing purposes.
  • I want to use the default traefik cert created by Traefik at startup, but I can’t find a way to get it’s CA (so I can’t add it to the Java trust-store)

Must-share informations:

  • Using sonarsource/sonar-scanner-cli:latest (SONAR_SCANNER_VERSION=5.0.1.3006) as container image
  • Self-hosted SonarQube (version 10.6.0) on a k3s cluster using Helm behind a Traefik v2 reverse proxy

Thank you for your help :slight_smile:

2

Hey there.

The answer is no. :confused:

I guess serving your SonarQube server over HTTP isn’t an option?

openssl won’t do the trick to pull the cert?

3

Hi Colin,

I feel like an idiot, using HTTP instead of HTTPS is obviously the solution, especially for my use case !

Thank you for your precious help !

1 Like
4

blame it on friday :slight_smile:

5

This topic was automatically closed 7 days after the last reply. New replies are no longer allowed.