SSL certificate problem: unable to get local issuer certificate AZURE DEVOPS

Question

I have a problem... My code in Gitlab, Pipeline in Azure DevOps. I use classic editor. When i start pipeline i have error "fatal: unable to access 'fatal: unable to access 'https://my.repos.example:***.git/': SSL certificate problem: unable to get local issuer certificate" Please help me!

Answer 1

For me this issue came up when attempting to clone a repository through Visual Studio 2019. Upon selecting the Azure option in the repository menu I then picked the codebase I wanted to clone. After this step I was prompted with an error of:

 "SSL certificate problem: unable to get local issuer certificate"

I ran the git command setting up the global ssl backend:

> git config --global http.sslbackend schannel

And the next time I tried the steps listed above, all was well.

Answer 2

If you want to cancel check azure devops ssl certificate, you need to go a variable group your pipeline and add GIT_SSL_NO_VERIFY = 1

Answer 3

Note: You could disable SSL certificate validation in Git or tick the checkbox accept untrusted SSL certificates , but that is definitely not the preferred practice for security.

In my case, I had Github enterprise repository which was giving this error. Try below steps:

1. Enable git to use schannel : git config --global http.sslbackend schannel
2. Export the certificates from your browser in the Base-64 encoded X.509 (.CER) format.

Note: In case of windows os, you can import .p7b files by right clicking the > install certificates.

3. Repeat the step-1 for all the intermediate certificate chain.

4. Copy and append all the certificates as obtained above.

5. Find out the Certificate store of the git : git config --list --show-scope The path will be mentioned in system scope http.sslcainfo .

6. Using a text editor (Notepad++) open ca-bundle.crt and copy paste the certificates from step-4 to the end of the ca-bundle.crt file and click Save.

Now retry the pipeline run.

Answer 4

Just re-installing git worked for me. Try to uninstall and install git

Answer 5

Basically issue was git used ROOT self sign certificate (sometimes company provided CA) which is not trusted by local git bash. Below are the steps I took to resolve the issue.

One of the eazy way is dissable ssl verify but there is a security issue as well as I got a warning message when git clone/push etc and for that message takes few time to do the git action.

Step 1 When installing use Native Windowns secure channel libary as per https://stackoverflow.com/a/45695638/4249715

or if you already install then change gitconfig file to below (This can be change by command line which is using git config --system )

[http] sslBackend = schannel

Step 2 run git config --global --edit in git command and you can see below configs.

[http]
        sslverify = true
        sslbackend = openssl
        sslcainfo = C:/Program Files/Git/mingw64/ssl/certs/ca-bundle.crt

Download the certificate chain and upload it to above path sslcainfo https://stackoverflow.com/a/60261983/4249715 i) To download certificate can do by browser by clicking lock icon and open certificate and go to Copy to File... , if you use windowns cer then use "DER encoded binary X.509" copy certificate to local. edit and copy and append this certificate to ca-bundle.crt file

If your still facing some slowness (My senario it was) So then add below config to the git config --global --edit file.

[credential]
        provider = generic