{"action":"reopened","issue":{"url":"https://api.github.com/repos/Microsoft/vsts-agent/issues/677","repository_url":"https://api.github.com/repos/Microsoft/vsts-agent","labels_url":"https://api.github.com/repos/Microsoft/vsts-agent/issues/677/labels{/name}","comments_url":"https://api.github.com/repos/Microsoft/vsts-agent/issues/677/comments","events_url":"https://api.github.com/repos/Microsoft/vsts-agent/issues/677/events","html_url":"https://github.com/Microsoft/vsts-agent/issues/677","id":188502647,"number":677,"title":"Git fails with self-signed certificate?","user":{"login":"Kollibri","id":533377,"avatar_url":"https://avatars.githubusercontent.com/u/533377?v=3","gravatar_id":"","url":"https://api.github.com/users/Kollibri","html_url":"https://github.com/Kollibri","followers_url":"https://api.github.com/users/Kollibri/followers","following_url":"https://api.github.com/users/Kollibri/following{/other_user}","gists_url":"https://api.github.com/users/Kollibri/gists{/gist_id}","starred_url":"https://api.github.com/users/Kollibri/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/Kollibri/subscriptions","organizations_url":"https://api.github.com/users/Kollibri/orgs","repos_url":"https://api.github.com/users/Kollibri/repos","events_url":"https://api.github.com/users/Kollibri/events{/privacy}","received_events_url":"https://api.github.com/users/Kollibri/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":1,"created_at":"2016-11-10T13:01:22Z","updated_at":"2016-11-10T14:29:35Z","closed_at":null,"body":"## **Agent version and platform**\r\nVersion of your agent? 2.109.1\r\n<br>\r\nOS of the machine running the agent? OSX/Windows/Linux...\r\nWindows\r\n<br>\r\n## **VSTS type and version**\r\nOn-Prem TFS 2015 with Update 2\r\n<br>\r\nIf On-Prem TFS, which release, 2015 RTM/QU1/QU2?\r\n2015 Update 2\r\n## **What's not working?** \r\nIn order to use GIT locally on my workstation to connect to our TFS server, I have to add the ssl cert to the end of the \"ca-bundle.crt\" file in my git global installation location (which happens to be \"C:\\Program Files\\Git\\mingw64\\ssl\\certs\").  This allows git to recognize the ssl cert for our self-signed certificate on the TFS server.\r\n\r\nGIT is not installed globally on the build server, instead we were hoping to reply on the GIT that is included with the build agent.  We have added the cert for the tfs server to the end of the .cert file for the build agent located at \"'D:\\TFSAgents\\VSBuild3\\externals\\git\\mingw64\\ssl\\certs\", but the build still fails when trying to get sources from the git repository.\r\n\r\nWe even tried setting the global git config variable \"http.sslVerify\" to \"false\" to completely ignore sslVerification globally on the build server, but the \"get sources\" step always fails with the following error:\r\n\r\n> fatal: unable to access 'https://test-tfs.company.com/tfs/Treasury/TL41%20Industrial%20Facility%20Exemption/_git/TL41%20IFE%20Git/': SSL certificate problem: unable to get local issuer certificate\r\n\r\nWe are not sure what else to do.  Does the agent not support git over ssl with self-signed certificates?\r\n\r\nI have attached the build log for review.\r\n[1_Build.txt](https://github.com/Microsoft/vsts-agent/files/583384/1_Build.txt)\r\n\r\nAnd also the output from the \"git config --list\" command showing the git configuration for the build agent.\r\n![l_2795 tmp](https://cloud.githubusercontent.com/assets/533377/20177602/9a4190e8-a71b-11e6-9ecc-7d9fdc2929c5.PNG)\r\n\r\nWe have also tried manually setting the \"http.sslcainfo\" value in the git config to the explicit location of the cert file, with no effect.\r\n\r\nAny ideas?\r\n"}}
{"actor":{"display_login":"TingluoHuang"}}