Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Azure DevOps InstallAppleCertificate Fails with OpenSSL Flag -legacy on macOS Agent #130

Open
jaimisdomadiya opened this issue Nov 25, 2024 · 0 comments

Comments

@jaimisdomadiya
Copy link

The InstallAppleCertificate task in Azure DevOps is failing on macOS agents when attempting to parse a valid .p12 certificate. The failure occurs during the OpenSSL command execution with the following error:

pkcs12: Unrecognized flag nodes -legacy pkcs12: Use -help for summary. unable to load certificate 140704446801536:error:0909006C:PEM routines:get_name:no start line:crypto/pem/pem_lib.c:745:Expecting: TRUSTED CERTIFICATE

Steps to Reproduce
Set up an Azure DevOps pipeline using the InstallAppleCertificate task.
Use a valid .p12 certificate file (tested locally and verified to be working).
Add the opensslPkcsArgs: '-legacy' argument to the task to ensure compatibility with legacy certificates.
Run the pipeline on a macOS agent (macOS-15 or macOS-14).

Expected Behavior
The .p12 certificate should be parsed successfully, and the certificate should install without errors.

Actual Behavior
The task fails with the error:
pkcs12: Unrecognized flag nodes -legacy unable to load certificate 140704446801536:error:0909006C:PEM routines:get_name:no start line:crypto/pem/pem_lib.c:745:Expecting: TRUSTED CERTIFICATE

Environment Details
Azure DevOps Pipeline Agent: macOS-15
OpenSSL Version: [Include version after debugging step]
Task Version: InstallAppleCertificate v2.246.5
Certificate: .p12 file verified to be valid locally.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant