Azure / Azure/webapps-deploy

Deployment fails with Cert Error - UNABLE_TO_GET_ISSUER_CERT_LOCALLY

Open
#450 0 comments 0 reactions 0 assignees View on GitHub
need-to-triage
Dominant language
TypeScript
Stars
338
Forks
234
Avg merge
53m
Merged PRs (30d)
3

Description

We are trying to deploy to Azure WebApp from Github Actions and getting below Cert error from morning. It was all working fine in the past.
We are running on Windows self-hosted runner.

Can you please suggest.

Workflow:
```
- - name: 'Az CLI login'
uses: Azure/login@v1
with:
creds: '{"clientId":"${{ secrets.CLIENT_ID }}","clientSecret":"${{ secrets.CLIENT_SECRET }}","subscriptionId":"${{ secrets.SUBSCRIPTION_ID }}","tenantId":"${{ secrets.TENANT_ID }}"}'
enable-AzPSSession: true

- name: Install dependencies
run: dotnet restore

- name: Build
run: dotnet build --configuration ${{ env.CONFIGURATION }} --no-restore
- name: Test
run: dotnet test --no-restore --verbosity normal --configuration ${{ env.CONFIGURATION }} --filter Category=Unit
- name : Publish
run: dotnet publish --configuration ${{ env.CONFIGURATION }} --property:PublishDir=${{ env.AZURE_API_PACKAGE_PATH }} /p:EnvironmentName=Development

- name: Stop Azure App Service with Azure CLI
run: az webapp stop --name ${{ env.AZURE_APP_SERVICE }} --resource-group ${{ env.RESOURCE_GROUP_NAME }}

- name: 'Run Azure Web App Deploy Action'
uses: azure/webapps-deploy@v2
with:
app-name: ${{ env.AZURE_APP_SERVICE }}
package: '${{ env.AZURE_API_PACKAGE_PATH }}'
publish-profile: ${{ secrets.PUBLISH_PROFILE }}

- name: Start Azure App Service with Azure CLI
run: az webapp start --name ${{ env.AZURE_APP_SERVICE }} --resource-group ${{ env.RESOURCE_GROUP_NAME }}
```

Error during azure/webapps-deploy@v2 task
```
Error: UNABLE_TO_GET_ISSUER_CERT_LOCALLY
Warning: To use a certificate in App Service, the certificate must be signed by a trusted certificate authority. If your web app gives you certificate validation errors, you're probably using a self-signed certificate and to resolve them you need to export variable named ACTIONS_AZURE_REST_IGNORE_SSL_ERRORS to the value true.
Package deployment using ZIP Deploy initiated.
Error: UNABLE_TO_GET_ISSUER_CERT_LOCALLY
Warning: To use a certificate in App Service, the certificate must be signed by a trusted certificate authority. If your web app gives you certificate validation errors, you're probably using a self-signed certificate and to resolve them you need to export variable named ACTIONS_AZURE_REST_IGNORE_SSL_ERRORS to the value true.
Error: Failed to deploy web package to App Service.
Error: Deployment Failed, Error: Failed to deploy web package to App Service.
unable to get local issuer certificate
App Service Application URL: https://test-qa-api.azurewebsites.net/
```

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.