An update from our side. We have worked on replacing our certificate with a certificate derived from an known CA. This has been succesfull but we hit another obstacle. The Prepare Analysis task gives an error: API GET ‘/api/server/version’ failed. Error message: unable to get local issuer certificate
The certificate we use is derived from “Entrust OV TLS Issuing RSA CA 1” which is derived from “SSL.com TLS RSA Root CA 2022”.
After much searching around we found it had to do with Prepare Analysis running on Node16.
https://github.com/SonarSource/sonar-scanner-azdo/blob/master/src/extensions/sonarqube/tasks/SonarQubePrepare/v7/task.json
at the bottom
“execution”: {
“Node16”: {
“target”: “SonarQubePrepare.js”
}
The Node16 runtime is embedded within the Microsoft (build)agent as is the Node20 runtime. As a test we renamed the Node16 folder and made an symbolic link from Node16 to the Node20_1 folder after which Prepare Analysis ran succesfull and also the actual Analysis.
As Node16 is deprecated since september 2013 can the dependency on Node16 be changed to Node20_1 for the v7 tasks?
Facilitating private certificates is still appreciated
Kind regards,
Donnie Roos