nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

"sonarqube-quality-gate" pipe fails with ssl error

gi_cpp_bitbucket

When using

pipe: sonarsource/sonarqube-quality-gate:1.0.0

in the Bitbucket pipeline script, the step fails due to:

Status: Downloaded newer image for sonarsource/sonarqube-quality-gate:1.0.0
curl: (60) SSL certificate problem: certificate has expired
More details here: https://curl.haxx.se/docs/sslcerts.html
curl failed to verify the legitimacy of the server and therefore could not
establish a secure connection to it. To learn more about this situation and
how to fix it, please visit the web page mentioned above.

Accepted answers

All comments

Syahrul

Hi @gi_cpp_bitbucket

Looking at the error logs, it looks like the pipe is using an outdated certificate that has been expired.

I have tested this on my end and unable to reproduce it so can you confirm with me does your latest build still failing with the same certificate error?

I look forward to hearing from you.

Cheers,
Syahrul

gi_cpp_bitbucket

Yes, issue still occurring even with latest pipeline images like

image: node:14.18.1
or
image: atlassian/default-image:3

gi_cpp_bitbucket

There's something wrong with the cert chain config in the image (sonarsource/sonarqube-quality-gate:1.0.0) - probably out of date?

Sonarqube-quality-gate is trying curl to a website that has a letsencrypt cert with "ISRG Root X1" as the root and fails.

The curl command is constructed in "check-quality-gate.sh" on line 30 (https://bitbucket.org/sonarsource/sonarqube-quality-gate/src/master/pipe/check-quality-gate.sh)

Syahrul

Hi @gi_cpp_bitbucket

Noted, since this requires further investigation I have proceeded to raise a support ticket on behalf of you so we can continue the investigation.

You should receive an email with the ticket link and one of our support engineers should get back to you soon.

Cheers,
Syahrul

Welcome!

It looks like you're new here. Sign in or register to get started.

Quick Links

Find more posts tagged with

cloud

bitbucket

bitbucket-cloud

atl-gruland

bitbucket-pipelines