"sonarqube-quality-gate" pipe fails with ssl error

[gi_cpp_bitbucket]

When using

pipe: sonarsource/sonarqube-quality-gate:1.0.0

in the Bitbucket pipeline script, the step fails due to:

Status: Downloaded newer image for sonarsource/sonarqube-quality-gate:1.0.0
curl: (60) SSL certificate problem: certificate has expired
More details here: https://curl.haxx.se/docs/sslcerts.html
curl failed to verify the legitimacy of the server and therefore could not
establish a secure connection to it. To learn more about this situation and
how to fix it, please visit the web page mentioned above.

[Syahrul]

Hi @gi_cpp_bitbucket 

Looking at the error logs, it looks like the pipe is using an outdated certificate that has been expired.

I have tested this on my end and unable to reproduce it so can you confirm with me does your latest build still failing with the same certificate error?

I look forward to hearing from you.

Cheers,
Syahrul

[gi_cpp_bitbucket]

Yes, issue still occurring even with latest pipeline images like

image: node:14.18.1
or
image: atlassian/default-image:3

[gi_cpp_bitbucket]

There's something wrong with the cert chain config in the image (sonarsource/sonarqube-quality-gate:1.0.0) - probably out of date?

Sonarqube-quality-gate is trying curl to a website that has a letsencrypt cert with "ISRG Root X1" as the root and fails.

The curl command is constructed in "check-quality-gate.sh" on line 30 (https://bitbucket.org/sonarsource/sonarqube-quality-gate/src/master/pipe/check-quality-gate.sh)

[Syahrul]

Hi @gi_cpp_bitbucket

Noted, since this requires further investigation I have proceeded to raise a support ticket on behalf of you so we can continue the investigation.

You should receive an email with the ticket link and one of our support engineers should get back to you soon.

Cheers,
Syahrul

[Benjamin Džanko]

@Syahrul Hello, I also have this issue, can this be fixed soon? I think the problem is in the docker image you are using. I think a new update is available on the repo but the docker image is not build. 

[abhishek.singh]

Hi guys,

We are getting the same error.
Will be very appreciated if anyone has any idea about the issue above.

[Marcos Vasconcellos]

Estou com o mesmo problema, e não sei como contornar.