search

kasunkv / ssl-labs-test-vsts-task

Visual Studio Team Services build/release task for running a SSL Labs Assessment on a give hostname powered by Qualys SSL Labs.
https://marketplace.visualstudio.com/items?itemName=kasunkodagoda.ssl-labs-test
MIT License
3 stars 0 forks source link

SSL Labs Test task failed in Azure pipeline #5

Open jsnelcer opened 4 years ago

jsnelcer commented 4 years ago

Hello,

we are using SSL Labs Test task in our Azure pipeline and in 1/3 of cases this task failed with error message: "service is overloaded". Is there any approach to avoid this?

Thank you in advance.

kasunkv commented 4 years ago

Hi @jsnelcer The "Service is overloaded" is a 529 status code that Qualys SSL Labs API returns when their API is overloaded with requests. This is not an issue from the Azure Pipelines tasks end. As of now the task is not explicitly handle the 529 status code since the task can not make an assessment about the state of the SSL Cert. So this is expected behavior. If you have any suggested improvement to handle the situation better please let me know.

SSL Labs API Error Response Status Codes

ulieckstein commented 4 years ago

the ssl labs api documentation states, that in case of a 529 response, you should wait for some time and then retry the call. i do understand, that when someone uses this test within a CI pipeline, blocking the pipeline for several minutes be unwanted behaviour. in our case although, we use it inside a nightly run, where waiting for 10 or even 30 minutes does not matter and would be appreciated for having a successful run. maybe this might be implemented as an optional feature.

kasunkv commented 4 years ago

@ulieckstein That is a good suggestion. I will include it in the next release of the extension. Thank you.