TeamCIty Plugin RemoteCertificateChainErrors

Our TeamCity started having problem communicating with Octopus Cloud (https://definely.octopus.app/ ) today. This is blocking all of our deployments.

Here is the full output from the TeamCity build log:

[22:55:57][Octopus Deploy] Running command:   dotnet octo.dll create-release --server https://definely.octopus.app --apikey SECRET --project Define B2X API --enableservicemessages --version develop-0.0.54 --deployto Development --package *:*:develop-0.0.54
[22:55:57][Octopus Deploy] Creating Octopus Deploy release
[22:55:58][Octopus Deploy] Octopus CLI, version 7.4.3383
[22:55:58][Octopus Deploy] 
[22:55:58][Octopus Deploy] Detected automation environment: "TeamCity/2020.2.2"
[22:55:58][Octopus Deploy] The following certificate errors were encountered when establishing the HTTPS connection to the server: RemoteCertificateChainErrors
[22:55:58][Octopus Deploy] Certificate subject name: CN=*.octopus.app
[22:55:58][Octopus Deploy] Certificate thumbprint:   DC37E4163EEE712AB18A1332954AB41CFD8DC0C9
[22:55:59][Octopus Deploy] The following certificate errors were encountered when establishing the HTTPS connection to the server: RemoteCertificateChainErrors
[22:55:59][Octopus Deploy] Certificate subject name: CN=*.octopus.app
[22:55:59][Octopus Deploy] Certificate thumbprint:   DC37E4163EEE712AB18A1332954AB41CFD8DC0C9
[22:56:00][Octopus Deploy] The following certificate errors were encountered when establishing the HTTPS connection to the server: RemoteCertificateChainErrors
[22:56:00][Octopus Deploy] Certificate subject name: CN=*.octopus.app
[22:56:00][Octopus Deploy] Certificate thumbprint:   DC37E4163EEE712AB18A1332954AB41CFD8DC0C9
[22:56:01][Octopus Deploy] The following certificate errors were encountered when establishing the HTTPS connection to the server: RemoteCertificateChainErrors
[22:56:01][Octopus Deploy] Certificate subject name: CN=*.octopus.app
[22:56:01][Octopus Deploy] Certificate thumbprint:   DC37E4163EEE712AB18A1332954AB41CFD8DC0C9
[22:56:02][Octopus Deploy] The following certificate errors were encountered when establishing the HTTPS connection to the server: RemoteCertificateChainErrors
[22:56:02][Octopus Deploy] Certificate subject name: CN=*.octopus.app
[22:56:02][Octopus Deploy] Certificate thumbprint:   DC37E4163EEE712AB18A1332954AB41CFD8DC0C9
[22:56:03][Octopus Deploy] The following certificate errors were encountered when establishing the HTTPS connection to the server: RemoteCertificateChainErrors
[22:56:03][Octopus Deploy] Certificate subject name: CN=*.octopus.app
[22:56:03][Octopus Deploy] Certificate thumbprint:   DC37E4163EEE712AB18A1332954AB41CFD8DC0C9
[22:56:04][Octopus Deploy] The following certificate errors were encountered when establishing the HTTPS connection to the server: RemoteCertificateChainErrors
[22:56:04][Octopus Deploy] Certificate subject name: CN=*.octopus.app
[22:56:04][Octopus Deploy] Certificate thumbprint:   DC37E4163EEE712AB18A1332954AB41CFD8DC0C9
[22:56:05][Octopus Deploy] The following certificate errors were encountered when establishing the HTTPS connection to the server: RemoteCertificateChainErrors
[22:56:05][Octopus Deploy] Certificate subject name: CN=*.octopus.app
[22:56:05][Octopus Deploy] Certificate thumbprint:   DC37E4163EEE712AB18A1332954AB41CFD8DC0C9
[22:56:07][Octopus Deploy] The following certificate errors were encountered when establishing the HTTPS connection to the server: RemoteCertificateChainErrors
[22:56:07][Octopus Deploy] Certificate subject name: CN=*.octopus.app
[22:56:07][Octopus Deploy] Certificate thumbprint:   DC37E4163EEE712AB18A1332954AB41CFD8DC0C9
[22:56:08][Octopus Deploy] The following certificate errors were encountered when establishing the HTTPS connection to the server: RemoteCertificateChainErrors
[22:56:08][Octopus Deploy] Certificate subject name: CN=*.octopus.app
[22:56:08][Octopus Deploy] Certificate thumbprint:   DC37E4163EEE712AB18A1332954AB41CFD8DC0C9
[22:56:09][Octopus Deploy] The following certificate errors were encountered when establishing the HTTPS connection to the server: RemoteCertificateChainErrors
[22:56:09][Octopus Deploy] Certificate subject name: CN=*.octopus.app
[22:56:09][Octopus Deploy] Certificate thumbprint:   DC37E4163EEE712AB18A1332954AB41CFD8DC0C9
[22:56:10][Octopus Deploy] The following certificate errors were encountered when establishing the HTTPS connection to the server: RemoteCertificateChainErrors
[22:56:10][Octopus Deploy] Certificate subject name: CN=*.octopus.app
[22:56:10][Octopus Deploy] Certificate thumbprint:   DC37E4163EEE712AB18A1332954AB41CFD8DC0C9
[22:56:11][Octopus Deploy] The following certificate errors were encountered when establishing the HTTPS connection to the server: RemoteCertificateChainErrors
