Have big problem då get Archie work with my Git repo on Azure DevOps

[MrGit]

Hi

It's always difficult så set up system to use Git when they are not mainstream. Had the same problem with Oracle Data Modeler. I just can't get the athentization to work. I try to add local empty model to workspace and publish. I don't understand what primary password means. Why doesn't it work the same as VS Code, VS 2022, GiGit Bash or Git Tortoise. Any help would be welcome.

[Phil Beauvoir]

Hi, please provide the exact steps you are doing with more details about the repository and type of connection.

The primary password is required to access other passwords and secure credentials. See https://github.com/archimatetool/archi-modelrepository-plugin/wiki/Setup-and-Configuration#authentication

[MrGit]

Hi, please provide the exact steps you are doing with more details about the repository and type of connection.

The primary password is required to access other passwords and secure credentials. See https://github.com/archimatetool/archi-modelrepository-plugin/wiki/Setup-and-Configuration#authentication

We are using Azure DevOps. We do not use primary password for any of our other git clients.


Step by step

First I create a central repo in Azure DevOps(AZDO)
The name of the repo is archie-test
URL is https://tfs.fi.se/DefaultCollection/FIA/_git/archie-test2

I start with a new empty model in Archie
I save the file on my disc under C:\Temp\rroger.archimate

Under preference I
have my email and name I have my for- and lastname

I choose path for my Collaboration workspace folder
c:\repo\ovriga\archie-test\archie-test



Apply & Close

Now I choose
Add local model to workspace and publish

I choose something simple as my primary password

I type in under New Model Repository
https://tfs.fi.se/DefaultCollection/FIA/_git/archie-test2

My AD username and Password

The following error is displayed
org.eclipse.jgit.api.errors.TransportException: https://tfs.fi.se/DefaultCollection/FIA/_git/archie-test2: Secure connection to https://tfs.fi.se/DefaultCollection/FIA/_git/archie-test2 could not be established because of SSL problems
   at org.eclipse.jgit.api.PushCommand.call(PushCommand.java:159)
   at org.archicontribs.modelrepository.grafico.ArchiRepository.pushToRemote(ArchiRepository.java:211)
   at org.archicontribs.modelrepository.actions.CreateRepoFromModelAction$1.run(CreateRepoFromModelAction.java:124)
   at org.eclipse.jface.operation.ModalContext$ModalContextThread.run(ModalContext.java:122)
Caused by: org.eclipse.jgit.errors.TransportException: https://tfs.fi.se/DefaultCollection/FIA/_git/archie-test2: Secure connection to https://tfs.fi.se/DefaultCollection/FIA/_git/archie-test2 could not be established because of SSL problems
   at org.eclipse.jgit.transport.TransportHttp.handleSslFailure(TransportHttp.java:831)
   at org.eclipse.jgit.transport.TransportHttp.connect(TransportHttp.java:732)
   at org.eclipse.jgit.transport.TransportHttp.connect(TransportHttp.java:627)
   at org.eclipse.jgit.transport.TransportHttp.openPush(TransportHttp.java:541)
   at org.eclipse.jgit.transport.PushProcess.execute(PushProcess.java:138)
   at org.eclipse.jgit.transport.Transport.push(Transport.java:1385)
   at org.eclipse.jgit.api.PushCommand.call(PushCommand.java:149)
   ... 3 more
Caused by: javax.net.ssl.SSLHandshakeException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
   at java.base/sun.security.ssl.Alert.createSSLException(Unknown Source)
   at java.base/sun.security.ssl.TransportContext.fatal(Unknown Source)
   at java.base/sun.security.ssl.TransportContext.fatal(Unknown Source)
   at java.base/sun.security.ssl.TransportContext.fatal(Unknown Source)
   at java.base/sun.security.ssl.CertificateMessage$T12CertificateConsumer.checkServerCerts(Unknown Source)
   at java.base/sun.security.ssl.CertificateStatus$CertificateStatusConsumer.consume(Unknown Source)
   at java.base/sun.security.ssl.SSLHandshake.consume(Unknown Source)
   at java.base/sun.security.ssl.HandshakeContext.dispatch(Unknown Source)
   at java.base/sun.security.ssl.HandshakeContext.dispatch(Unknown Source)
   at java.base/sun.security.ssl.TransportContext.dispatch(Unknown Source)
   at java.base/sun.security.ssl.SSLTransport.decode(Unknown Source)
   at java.base/sun.security.ssl.SSLSocketImpl.decode(Unknown Source)
   at java.base/sun.security.ssl.SSLSocketImpl.readHandshakeRecord(Unknown Source)
   at java.base/sun.security.ssl.SSLSocketImpl.startHandshake(Unknown Source)
   at java.base/sun.security.ssl.SSLSocketImpl.startHandshake(Unknown Source)
   at java.base/sun.net.www.protocol.https.HttpsClient.afterConnect(Unknown Source)
   at java.base/sun.net.www.protocol.https.AbstractDelegateHttpsURLConnection.connect(Unknown Source)
   at java.base/sun.net.www.protocol.http.HttpURLConnection.getInputStream0(Unknown Source)
   at java.base/sun.net.www.protocol.http.HttpURLConnection.getInputStream(Unknown Source)
   at java.base/java.net.HttpURLConnection.getResponseCode(Unknown Source)
   at java.base/sun.net.www.protocol.https.HttpsURLConnectionImpl.getResponseCode(Unknown Source)
   at org.eclipse.jgit.transport.http.JDKHttpConnection.getResponseCode(JDKHttpConnection.java:85)
   at org.eclipse.jgit.util.HttpSupport.response(HttpSupport.java:205)
   at org.eclipse.jgit.transport.TransportHttp.connect(TransportHttp.java:654)
   ... 8 more
Caused by: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
   at java.base/sun.security.validator.PKIXValidator.doBuild(Unknown Source)
   at java.base/sun.security.validator.PKIXValidator.engineValidate(Unknown Source)
   at java.base/sun.security.validator.Validator.validate(Unknown Source)
   at java.base/sun.security.ssl.X509TrustManagerImpl.checkTrusted(Unknown Source)
   at java.base/sun.security.ssl.X509TrustManagerImpl.checkServerTrusted(Unknown Source)
   ... 28 more
Caused by: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
   at java.base/sun.security.provider.certpath.SunCertPathBuilder.build(Unknown Source)
   at java.base/sun.security.provider.certpath.SunCertPathBuilder.engineBuild(Unknown Source)
   at java.base/java.security.cert.CertPathBuilder.build(Unknown Source)
   ... 33 more

Somehting about SSL problems

My .gitconfig is like this
---------
[http]
   sslBackend = schannel
...
   
[safe]
    directory = *

[https]
   sslVerify = false
------

I don't know how I need to approch this problem

[Phil Beauvoir]

Please read the following, it might help:

https://github.com/archimatetool/archi-modelrepository-plugin/issues/70

[MrGit]

Ok, what is the difference for primary password and my AD password. I assume they are not the same. And why must I save the password?

[Phil Beauvoir]

Ok, what is the difference for primary password and my AD password. I assume they are not the same. And why must I save the password?

The primary password secures all of the other encrypted repository passwords (the AD password in your case). You only need to enter the primary password once for the Archi session.