sonarqube - 添加自签名证书以与 git 连接

Question

我有自签名证书可以连接到 azure devops server 2019。我已经在 git root 证书中注册了自签名证书。 现在，我想配置 sonarqube 以在自托管代理上使用自签名证书。 我尝试在服务器和自托管代理上使用 keytool 在 java 的密钥库中注册证书。 但到目前为止还没有成功。

下面是 Log sonar Prepare 分析

##[section]Starting: Prepare analysis on SonarQube
==============================================================================
Task         : Prepare Analysis Configuration
Description  : Prepare SonarQube analysis configuration
Version      : 4.8.0
Author       : sonarsource
Help         : [More Information](http://redirect.sonarsource.com/doc/install-configure-scanner-tfs-ts.html)
==============================================================================
SYSTEMVSSCONNECTION exists true
##[warning]Unable to get default branch, defaulting to 'master': Error: unable to get local issuer certificate
[command]D:\Agent-Pools\sonaragent\_work\_tasks\SonarQubePrepare_15b84ca1-b62f-4a2a-a403-89b77a063157\4.8.0\classic-sonar-scanner-msbuild\SonarScanner.MSBuild.exe begin /k:devops-dashboard-core
SonarScanner for MSBuild 4.7.1
Using the .NET Framework version of the Scanner for MSBuild
Pre-processing started.
Preparing working directories...
22:37:00.721  Updating build integration targets...
22:37:00.808  Fetching analysis configuration settings...
22:37:02.839  Provisioning analyzer assemblies for cs...
22:37:02.84  Installing required Roslyn analyzers...
22:37:03.386  Provisioning analyzer assemblies for vbnet...
22:37:03.386  Installing required Roslyn analyzers...
22:37:03.439  Pre-processing succeeded.
##[section]Finishing: Prepare analysis on SonarQube

Answer 1

如果您已将证书添加到代理，则可以将 NODE_EXTRA_CA_CERTS 变量设置为指向您的 ca cert 或 cert。

就我而言，我添加了环境变量并将值设置为用于签署证书的 ca 证书。

  - name: NODE_EXTRA_CA_CERTS
    value: /etc/ssl/certs/ca-certificates.crt

归功于 Chris Hardie： https : //community.sonarsource.com/t/tfs-buid-server-cannot-connect-to-teh-sonarqube-server-over-ssl/1194/3

有关 NODE_EXTRA_CA_CERTS 的更多信息，请访问： https ://groups.google.com/forum/#!msg/sonarqube/1W8raF6ZMVM/iFgQhVENAAAJ