[22:56:11][Octopus Deploy] Certificate subject name: CN=*.octopus.app
[22:56:11][Octopus Deploy] Certificate thumbprint:   DC37E4163EEE712AB18A1332954AB41CFD8DC0C9
[22:56:12][Octopus Deploy] The following certificate errors were encountered when establishing the HTTPS connection to the server: RemoteCertificateChainErrors
[22:56:12][Octopus Deploy] Certificate subject name: CN=*.octopus.app
[22:56:12][Octopus Deploy] Certificate thumbprint:   DC37E4163EEE712AB18A1332954AB41CFD8DC0C9
[22:56:13][Octopus Deploy] The following certificate errors were encountered when establishing the HTTPS connection to the server: RemoteCertificateChainErrors
[22:56:13][Octopus Deploy] Certificate subject name: CN=*.octopus.app
[22:56:13][Octopus Deploy] Certificate thumbprint:   DC37E4163EEE712AB18A1332954AB41CFD8DC0C9
[22:56:14][Octopus Deploy] The following certificate errors were encountered when establishing the HTTPS connection to the server: RemoteCertificateChainErrors
[22:56:14][Octopus Deploy] Certificate subject name: CN=*.octopus.app
[22:56:14][Octopus Deploy] Certificate thumbprint:   DC37E4163EEE712AB18A1332954AB41CFD8DC0C9
[22:56:15][Octopus Deploy] The following certificate errors were encountered when establishing the HTTPS connection to the server: RemoteCertificateChainErrors
[22:56:15][Octopus Deploy] Certificate subject name: CN=*.octopus.app
[22:56:15][Octopus Deploy] Certificate thumbprint:   DC37E4163EEE712AB18A1332954AB41CFD8DC0C9
[22:56:16][Octopus Deploy] The following certificate errors were encountered when establishing the HTTPS connection to the server: RemoteCertificateChainErrors
[22:56:16][Octopus Deploy] Certificate subject name: CN=*.octopus.app
[22:56:16][Octopus Deploy] Certificate thumbprint:   DC37E4163EEE712AB18A1332954AB41CFD8DC0C9
[22:56:17][Octopus Deploy] The following certificate errors were encountered when establishing the HTTPS connection to the server: RemoteCertificateChainErrors
[22:56:17][Octopus Deploy] Certificate subject name: CN=*.octopus.app
[22:56:17][Octopus Deploy] Certificate thumbprint:   DC37E4163EEE712AB18A1332954AB41CFD8DC0C9
[22:56:18][Octopus Deploy] The following certificate errors were encountered when establishing the HTTPS connection to the server: RemoteCertificateChainErrors
[22:56:18][Octopus Deploy] Certificate subject name: CN=*.octopus.app
[22:56:18][Octopus Deploy] Certificate thumbprint:   DC37E4163EEE712AB18A1332954AB41CFD8DC0C9
[22:56:19][Octopus Deploy] The following certificate errors were encountered when establishing the HTTPS connection to the server: RemoteCertificateChainErrors
[22:56:19][Octopus Deploy] Certificate subject name: CN=*.octopus.app
[22:56:19][Octopus Deploy] Certificate thumbprint:   DC37E4163EEE712AB18A1332954AB41CFD8DC0C9
[22:56:20][Octopus Deploy] The following certificate errors were encountered when establishing the HTTPS connection to the server: RemoteCertificateChainErrors
[22:56:20][Octopus Deploy] Certificate subject name: CN=*.octopus.app
[22:56:20][Octopus Deploy] Certificate thumbprint:   DC37E4163EEE712AB18A1332954AB41CFD8DC0C9
[22:56:21][Octopus Deploy] The following certificate errors were encountered when establishing the HTTPS connection to the server: RemoteCertificateChainErrors
[22:56:21][Octopus Deploy] Certificate subject name: CN=*.octopus.app
[22:56:21][Octopus Deploy] Certificate thumbprint:   DC37E4163EEE712AB18A1332954AB41CFD8DC0C9
[22:56:22][Octopus Deploy] The following certificate errors were encountered when establishing the HTTPS connection to the server: RemoteCertificateChainErrors
[22:56:22][Octopus Deploy] Certificate subject name: CN=*.octopus.app
[22:56:22][Octopus Deploy] Certificate thumbprint:   DC37E4163EEE712AB18A1332954AB41CFD8DC0C9
[22:56:23][Octopus Deploy] The following certificate errors were encountered when establishing the HTTPS connection to the server: RemoteCertificateChainErrors
[22:56:23][Octopus Deploy] Certificate subject name: CN=*.octopus.app
[22:56:23][Octopus Deploy] Certificate thumbprint:   DC37E4163EEE712AB18A1332954AB41CFD8DC0C9
[22:56:24][Octopus Deploy] The following certificate errors were encountered when establishing the HTTPS connection to the server: RemoteCertificateChainErrors
[22:56:24][Octopus Deploy] Certificate subject name: CN=*.octopus.app
[22:56:24][Octopus Deploy] Certificate thumbprint:   DC37E4163EEE712AB18A1332954AB41CFD8DC0C9
[22:56:25][Octopus Deploy] The following certificate errors were encountered when establishing the HTTPS connection to the server: RemoteCertificateChainErrors
[22:56:25][Octopus Deploy] Certificate subject name: CN=*.octopus.app
[22:56:25][Octopus Deploy] Certificate thumbprint:   DC37E4163EEE712AB18A1332954AB41CFD8DC0C9
