Unable to connect to on-premise SonarQube via HTTPS for Azure Pipelines

SonarQube Server / Community Build
,
1

Must-share information (formatted with Markdown):

  • which versions are you using (SonarQube Server / Community Build, Scanner, Plugin, and any relevant extension)
    SonarQube Enterprise 2026.3
    SonarQube Extension 8.0.2

  • how is SonarQube deployed:
    zip

  • what are you trying to achieve
    I am getting errors during SonarQubePrepareTaskv7 that I am “unable to verify the first certificate”

  • what have you tried so far to achieve this
    On-premise domain setup with no internet access
    Domain Controller with Certificate Authority installed
    All Windows Systems have their own computer certificate
    SonarQube is serving on default port while IIS is doing a reverse proxy to support HTTPS.
    Browsing to our local SonarQube instance has no issue.
    Azure DevOps Server 2022.2
    Azure Agents 3.255.0
    Installing and testing with Node.Js 20.20 produces the same error with code UNABLE_TO_VERIFY_LEAF_SIGNATURE.

2

Hey @amsga, the UNABLE_TO_VERIFY_LEAF_SIGNATURE error typically indicates that your reverse proxy is only serving the leaf certificate but not the intermediate certificates, so Node cannot trust it.

There’s been some discussion around this on Community in the past, please check this user’s reply. I also recommend you read through our TLS certificates docs to make sure your setup is as documented, particularly take into account the extra step for Azure Pipelines (expose the NODE_EXTRA_CA_CERTS env variable, which our CI task picks up).