Skip to content

Commit 2824a9b

Browse files
Steve DanielsonSteve Danielson
authored andcommitted
Acrolinx
1 parent cb99d27 commit 2824a9b

File tree

1 file changed

+7
-7
lines changed

1 file changed

+7
-7
lines changed

docs/pipelines/agents/certificate.md

Lines changed: 7 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -50,7 +50,7 @@ The agent version 2.125.0 or above has the ability to ignore SSL server certific
5050

5151
> [!IMPORTANT]
5252
>
53-
> Ignoring SSL server certificate validation errors is not secure and not recommended, we highly suggest you install the certificate into your machine certificate store.
53+
> Ignoring SSL server certificate validation errors isn't secure and not recommended, we highly suggest you install the certificate into your machine certificate store.
5454
5555
Pass `--sslskipcertvalidation` during agent configuration
5656
```
@@ -59,23 +59,23 @@ Pass `--sslskipcertvalidation` during agent configuration
5959

6060
> [!NOTE]
6161
>
62-
> There is limitation of using this flag on Linux and macOS
63-
> The `libcurl` library on your Linux or macOS machine needs to built with OpenSSL, [More Detail](https://github.com/dotnet/corefx/issues/9728)
62+
> To use the `--sslskipcertvalidation` flag on Linux and macOS,
63+
> the `libcurl` library on your Linux or macOS machine must be built with OpenSSL. [More information](https://github.com/dotnet/corefx/issues/9728)
6464
6565
### Git get sources fails with SSL certificate problem (Windows agent only)
6666

6767
We ship command-line Git as part of the Windows agent.
68-
We use this copy of Git for all Git related operation.
68+
We use this copy of Git for all Git related operations.
6969
When you have a self-signed SSL certificate for your on-premises Azure DevOps Server machine, make sure to configure the Git we shipped to allow that self-signed SSL certificate.
70-
There are 2 approaches to solve the problem.
70+
There are two approaches to solve the problem.
7171

7272
1. Set the following git config in global level by the agent's run as user.
7373
```bash
7474
git config --global http."https://tfs.com/".sslCAInfo certificate.pem
7575
```
7676
> [!NOTE]
7777
>
78-
> Setting system level Git config is not reliable on Windows. The system `.gitconfig` file is stored with the copy of Git we packaged, which gets replaced whenever the agent is upgraded to a new version.
78+
> Setting system level Git config isn't reliable on Windows. The system `.gitconfig` file is stored with the copy of Git we packaged, which gets replaced whenever the agent is upgraded to a new version.
7979
8080
2. Enable git to use `SChannel` during configure with 2.129.0 or higher version agent
8181
Pass `--gituseschannel` during agent configuration
@@ -117,7 +117,7 @@ When that IIS SSL setting enabled, you need to use version `2.125.0` or newer an
117117
Windows: Windows Credential Store
118118
```
119119
## Verifying Root Certificate Authority Trust
120-
The build agent utilizes Node.js that relies on its own certificate store derived from Mozilla's trusted root certificates. It's crucial that any root certificate used for secure communication is trusted by the Node.js Certificate Authority store. This helps avoid the following errors after updating a certificate on the Azure DevOps Server machine:
120+
The build agent utilizes Node.js that relies on its own certificate store derived from Mozilla's trusted root certificates. It's crucial that any root certificate used for secure communication is trusted by the Node.js Certificate Authority store, which helps avoid the following errors after updating a certificate on the Azure DevOps Server machine:
121121
- unable to get local issuer certificate
122122
- SELF_SIGNED_CERT_IN_CHAIN
123123
- unable to verify the first certificate

0 commit comments

Comments
 (0)