Azure DevOps

Question

Azure DevOps

ZTS 40

##[section]Starting: Checkout

==============================================================================

Task : Get sources

Description : Get sources from a repository. Supports Git, TfsVC, and SVN repositories.

Version : 1.0.0

Author : Microsoft

Help : [More Information]](https://go.microsoft.com/fwlink/?LinkId=798199)"https://go.microsoft.com/fwlink/?linkid=798199)")

==============================================================================

Syncing repository: API_Platform-edi-mulesoft-api-sys (Git)

Prepending Path environment variable with directory containing 'git.exe'.

##[command]git version

git version 2.21.0.windows.1

##[command]git config --get remote.origin.url

##[command]git config gc.auto 0

##[command]git config --get-all http.https://team-test.com

##[command]git config --get-all http.proxy

##[command]git -c http.extraheader="AUTHORIZATION: bearer ***" fetch --force --tags --prune --progress --no-recurse-submodules origin

fatal: unable to access 'https://team-test..com/': SSL certificate problem: self signed certificate in certificate chain

##[warning]Git fetch failed with exit code 128, back off 5.059 seconds before retry.

##[command]git -c http.extraheader="AUTHORIZATION: bearer ***" fetch --force --tags --prune --progress --no-recurse-submodules origin

fatal: unable to access 'https://team-test.com': SSL certificate problem: self signed certificate in certificate chain

##[warning]Git fetch failed with exit code 128, back off 2.993 seconds before retry.

##[command]git -c http.extraheader="AUTHORIZATION: bearer ***" fetch --force --tags --prune --progress --no-recurse-submodules origin

fatal: unable to access 'https://team-t.com SSL certificate problem: self signed certificate in certificate chain

##[error]Git fetch failed with exit code: 128

##[section]Finishing: Checkout

Durga Reshma Malthi 9,840 Reputation points Microsoft External Staff Moderator

2025-07-24T09:34:20.68+00:00

Hi ZTS

Are you running the pipeline from Azure DevOps, and are you using Microsoft-hosted agents or self-hosted agents?

The error seems that the SSL certificate used by the server is self-signed and not trusted by the Git client.
Durga Reshma Malthi 9,840 Reputation points Microsoft External Staff Moderator

2025-07-28T08:21:06.8233333+00:00

Hi ZTS

Just checking in to see if you had a chance to review the response provided to your question.

Feel free to reach out if you have any further queries.
Durga Reshma Malthi 9,840 Reputation points Microsoft External Staff Moderator

2025-07-29T08:24:51.11+00:00

Hi ZTS

Just checking in to see if you had a chance to review the response provided to your question.

Feel free to reach out if you have any further queries.

1 answer

Your answer

Durga Reshma Malthi 9,840 Reputation points Microsoft External Staff Moderator

2025-07-24T09:34:20.68+00:00

Hi ZTS

Are you running the pipeline from Azure DevOps, and are you using Microsoft-hosted agents or self-hosted agents?

The error seems that the SSL certificate used by the server is self-signed and not trusted by the Git client.
Durga Reshma Malthi 9,840 Reputation points Microsoft External Staff Moderator

2025-07-28T08:21:06.8233333+00:00

Hi ZTS

Just checking in to see if you had a chance to review the response provided to your question.

Feel free to reach out if you have any further queries.
Durga Reshma Malthi 9,840 Reputation points Microsoft External Staff Moderator

2025-07-29T08:24:51.11+00:00

Hi ZTS

Just checking in to see if you had a chance to review the response provided to your question.

Feel free to reach out if you have any further queries.

Answer 1

Durga Reshma Malthi 9,840 Microsoft External Staff Moderator

Hi ZTS

Could you please provide the response for the above question

Meanwhile, check the below steps:

The error message seems that Git is unable to access the repository due to an SSL certificate issue.

If you have a self-signed certificate, you need to add it to the trusted certificates on the machine running the build pipeline via certmgr.msc.
If you are on a Linux system, you may need to update your CA certificates by running the below command:
```
  sudo update-ca-certificates
```
If you cannot add the certificate to the trusted store, you can configure Git to trust the self-signed certificate directly by using the below command:
```
  git config --global http.sslCAInfo /path/to/your/certificate.crt
```
According to the error message, you can use git config --global http.sslVerify false to resolve the error. But this is not recommended.

