ArtifactoryGenericUpload task fails: certificate has expired

[svetoslavs]

Describe the bug I am using ArtifactoryGenericUpload task in an Azure DevOps pipeline. Today the task started failing with an error message certificate has expired

This is the complete log

Downloading: https://releases.jfrog.io/artifactory/jfrog-cli/v1/1.53.1/jfrog-cli-windows-amd64/jfrog.exe
##[error]Error occurred while executing task:
Failed while attempting to download JFrog CLI from https://releases.jfrog.io/artifactory/jfrog-cli/v1/1.53.1/jfrog-cli-windows-amd64/jfrog.exe. If this build agent cannot access the internet, you may use the 'Artifactory Tools Installer' task, to download JFrog CLI through an Artifactory repository, which proxies https://releases.jfrog.io/artifactory/jfrog-cli/v1/1.53.1/jfrog-cli-windows-amd64/jfrog.exe. You may also manually download version 1.53.1 of JFrog CLI and place it on the agent in the following path: C:\hostedtoolcache\windows\_jfrog\current\jfrog.exe
Error: certificate has expired

To Reproduce Try to use the ArtifactoryGenericUpload in an Azure DevOps pipeline. Observe the error message when the agent tries to download JFrog CLI.

Versions

• JFrog Azure DevOps Extension version: 1.13.5
• Agent operating system: Microsoft Windows Server 2019
• JFrog Artifactory version: using hosted solution as a service (*.jfrog.io)

[RobiNino]

Hi @svetoslavs , Thank you for reporting this issue. We've updated the certificate of JFrog CLI and released the extension with the updated version. We'd appreciate your feedback for it.

[ndajr]

We had this issue, this is because https://github.com/microsoft/azure-pipelines-tool-lib uses nodejs http library, and for some reason it doesn't use the trusted system ca certificates. The solution is to add NODE_EXTRA_CA_CERTS pointing to the default ca path on the agent env