[22:56:26][Octopus Deploy] The following certificate errors were encountered when establishing the HTTPS connection to the server: RemoteCertificateChainErrors
[22:56:26][Octopus Deploy] Certificate subject name: CN=*.octopus.app
[22:56:26][Octopus Deploy] Certificate thumbprint:   DC37E4163EEE712AB18A1332954AB41CFD8DC0C9
[22:56:27][Octopus Deploy] The following certificate errors were encountered when establishing the HTTPS connection to the server: RemoteCertificateChainErrors
[22:56:27][Octopus Deploy] Certificate subject name: CN=*.octopus.app
[22:56:27][Octopus Deploy] Certificate thumbprint:   DC37E4163EEE712AB18A1332954AB41CFD8DC0C9
[22:56:28][Octopus Deploy] The following certificate errors were encountered when establishing the HTTPS connection to the server: RemoteCertificateChainErrors
[22:56:28][Octopus Deploy] Certificate subject name: CN=*.octopus.app
[22:56:28][Octopus Deploy] Certificate thumbprint:   DC37E4163EEE712AB18A1332954AB41CFD8DC0C9
[22:56:30][Octopus Deploy] The following certificate errors were encountered when establishing the HTTPS connection to the server: RemoteCertificateChainErrors
[22:56:30][Octopus Deploy] Certificate subject name: CN=*.octopus.app
[22:56:30][Octopus Deploy] Certificate thumbprint:   DC37E4163EEE712AB18A1332954AB41CFD8DC0C9
[22:56:31][Octopus Deploy] The following certificate errors were encountered when establishing the HTTPS connection to the server: RemoteCertificateChainErrors
[22:56:31][Octopus Deploy] Certificate subject name: CN=*.octopus.app
[22:56:31][Octopus Deploy] Certificate thumbprint:   DC37E4163EEE712AB18A1332954AB41CFD8DC0C9
[22:56:32][Octopus Deploy] The following certificate errors were encountered when establishing the HTTPS connection to the server: RemoteCertificateChainErrors
[22:56:32][Octopus Deploy] Certificate subject name: CN=*.octopus.app
[22:56:32][Octopus Deploy] Certificate thumbprint:   DC37E4163EEE712AB18A1332954AB41CFD8DC0C9
[22:56:33][Octopus Deploy] The following certificate errors were encountered when establishing the HTTPS connection to the server: RemoteCertificateChainErrors
[22:56:33][Octopus Deploy] Certificate subject name: CN=*.octopus.app
[22:56:33][Octopus Deploy] Certificate thumbprint:   DC37E4163EEE712AB18A1332954AB41CFD8DC0C9
[22:56:34][Octopus Deploy] The following certificate errors were encountered when establishing the HTTPS connection to the server: RemoteCertificateChainErrors
[22:56:34][Octopus Deploy] Certificate subject name: CN=*.octopus.app
[22:56:34][Octopus Deploy] Certificate thumbprint:   DC37E4163EEE712AB18A1332954AB41CFD8DC0C9
[22:56:35][Octopus Deploy] The following certificate errors were encountered when establishing the HTTPS connection to the server: RemoteCertificateChainErrors
[22:56:35][Octopus Deploy] Certificate subject name: CN=*.octopus.app
[22:56:35][Octopus Deploy] Certificate thumbprint:   DC37E4163EEE712AB18A1332954AB41CFD8DC0C9
[22:56:36][Octopus Deploy] The following certificate errors were encountered when establishing the HTTPS connection to the server: RemoteCertificateChainErrors
[22:56:36][Octopus Deploy] Certificate subject name: CN=*.octopus.app
[22:56:36][Octopus Deploy] Certificate thumbprint:   DC37E4163EEE712AB18A1332954AB41CFD8DC0C9
[22:56:37][Octopus Deploy] The following certificate errors were encountered when establishing the HTTPS connection to the server: RemoteCertificateChainErrors
[22:56:37][Octopus Deploy] Certificate subject name: CN=*.octopus.app
[22:56:37][Octopus Deploy] Certificate thumbprint:   DC37E4163EEE712AB18A1332954AB41CFD8DC0C9
[22:56:38][Octopus Deploy] The following certificate errors were encountered when establishing the HTTPS connection to the server: RemoteCertificateChainErrors
[22:56:38][Octopus Deploy] Certificate subject name: CN=*.octopus.app
[22:56:38][Octopus Deploy] Certificate thumbprint:   DC37E4163EEE712AB18A1332954AB41CFD8DC0C9
[22:56:39][Octopus Deploy] The following certificate errors were encountered when establishing the HTTPS connection to the server: RemoteCertificateChainErrors
[22:56:39][Octopus Deploy] Certificate subject name: CN=*.octopus.app
[22:56:39][Octopus Deploy] Certificate thumbprint:   DC37E4163EEE712AB18A1332954AB41CFD8DC0C9
[22:56:40][Octopus Deploy] The following certificate errors were encountered when establishing the HTTPS connection to the server: RemoteCertificateChainErrors
[22:56:40][Octopus Deploy] Certificate subject name: CN=*.octopus.app
[22:56:40][Octopus Deploy] Certificate thumbprint:   DC37E4163EEE712AB18A1332954AB41CFD8DC0C9
[22:56:41][Octopus Deploy] The following certificate errors were encountered when establishing the HTTPS connection to the server: RemoteCertificateChainErrors
[22:56:41][Octopus Deploy] Certificate subject name: CN=*.octopus.app
