Skip to content

Deployment fails with Cert Error - UNABLE_TO_GET_ISSUER_CERT_LOCALLY #450

@vinaysandela

Description

@vinaysandela

We are trying to deploy to Azure WebApp from Github Actions and getting below Cert error from morning. It was all working fine in the past.
We are running on Windows self-hosted runner.

Can you please suggest.

Workflow:

 -   - name: 'Az CLI login'
        uses: Azure/login@v1
        with:
          creds: '{"clientId":"${{ secrets.CLIENT_ID }}","clientSecret":"${{ secrets.CLIENT_SECRET }}","subscriptionId":"${{ secrets.SUBSCRIPTION_ID }}","tenantId":"${{ secrets.TENANT_ID }}"}'
          enable-AzPSSession: true
     
 - name: Install dependencies
        run: dotnet restore
      
      - name: Build
        run: dotnet build --configuration ${{ env.CONFIGURATION }} --no-restore  
      - name: Test
        run: dotnet test --no-restore --verbosity normal --configuration ${{ env.CONFIGURATION }} --filter Category=Unit   
      - name : Publish
        run: dotnet publish  --configuration ${{ env.CONFIGURATION }} --property:PublishDir=${{ env.AZURE_API_PACKAGE_PATH }} /p:EnvironmentName=Development
      
      - name: Stop Azure App Service with Azure CLI
        run: az webapp stop  --name ${{ env.AZURE_APP_SERVICE }} --resource-group ${{ env.RESOURCE_GROUP_NAME }}
      
      - name: 'Run Azure Web App Deploy Action'
        uses: azure/webapps-deploy@v2
        with:
          app-name: ${{ env.AZURE_APP_SERVICE }}
          package: '${{ env.AZURE_API_PACKAGE_PATH }}'
          publish-profile: ${{ secrets.PUBLISH_PROFILE }}
      
      - name: Start Azure App Service with Azure CLI
        run: az webapp start  --name ${{ env.AZURE_APP_SERVICE }} --resource-group ${{ env.RESOURCE_GROUP_NAME }}

Error during azure/webapps-deploy@v2 task

Error: UNABLE_TO_GET_ISSUER_CERT_LOCALLY
Warning: To use a certificate in App Service, the certificate must be signed by a trusted certificate authority. If your web app gives you certificate validation errors, you're probably using a self-signed certificate and to resolve them you need to export variable named ACTIONS_AZURE_REST_IGNORE_SSL_ERRORS to the value true.
Package deployment using ZIP Deploy initiated.
Error: UNABLE_TO_GET_ISSUER_CERT_LOCALLY
Warning: To use a certificate in App Service, the certificate must be signed by a trusted certificate authority. If your web app gives you certificate validation errors, you're probably using a self-signed certificate and to resolve them you need to export variable named ACTIONS_AZURE_REST_IGNORE_SSL_ERRORS to the value true.
Error: Failed to deploy web package to App Service.
Error: Deployment Failed, Error: Failed to deploy web package to App Service.
unable to get local issuer certificate
App Service Application URL: https://test-qa-api.azurewebsites.net/

Metadata

Metadata

Assignees

No one assigned

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions