Certificate error when trying to publish to the Windows Store

Copper Contributor

We are getting the following certificate error when trying to publish to the Windows store from Azure Devops.

##[error]Failed to upload file! Error = Error: Hostname/IP doesn't match certificate's altnames: "Host: ingestionpackagesprod1.blob.core.windows.net. is not in the cert's altnames: DNS:*.blob.core.windows.net, DNS:*.bn7prdstr01a.store.core.windows.net, DNS:*.blob.storage.azure.net, DNS:*.z1.blob.storage.azure.net, DNS:*.z2.blob.storage.azure.net, DNS:*.z3.blob.storage.azure.net, DNS:*.z4.blob.storage.azure.net, DNS:*.z5.blob.storage.azure.net, DNS:*.z6.blob.storage.azure.net, DNS:*.z7.blob.storage.azure.net, DNS:*.z8.blob.storage.azure.net, DNS:*.z9.blob.storage.azure.net, DNS:*.z10.blob.storage.azure.net, DNS:*.z11.blob.storage.azure.net, DNS:*.z12.blob.storage.azure.net, DNS:*.z13.blob.storage.azure.net, DNS:*.z14.blob.storage.azure.net, DNS:*.z15.blob.storage.azure.net, DNS:*.z16.blob.storage.azure.net, DNS:*.z17.blob.storage.azure.net, DNS:*.z18.blob.storage.azure.net, DNS:*.z19.blob.storage.azure.net, DNS:*.z20.blob.storage.azure.net, DNS:*.z21.blob.storage.azure.net, DNS:*.z22.blob.storage.azure.net, DNS:*.z23.blob.storage.azure.net, DNS:*.z24.blob.storage.azure.net, DNS:*.z25.blob.storage.azure.net, DNS:*.z26.blob.storage.azure.net, DNS:*.z27.blob.storage.azure.net, DNS:*.z28.blob.storage.azure.net, DNS:*.z29.blob.storage.azure.net, DNS:*.z30.blob.storage.azure.net, DNS:*.z31.blob.storage.azure.net, DNS:*.z32.blob.storage.azure.net, DNS:*.z33.blob.storage.azure.net, DNS:*.z34.blob.storage.azure.net, DNS:*.z35.blob.storage.azure.net, DNS:*.z36.blob.storage.azure.net, DNS:*.z37.blob.storage.azure.net, DNS:*.z38.blob.storage.azure.net, DNS:*.z39.blob.storage.azure.net, DNS:*.z40.blob.storage.azure.net, DNS:*.z41.blob.storage.azure.net, DNS:*.z42.blob.storage.azure.net, DNS:*.z43.blob.storage.azure.net, DNS:*.z44.blob.storage.azure.net, DNS:*.z45.blob.storage.azure.net, DNS:*.z46.blob.storage.azure.net, DNS:*.z47.blob.storage.azure.net, DNS:*.z48.blob.storage.azure.net, DNS:*.z49.blob.storage.azure.net, DNS:*.z50.blob.storage.azure.net"

 

The following is the Yaml script we are using:

  - stage: "TestReleaseWindows"
    displayName: "Release Win Prod Store"
    pool:
      vmImage: "ubuntu-latest"
    condition: succeeded()
    dependsOn:
      - Build
      - BuildWindows
    jobs:
      - deployment: ReleaseToMicrosoftStore
        displayName: "Release to MicrosoftStore"
        environment: "Test"
        strategy:
          runOnce:
            deploy:
              steps:
                - task: store-flight@0
                  displayName: Microsoft Store group release
                  inputs:
                    serviceEndpoint: "Microsoft Dev Center"
                    nameType: "AppId"
                    appId: "<id>"
                    flightName: "FlowSuite Package Flight"
                    packagePath: "<path to package files>"
                    deletePackages: true
                    numberOfPackagesToKeep: 0
                    skipPolling: true
                    force: true

 

Is this a known issue and somewhere where I can track it's progress?

3 Replies

@joost_jens 

 

Seems related to the certificate, please verify the name that SSL certificate present, 'CN', 'subject name' even on 'subjectAltNames'

@Kidd_Ip Thanks for the reply. 

Unfortunately this is a microsoft certificate for uploading to the Microsoft store, I don't think there anything I can do about it. I hope Microsoft can fix it.

Update; A colleague of mine informed me that we are using an extension for submitting to the windows store and the problem is reported on the github for that extension already:
https://github.com/microsoft/windows-dev-center-vsts-extension/issues/104