[22:56:41][Octopus Deploy] Certificate thumbprint:   DC37E4163EEE712AB18A1332954AB41CFD8DC0C9
[22:56:42][Octopus Deploy] The following certificate errors were encountered when establishing the HTTPS connection to the server: RemoteCertificateChainErrors
[22:56:42][Octopus Deploy] Certificate subject name: CN=*.octopus.app
[22:56:42][Octopus Deploy] Certificate thumbprint:   DC37E4163EEE712AB18A1332954AB41CFD8DC0C9
[22:56:43][Octopus Deploy] The following certificate errors were encountered when establishing the HTTPS connection to the server: RemoteCertificateChainErrors
[22:56:43][Octopus Deploy] Certificate subject name: CN=*.octopus.app
[22:56:43][Octopus Deploy] Certificate thumbprint:   DC37E4163EEE712AB18A1332954AB41CFD8DC0C9
[22:56:44][Octopus Deploy] The following certificate errors were encountered when establishing the HTTPS connection to the server: RemoteCertificateChainErrors
[22:56:44][Octopus Deploy] Certificate subject name: CN=*.octopus.app
[22:56:44][Octopus Deploy] Certificate thumbprint:   DC37E4163EEE712AB18A1332954AB41CFD8DC0C9
[22:56:45][Octopus Deploy] The following certificate errors were encountered when establishing the HTTPS connection to the server: RemoteCertificateChainErrors
[22:56:45][Octopus Deploy] Certificate subject name: CN=*.octopus.app
[22:56:45][Octopus Deploy] Certificate thumbprint:   DC37E4163EEE712AB18A1332954AB41CFD8DC0C9
[22:56:46][Octopus Deploy] The following certificate errors were encountered when establishing the HTTPS connection to the server: RemoteCertificateChainErrors
[22:56:46][Octopus Deploy] Certificate subject name: CN=*.octopus.app
[22:56:46][Octopus Deploy] Certificate thumbprint:   DC37E4163EEE712AB18A1332954AB41CFD8DC0C9
[22:56:47][Octopus Deploy] The following certificate errors were encountered when establishing the HTTPS connection to the server: RemoteCertificateChainErrors
[22:56:47][Octopus Deploy] Certificate subject name: CN=*.octopus.app
[22:56:47][Octopus Deploy] Certificate thumbprint:   DC37E4163EEE712AB18A1332954AB41CFD8DC0C9
[22:56:48][Octopus Deploy] The following certificate errors were encountered when establishing the HTTPS connection to the server: RemoteCertificateChainErrors
[22:56:48][Octopus Deploy] Certificate subject name: CN=*.octopus.app
[22:56:48][Octopus Deploy] Certificate thumbprint:   DC37E4163EEE712AB18A1332954AB41CFD8DC0C9
[22:56:49][Octopus Deploy] The following certificate errors were encountered when establishing the HTTPS connection to the server: RemoteCertificateChainErrors
[22:56:49][Octopus Deploy] Certificate subject name: CN=*.octopus.app
[22:56:49][Octopus Deploy] Certificate thumbprint:   DC37E4163EEE712AB18A1332954AB41CFD8DC0C9
[22:56:50][Octopus Deploy] The following certificate errors were encountered when establishing the HTTPS connection to the server: RemoteCertificateChainErrors
[22:56:50][Octopus Deploy] Certificate subject name: CN=*.octopus.app
[22:56:50][Octopus Deploy] Certificate thumbprint:   DC37E4163EEE712AB18A1332954AB41CFD8DC0C9
[22:56:51][Octopus Deploy] The following certificate errors were encountered when establishing the HTTPS connection to the server: RemoteCertificateChainErrors
[22:56:51][Octopus Deploy] Certificate subject name: CN=*.octopus.app
[22:56:51][Octopus Deploy] Certificate thumbprint:   DC37E4163EEE712AB18A1332954AB41CFD8DC0C9
[22:56:52][Octopus Deploy] The following certificate errors were encountered when establishing the HTTPS connection to the server: RemoteCertificateChainErrors
[22:56:52][Octopus Deploy] Certificate subject name: CN=*.octopus.app
[22:56:52][Octopus Deploy] Certificate thumbprint:   DC37E4163EEE712AB18A1332954AB41CFD8DC0C9
[22:56:54][Octopus Deploy] The following certificate errors were encountered when establishing the HTTPS connection to the server: RemoteCertificateChainErrors
[22:56:54][Octopus Deploy] Certificate subject name: CN=*.octopus.app
[22:56:54][Octopus Deploy] Certificate thumbprint:   DC37E4163EEE712AB18A1332954AB41CFD8DC0C9
[22:56:55][Octopus Deploy] The following certificate errors were encountered when establishing the HTTPS connection to the server: RemoteCertificateChainErrors
[22:56:55][Octopus Deploy] Certificate subject name: CN=*.octopus.app
[22:56:55][Octopus Deploy] Certificate thumbprint:   DC37E4163EEE712AB18A1332954AB41CFD8DC0C9
[22:56:56][Octopus Deploy] The following certificate errors were encountered when establishing the HTTPS connection to the server: RemoteCertificateChainErrors
[22:56:56][Octopus Deploy] Certificate subject name: CN=*.octopus.app
[22:56:56][Octopus Deploy] Certificate thumbprint:   DC37E4163EEE712AB18A1332954AB41CFD8DC0C9
[22:56:57][Octopus Deploy] The following certificate errors were encountered when establishing the HTTPS connection to the server: RemoteCertificateChainErrors
