My build pipeline is getting failed at checkout step. Using self hosted agent to run pipeline

Question

fatal : unable to access 'URL' ssl certificate problem : unable to get local issuer certificate.

Git fetch failed with with exit code 128

Answer 1

According to your description, it appears that you are using the self-signed certificate.

This error occurs when a self-signed certificate cannot be verified.

Here is the same issue discussed on GitHub : https://github.com/Microsoft/azure-pipelines-agent/issues/688

You can try below workarounds:

• Add Enterprise CA certificate to git config –global http.sslCAInfo.

• Tell Git where to find the CA bundle by running:

  git config --system http.sslCAPath /absolute/path/to/git/certificates

• Modify the ca-bundle.crt file to include the domain's root cert which found in the <agent install directory>\externals\git\mingw64\ssl\certs folder.

• Turn off sslVerify with:

  git config --system http."https://our.internal:port/".sslVerify false

• Try following the tutorial which mentioned in below blog: https://blogs.msdn.microsoft.com/phkelley/2014/01/20/adding-a-corporate-or-self-signed-certificate-authority-to-git-exes-store/

• Try to deploy an new agent using the release 2.129.0 agent which contains git SChannel support.

  To enable git to use SChannel, you need to pass --gituseschannel during agent config. ex:

  ./config.cmd --gituseschannel

You can also reference the solutions mentioned in this thread: SSL certificate problem: Unable to get local issuer certificate