Refer to this stackoverflow - https://stackoverflow.com/questions/67976050/ssl-certificate-problem-unable-to-get-local-issuer-certificate-azure-devops

Additional References:

https://github.com/microsoft/azure-pipelines-tasks/issues/11508

https://stackoverflow.com/questions/58522318/git-error-in-azure-devops-ssl-certificate-problem-self-signed-certificate-in

Hope this helps!

Please Let me know if you have any queries.

Durga Reshma Malthi 9,840 Reputation points Microsoft External Staff Moderator

2025-07-30T06:23:21.6166667+00:00

Hi ZTS

Just checking in to see if you had a chance to review the response provided to your question.

Feel free to reach out if you have any further queries.

If you found the information helpful, please click "Upvote" on the post to let us know and consider accepting the answer as the token of appreciation. Thank You.
ZTS 40 Reputation points

2025-07-30T07:53:44.4766667+00:00

We are using Microsoft-hosted agents.
Durga Reshma Malthi 9,840 Reputation points Microsoft External Staff Moderator

2025-07-30T09:35:48.8066667+00:00

Hi ZTS

Since you're using Microsoft-hosted agents, you cannot modify the trusted root certificate store. Microsoft-hosted agents do not support adding custom trusted certificates, so Git will always fail when the remote server uses a self-signed certificate.

You can migrate git Repo to Azure Repos or GitHub and switch to Self-hosted Agents.

Hope this helps!

Please Let me know if you have any queries.
ZTS 40 Reputation points

2025-07-30T14:57:34.17+00:00

May we ask for additional input?
ZTS 40 Reputation points

2025-07-31T13:05:31.3166667+00:00

Do you have additional input?
Durga Reshma Malthi 9,840 Reputation points Microsoft External Staff Moderator

2025-08-01T07:38:54.3433333+00:00
Hi ZTS

You can use SSH Instead of HTTPS:

Generate SSH key pair (ssh-keygen)

Add public key to your Git server’s user or deploy keys

Add private key as a pipeline secure file or variable

Modify your pipeline like:

resources: repositories: - repository: self type: git name: repo-name url: ******@team-test.com:your-group/your-repo.git sshKey: $(SSH_PRIVATE_KEY)

Hope this helps!

Please Let me know if you have any queries.
ZTS 40 Reputation points

2025-08-01T13:07:19.65+00:00

Can you provide steps if it is self hosted? Can we modify it? how
Durga Reshma Malthi 9,840 Reputation points Microsoft External Staff Moderator

2025-08-04T08:59:36.23+00:00
Hi ZTS

Obtain your root certificate used by your Git server. Example: internal-ca.crt

To Install the Certificate on the Agent

If your agent is on Windows, then Open PowerShell as Administrator and run:

Import-Certificate -FilePath "C:\certs\internal-ca.crt" -CertStoreLocation Cert:\LocalMachine\Root

If your agent is on Linux, then copy the certificate to trusted CA path:

sudo cp internal-ca.crt /usr/local/share/ca-certificates/

Update CA trust:

sudo update-ca-certificates

And then restart the Agent Service

On Windows - Restart-Service vstsagent.*

On Linux - sudo systemctl restart vsts.agent.*

And then run your Pipeline: - checkout: self

Hope this helps!

Please Let me know if you have any queries.
Durga Reshma Malthi 9,840 Reputation points Microsoft External Staff Moderator

2025-08-05T08:19:01.81+00:00

Hi ZTS

Just checking in to see if you had a chance to review the response provided to your question.

Feel free to reach out if you have any further queries.
ZTS 40 Reputation points

2025-08-05T09:00:50.85+00:00

Hello Durga, Let me test this and ill let you know.
Durga Reshma Malthi 9,840 Reputation points Microsoft External Staff Moderator

2025-08-06T07:13:33.2666667+00:00

Hi ZTS

Could you please update us if you have tried the above workaround.
Durga Reshma Malthi 9,840 Reputation points Microsoft External Staff Moderator

2025-08-07T06:19:54.47+00:00

Hi ZTS

Could you please update us if you have tried the above workaround.
ZTS 40 Reputation points

2025-08-11T13:46:46.4366667+00:00

Still testng.
Durga Reshma Malthi 9,840 Reputation points Microsoft External Staff Moderator

2025-08-12T07:58:16.9633333+00:00

Hi ZTS

Sure, please update us once the testing is completed.
Durga Reshma Malthi 9,840 Reputation points Microsoft External Staff Moderator

2025-08-13T04:28:27.1066667+00:00

Hi ZTS

Sure, please update us once the testing is completed.

Share via

Azure DevOps

1 answer

Your answer