[22:56:57][Octopus Deploy] Certificate subject name: CN=*.octopus.app
[22:56:57][Octopus Deploy] Certificate thumbprint:   DC37E4163EEE712AB18A1332954AB41CFD8DC0C9
[22:56:58][Octopus Deploy] The following certificate errors were encountered when establishing the HTTPS connection to the server: RemoteCertificateChainErrors
[22:56:58][Octopus Deploy] Certificate subject name: CN=*.octopus.app
[22:56:58][Octopus Deploy] Certificate thumbprint:   DC37E4163EEE712AB18A1332954AB41CFD8DC0C9
[22:56:59][Octopus Deploy] 
[22:56:59][Octopus Deploy] System.Exception: Unable to connect to the Octopus Deploy server. See the inner exception for details.
[22:56:59][Octopus Deploy]  ---> System.Net.Http.HttpRequestException: The SSL connection could not be established, see inner exception.
[22:56:59][Octopus Deploy]  ---> System.Security.Authentication.AuthenticationException: The remote certificate was rejected by the provided RemoteCertificateValidationCallback.
[22:56:59][Octopus Deploy]    at System.Net.Security.SslStream.SendAuthResetSignal(ProtocolToken message, ExceptionDispatchInfo exception)
[22:56:59][Octopus Deploy]    at System.Net.Security.SslStream.ForceAuthenticationAsync[TIOAdapter](TIOAdapter adapter, Boolean receiveFirst, Byte[] reAuthenticationData, Boolean isApm)
[22:56:59][Octopus Deploy]    at System.Net.Http.ConnectHelper.EstablishSslConnectionAsyncCore(Boolean async, Stream stream, SslClientAuthenticationOptions sslOptions, CancellationToken cancellationToken)
[22:56:59][Octopus Deploy]    --- End of inner exception stack trace ---
[22:56:59][Octopus Deploy]    at System.Net.Http.ConnectHelper.EstablishSslConnectionAsyncCore(Boolean async, Stream stream, SslClientAuthenticationOptions sslOptions, CancellationToken cancellationToken)
[22:56:59][Octopus Deploy]    at System.Net.Http.HttpConnectionPool.ConnectAsync(HttpRequestMessage request, Boolean async, CancellationToken cancellationToken)
[22:56:59][Octopus Deploy]    at System.Net.Http.HttpConnectionPool.CreateHttp11ConnectionAsync(HttpRequestMessage request, Boolean async, CancellationToken cancellationToken)
[22:56:59][Octopus Deploy]    at System.Net.Http.HttpConnectionPool.GetHttpConnectionAsync(HttpRequestMessage request, Boolean async, CancellationToken cancellationToken)
[22:56:59][Octopus Deploy]    at System.Net.Http.HttpConnectionPool.SendWithRetryAsync(HttpRequestMessage request, Boolean async, Boolean doRequestAuth, CancellationToken cancellationToken)
[22:56:59][Octopus Deploy]    at System.Net.Http.AuthenticationHelper.SendWithAuthAsync(HttpRequestMessage request, Uri authUri, Boolean async, ICredentials credentials, Boolean preAuthenticate, Boolean isProxyAuth, Boolean doRequestAuth, HttpConnectionPool pool, CancellationToken cancellationToken)
[22:56:59][Octopus Deploy]    at System.Net.Http.RedirectHandler.SendAsync(HttpRequestMessage request, Boolean async, CancellationToken cancellationToken)
[22:56:59][Octopus Deploy]    at System.Net.Http.HttpClient.SendAsyncCore(HttpRequestMessage request, HttpCompletionOption completionOption, Boolean async, Boolean emitTelemetryStartStop, CancellationToken cancellationToken)
[22:56:59][Octopus Deploy]    at Octopus.Client.OctopusAsyncClient.DispatchRequest[TResponseResource](OctopusRequest request, Boolean readResponse)
[22:56:59][Octopus Deploy]    at Octopus.Client.OctopusAsyncClient.Get[TResource](String path, Object pathParameters)
[22:56:59][Octopus Deploy]    at Octopus.Client.OctopusAsyncRepository.LoadRootDocumentInner()
[22:56:59][Octopus Deploy]    --- End of inner exception stack trace ---
[22:56:59][Octopus Deploy]    at Octopus.Client.OctopusAsyncRepository.LoadRootDocumentInner()
[22:56:59][Octopus Deploy]    at Octopus.Client.OctopusAsyncClient.Create(OctopusServerEndpoint serverEndpoint, OctopusClientOptions options, Boolean addHandler, String requestingTool)
[22:56:59][Octopus Deploy]    at Octopus.Client.OctopusAsyncClient.Create(OctopusServerEndpoint serverEndpoint, OctopusClientOptions options, String requestingTool)
[22:56:59][Octopus Deploy]    at Octopus.Cli.Commands.ApiCommand.Execute(String[] commandLineArguments) in C:\BuildAgent\work\289bf0fca31007af\source\Octopus.Cli\Commands\ApiCommand.cs:line 177
[22:56:59][Octopus Deploy]    at Octopus.Cli.CliProgram.Run(String[] args) in C:\BuildAgent\work\289bf0fca31007af\source\Octopus.Cli\CliProgram.cs:line 53
[22:56:59][Octopus Deploy] Exit code: -3
[22:56:59][Octopus Deploy] octo exit code: 253
[22:56:17][Step 4/4] Unable to create or deploy release. Please check the build log for details on the error.
[22:56:59][Step 4/4] Unable to create or deploy release. Please check the build log for details on the error.
[22:56:59][Step 4/4] Step Create Release in Octopus Deploy (OctopusDeploy: Create release) failed

