We have SonarQube Developer Edition, deployed to a Windows VM. We are attempting to integrate this into our Azure DevOps pipelines, and we are receiving the ‘Unable to verify the first certificate’ error during the SonarQubePrepare task. I’ve gone through the forum and several other search results…

Hi, This should help: [image] Failed to fetch server version: Error: unable to verify the first certificate SonarQube Hi, Welcome to the community! This was the first time I’d seen that particular error, so it sent me searching, which led me to StackOverflow HTH, …

I’ve read that one, and it’s one reason i have set the NODE_EXTRA_CA_CERTS as I mentioned into an environment variable. I have it pointing to our ‘self signed’ cert info bundle stored in a file on the SonarQube server. We aren’t writing code that’s calling upon SonarQube, it’s configuring Azure De…

Hi, [image] e: Error while executing task Prepare: API GET ‘/api/server/version’ failed. Error message: unable to verify the first certificate. This error means the scanner can’t talk to the server, apparently because you’re using a self-signed certificate on a server that doesn’t supply the…

And I’ve done all the steps listed in the SO post as well as the docs.sonarsource.com link I listed before I posted. I have created the intermediate cert file, registered it with windows and java (using keytool and certutil), set the environment variables, etc. However, I’m still getting the issue…

Hi, This needs to be happening on the build agent. It’s the build agent that’s trying to contact SonarQube and getting the error. HTH, Ann

The documentation indicates all of this needed to be done at the ‘SonarScanner’ level, I didn’t read that as the build agent. We use DevOps ‘built in’ agents, we don’t host or configure anything ourselves. Based on the SonarSource documentation, “If you are using Microsoft-hosted build agents then…

Hi @emalueg We are currently updating all scanners progressively to move away from a Java-specific way to configure SSL. However, this effort is not fully completed and depends on your version of Sonarqube. If you are using SonarQube Server LTS (9.9) then you can not benefit from the new way to co…

Hi @jesmersoy , You’ve resurrected a 3-month-old thread. Per the FAQ , please don’t do that. Generally, I would ask you to create a new thread with all your details. But in this case, I’m going to ask you to upgrade to a current version (and JVM) first. Then if you can still reproduce the problem, yo…

Apologies Ann, I’ve raised a new topic on this, I’m unable to upgrade right now.

Missing something trying to remedy 'Unable to verify the first certificate'

SonarQube Server / Community Build

ganncamp (G Ann Campbell) October 23, 2024, 3:47pm 2

Hi,

This should help:

Ann

Topic		Replies	Views
SonarQube Developer - Azure DevOps Task Prepare Analysis Configuration is failing SonarQube Server / Community Build sonarqube , scanner , cert	4	556	October 22, 2024
Invalid Azure URL or Personal Access Token (Azure DevOps Server) SonarQube Server / Community Build azuredevops-server	10	441	July 17, 2024
Getting UNABLE_TO_VERIFY_LEAF_SIGNATURE while running SonarQubePrepare task SonarQube Server / Community Build ssl , azuredevops-server	6	2615	April 3, 2024
SQ] API GET '/api/server/version' failed, error was: {"code":"SELF_SIGNED_CERT_IN_CHAIN"} SonarQube Server / Community Build scanner , docker , ssl , azure , kubernetes	2	14036	July 22, 2020
Configuring Prepare Analysis Configuration task in Azure DevOps with self-signed certificate SonarQube Server / Community Build azuredevops-services , ssl	6	3936	December 10, 2018

Missing something trying to remedy 'Unable to verify the first certificate'

Related topics