This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(172.8, 69%, 26%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ED%3C/text%3E%3C/svg%3E)
Hi there,
Does anybody know if Microsoft owns the domain myget.org? One of our Azure Pipelines build processes uses this domain, but the build is failing with the following error: "Unable to load the service index for source https://dotnet.myget.org/F/aspnetcore-dev/api/v3/index.json. The SSL connection could not be established. The remote certificate is invalid according to the validation procedure." Browsing to dotnet.myget.org in a browser does indeed flag up the fact that the certificate is invalid.
Looking at the certificate, it's been issued to *.oneroute.microsoft.com but, of course, the URL of the site (myget.org) doesn't match. I'm guessing this is why the certificate is invalid. (The certificate's "valid from/to" dates are also a little misleading, until you realise that a "valid to" date of 03/09/2021 is 3rd September 2021, and not 9th March 2021.) Due to the certificate being issued to Microsoft, I've assumed that the myget.org domain is a Microsoft-owned site, and it would be Microsoft's responsibility to update the certificate.
To that end, I raised a support ticket in Azure, but the impression I got from the support engineer is that he didn't recognise the fact that Microsoft needs to update the certificate. I've asked for confirmation from him that Microsoft owns the site (and hence, they'd need to update the certificate) but so far I've had no response.
So I asked @AzureSupport the same question on Twitter, and they simply directed me to this site to ask the question
Am I going mad, or am I right in thinking it's Microsoft who should be updating the certificate for myget.org? Thanks in advance!
@Dom Thank you for your question.
As of December 16th, 2020, dotnet.myget.org was retired. This is why you are encountering certificate issues.
The recommendation going forward is to use Azure Artifacts.
Please let us know if you have any further questions or concerns and we would be happy to address them.
Thanks for the reply!
The Azure engineer found the same thing, and between us we figured it out.
He recommended adding a NuGet.Config file to the solution, which specified different package sources other than dotnet.myget.org, and updating the YAML file to use that.
Worked a treat. Thanks again.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(265.6, 44%, 35%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EBC%3C/text%3E%3C/svg%3E)
It looks like this source has to be disabled in case it was entered years ago.
The strange thing is this was working up until about a month ago.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(41.6, 62%, 14%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EDP%3C/text%3E%3C/svg%3E)
Hi! I'm facing the same issue. I got <add key="dotnet-core" value="https://www.myget.org/F/dotnet-core/api/v3/index.json" />, but I wonder what should I use now? Thanks!
You won't be able to use myget.org/F/dotnet-core as it's been deprecated. You can follow https://github.com/dotnet/runtime/blob/main/docs/project/dogfooding.md on how to add package source for the daily builds.