Hi @alexey1,

Thanks for reaching out, sorry to hear you’re having trouble with the Team City integration!

Apologies for the stream of questions below, I’m keen to get to the bottom of this and get your deployments unblocked.

We have seen similar issues in the past where an out-of-date Root CA package caused this error. Could you please confirm that all the instances CA packages are up-to-date? (TeamCity Server, Build Agents etc)

Do you use these instances often or have they been turned off for some time?

Could you please confirm which TeamCity plugin version you are using? Updating to the latest version could potentially resolve this.

Another possible cause could be the TeamCity server’s system clock, could you please confirm that this is in sync.

I’ve reached out internally and will keep you posted with any updates.

Best Regards,

Hi @alexey1,

Apologies for the double message.

I forgot to mention that it could be an expired API key causing this issue, could you please confirm that they are all up to date?

Best Regards,

Hi Finnian,

Thank you for your response.

Could you please confirm that all the instances CA packages are up-to-date? (TeamCity Server, Build Agents etc)

I have manually updated certificates by running sudo update-ca-certificates on the build agent. TeamCity is running on Windows Server.

Do you use these instances often or have they been turned off for some time?

Yes, we do use it often. Yesterday everything was working as expected till the noon UTC, then the builds started failing. The build agent and TeamCity server have not been off.

Could you please confirm which TeamCity plugin version you are using? Updating to the latest version could potentially resolve this.

We are using the latest version of the TeamCity plugin v6.1.5

Another possible cause could be the TeamCity server’s system clock, could you please confirm that this is in sync.

Both Teamcity server and build agent are in sync.

I forgot to mention that it could be an expired API key causing this issue, could you please confirm that they are all up to date?

The API key has not been expired.

Also, I downloaded the latest version of the Octopus CLI and was able to successfully connect to the Octopus Server from both Teamcity server and the build agent.

We were able to work around the issue by adding the argument --ignoreSslErrors for the octopus cli-tool.

Hi @alexey1!

Just jumping in for Finnian here, as he’s currently offline as a member of our Australian-based team.

Very strange that you’re getting these errors - all of our certificates in that chain are coming up as valid. Are you able to jump onto that build agent, and run the following command:

openssl s_client -showcerts -connect definely.octopus.app:443

Which should show an output similar to

CONNECTED(00000005)
depth=3 C = GB, ST = Greater Manchester, L = Salford, O = Comodo CA Limited, CN = AAA Certificate Services
verify return:1
depth=2 C = US, ST = New Jersey, L = Jersey City, O = The USERTRUST Network, CN = USERTrust RSA Certification Authority
verify return:1
depth=1 C = GB, ST = Greater Manchester, L = Salford, O = Sectigo Limited, CN = Sectigo RSA Domain Validation Secure Server CA
verify return:1
depth=0 CN = *.octopus.app
verify return:1
---
Certificate chain
 0 s:/CN=*.octopus.app
   i:/C=GB/ST=Greater Manchester/L=Salford/O=Sectigo Limited/CN=Sectigo RSA Domain Validation Secure Server CA
-----BEGIN CERTIFICATE-----
MIIFtjCCBJ6gAwIBAgIQCcraqdC1iNXBcBpdTenWNzANBgkqhkiG9w0BAQsFADCB
jzELMAkGA1UEBhMCR0IxGzAZBgNVBAgTEkdyZWF0ZXIgTWFuY2hlc3RlcjEQMA4G

If you wanted to dig further, you could run those certificates (each one between the BEGIN CERTIFICATE and END CERTIFICATE lines, inclusive, through OpenSSL to get the expiry dates etc.

> cat cert1.txt | openssl x509 -noout -subject -dates
subject= /CN=*.octopus.app
notBefore=Mar 15 00:00:00 2021 GMT
notAfter=Mar 15 23:59:59 2022 GMT

> cat cert2.txt | openssl x509 -noout -subject -dates
subject= /C=GB/ST=Greater Manchester/L=Salford/O=Sectigo Limited/CN=Sectigo RSA Domain Validation Secure Server CA
notBefore=Nov  2 00:00:00 2018 GMT
notAfter=Dec 31 23:59:59 2030 GMT

> cat cert4 | openssl x509 -noout -subject -dates                                                                                                                                                                                                                  
subject= /C=US/ST=New Jersey/L=Jersey City/O=The USERTRUST Network/CN=USERTrust RSA Certification Authority
notBefore=Mar 12 00:00:00 2019 GMT
notAfter=Dec 31 23:59:59 2028 GMT

I hope this helps with your investigation!

Hi Justin,

Thank you for jumping in :slight_smile: ! Here is the output:

CONNECTED(00000003)
---
Certificate chain
 0 s:CN = *.octopus.app
   i:C = GB, ST = Greater Manchester, L = Salford, O = Sectigo Limited, CN = Sectigo RSA Domain Validation Secure Server CA
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
 1 s:C = GB, ST = Greater Manchester, L = Salford, O = Sectigo Limited, CN = Sectigo RSA Domain Validation Secure Server CA
   i:C = US, ST = New Jersey, L = Jersey City, O = The USERTRUST Network, CN = USERTrust RSA Certification Authority
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
 2 s:C = US, ST = New Jersey, L = Jersey City, O = The USERTRUST Network, CN = USERTrust RSA Certification Authority
   i:C = GB, ST = Greater Manchester, L = Salford, O = Comodo CA Limited, CN = AAA Certificate Services
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIQOXJEOvkit1HX02wQ3TE1lTANBgkqhkiG9w0BAQwFADB7
MQswCQYDVQQGEwJHQjEbMBkGA1UECAwSR3JlYXRlciBNYW5jaGVzdGVyMRAwDgYD
VQQHDAdTYWxmb3JkMRowGAYDVQQKDBFDb21vZG8gQ0EgTGltaXRlZDEhMB8GA1UE
AwwYQUFBIENlcnRpZmljYXRlIFNlcnZpY2VzMB4XDTE5MDMxMjAwMDAwMFoXDTI4
MTIzMTIzNTk1OVowgYgxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpOZXcgSmVyc2V5
MRQwEgYDVQQHEwtKZXJzZXkgQ2l0eTEeMBwGA1UEChMVVGhlIFVTRVJUUlVTVCBO
ZXR3b3JrMS4wLAYDVQQDEyVVU0VSVHJ1c3QgUlNBIENlcnRpZmljYXRpb24gQXV0
aG9yaXR5MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAgBJlFzYOw9sI
s9CsVw127c0n00ytUINh4qogTQktZAnczomfzD2p7PbPwdzx07HWezcoEStH2jnG
vDoZtF+mvX2do2NCtnbyqTsrkfjib9DsFiCQCT7i6HTJGLSR1GJk23+jBvGIGGqQ
Ijy8/hPwhxR79uQfjtTkUcYRZ0YIUcuGFFQ/vDP+fmyc/xadGL1RjjWmp2bIcmfb
IWax1Jt4A8BQOujM8Ny8nkz+rwWWNR9XWrf/zvk9tyy29lTdyOcSOk2uTIq3XJq0
tyA9yn8iNK5+O2hmAUTnAU5GU5szYPeUvlM3kHND8zLDU+/bqv50TmnHa4xgk97E
xwzf4TKuzJM7UXiVZ4vuPVb+DNBpDxsP8yUmazNt925H+nND5X4OpWaxKXwyhGNV
icQNwZNUMBkTrNN9N6frXTpsNVzbQdcS2qlJC9/YgIoJk2KOtWbPJYjNhLixP6Q5
D9kCnusSTJV882sFqV4Wg8y4Z+LoE53MW4LTTLPtW//e5XOsIzstAL81VXQJSdhJ
WBp/kjbmUZIO8yZ9HE0XvMnsQybQv0FfQKlERPSZ51eHnlAfV1SoPv10Yy+xUGUJ
5lhCLkMaTLTwJUdZ+gQek9QmRkpQgbLevni3/GcV4clXhB4PY9bpYrrWX1Uu6lzG
KAgEJTm4Diup8kyXHAc/DVL17e8vgg8CAwEAAaOB8jCB7zAfBgNVHSMEGDAWgBSg
EQojPpbxB+zirynvgqV/0DCktDAdBgNVHQ4EFgQUU3m/WqorSs9UgOHYm8Cd8rID
ZsswDgYDVR0PAQH/BAQDAgGGMA8GA1UdEwEB/wQFMAMBAf8wEQYDVR0gBAowCDAG
BgRVHSAAMEMGA1UdHwQ8MDowOKA2oDSGMmh0dHA6Ly9jcmwuY29tb2RvY2EuY29t
L0FBQUNlcnRpZmljYXRlU2VydmljZXMuY3JsMDQGCCsGAQUFBwEBBCgwJjAkBggr
BgEFBQcwAYYYaHR0cDovL29jc3AuY29tb2RvY2EuY29tMA0GCSqGSIb3DQEBDAUA
A4IBAQAYh1HcdCE9nIrgJ7cz0C7M7PDmy14R3iJvm3WOnnL+5Nb+qh+cli3vA0p+
rvSNb3I8QzvAP+u431yqqcau8vzY7qN7Q/aGNnwU4M309z/+3ri0ivCRlv79Q2R+
/czSAaF9ffgZGclCKxO/WIu6pKJmBHaIkU4MiRTOok3JMrO66BQavHHxW/BBC5gA
CiIDEOUMsfnNkjcZ7Tvx5Dq2+UUTJnWvu6rvP3t3O9LEApE9GQDTF1w52z97GA1F
zZOFli9d31kWTz9RvdVFGD/tSo7oBmF0Ixa1DVBzJ0RHfxBdiSprhTEUxOipakyA
vGp4z7h/jnZymQyd/teRCBaho1+V
-----END CERTIFICATE-----
---
Server certificate
subject=CN = *.octopus.app

issuer=C = GB, ST = Greater Manchester, L = Salford, O = Sectigo Limited, CN = Sectigo RSA Domain Validation Secure Server CA

---
No client certificate CA names sent
Peer signing digest: SHA256
Peer signature type: RSA-PSS
Server Temp Key: X25519, 253 bits
---
SSL handshake has read 4926 bytes and written 405 bytes
Verification: OK
---
New, TLSv1.2, Cipher is ECDHE-RSA-AES256-GCM-SHA384
Server public key is 2048 bit
Secure Renegotiation IS supported
Compression: NONE
Expansion: NONE
No ALPN negotiated
SSL-Session:
    Protocol  : TLSv1.2
    Cipher    : ECDHE-RSA-AES256-GCM-SHA384
    Session-ID: 7AC0894BFEB0FAE607027D76358152D964258D7A6717879E067E5B503DC03AA0
    Session-ID-ctx:
    Master-Key: 6B9EF37B8195DD5B3368287A33E936656E0EBFDF7FB4AC0696D5FD3CE4C5BA6873B7A9BF01541B1839BD459871990216
    PSK identity: None
    PSK identity hint: None
    SRP username: None
    Start Time: 1637166953
    Timeout   : 7200 (sec)
    Verify return code: 0 (ok)
    Extended master secret: yes
---

The expiry dates for each certificate:

~/certs$ cat cert1.txt | openssl x509 -noout -subject -dates
subject=CN = *.octopus.app
notBefore=Mar 15 00:00:00 2021 GMT
notAfter=Mar 15 23:59:59 2022 GMT

~/certs$ cat cert2.txt | openssl x509 -noout -subject -dates
subject=C = GB, ST = Greater Manchester, L = Salford, O = Sectigo Limited, CN = Sectigo RSA Domain Validation Secure Server CA
notBefore=Nov  2 00:00:00 2018 GMT
notAfter=Dec 31 23:59:59 2030 GMT

~/certs$ cat cert3.txt | openssl x509 -noout -subject -dates
subject=C = US, ST = New Jersey, L = Jersey City, O = The USERTRUST Network, CN = USERTrust RSA Certification Authority
notBefore=Mar 12 00:00:00 2019 GMT
notAfter=Dec 31 23:59:59 2028 GMT

Everything looks okay to me and I’m sharing your confusion. I think I have already checked everything I could get my hands on including:

  • Rolling up all the Windows Updates to the Teamcity Server;
  • Updating Teamcity to the latest version;
  • Rebooting both the server and the build agent;
  • Manually updating the certificates on the build agent.

And yet nothing has helped.

1 Like

Hi @alexey1,

Thanks for sending that info through, everything looks ok to me too!

Which linux distribution and version is the build agent? I’m curious if there are any openssl bugs known which could cause issues such as this CVE.

The error seems to indicate there is an issue with the certificate chain, either with the trusted intermediates not being installed or with a revoked certificate somewhere in the chain. I’m curious if disabling the publisher’s certificate revocation would help resolve this.

Hopefully that helps reveal the issue otherwise I’m not sure exactly what could be causing this other than something specific to your environment. Feel free to let me know if you have any questions!

Best Regards,