Uploaded image for project: 'Infrastructure'
  1. Infrastructure
  2. INFRA-1944

JDK crawler has been broken for 2 months, now fails downloads due to expired cert

    XMLWordPrintable

    Details

    • Similar Issues:

      Description

      Per https://updates.jenkins-ci.org/updates/ the last update of hudson.tools.JDKInstaller.json was in October.

      Since the crawler scrapes Oracle's web site, it seems a change there broke the script in https://github.com/jenkins-infra/crawler/blob/master/jdk.groovy

      Since today, the certificate has expired, making JDK installers entirely unavailable, and potentially breaking downloading of others too.

      Per a report in jenkinsci/jenkins Gitter:

      Dec 15, 2018 6:00:44 PM hudson.model.DownloadService$Downloadable updateNow
WARNING: signature check failed for https://updates.jenkins.io/updates/hudson.tools.JDKInstaller.json
ERROR: Signature verification failed in downloadable &#039;hudson.tools.JDKInstaller&#039; <a href='#' class='showDetails'>(show details)</a><pre style='display:none'>java.security.cert.CertificateExpiredException: NotAfter: Sat Dec 15 16:54:02 UTC 2018<br>

        Attachments

          Issue Links

          is related to

          Bug - A problem which impairs or prevents the functions of the product. JENKINS-55222 JDK Installer certificate expiry

          • Critical - Crashes, loss of data, severe memory leak.
          • Closed

          Bug - A problem which impairs or prevents the functions of the product. INFRA-2345 Update center: expired certificates block tool updates

          • Blocker - Blocks development and/or testing work, production could not run.
          • Resolved
          relates to

          Improvement - An improvement or enhancement to an existing feature or task. JENKINS-54305 Oracle JDK 10 not available anymore - Oracle JDK 11 is not free

          • Critical - Crashes, loss of data, severe memory leak.
          • Open

            Activity

            Ascending order - Click to sort in descending order
            Hide
            Permalink
            rgouyet Romain GOUYET added a comment -

            Is there any workaround for this because my jobs can't install JDK and CI is broken because jenkins can't query mercurial or svn : 

             

            FATAL: JDK data is empty.
java.io.IOException: JDK data is empty. 

             

            Show
            rgouyet Romain GOUYET added a comment - Is there any workaround for this because my jobs can't install JDK and CI is broken because jenkins can't query mercurial or svn :    FATAL: JDK data is empty. java.io.IOException: JDK data is empty.   
            Hide
            Permalink
            rgouyet Romain GOUYET added a comment -

            I found a workaround 

            • Manage Jenkins >> Configure Global Security >> Plugin Manager >> Tick the check-box for "Use browser for metadata download" option
            Show
            rgouyet Romain GOUYET added a comment - I found a workaround  Manage Jenkins  >>  Configure Global Security  >>  Plugin Manager  >> Tick the check-box for " Use browser for metadata download " option
            Hide
            Permalink
            aheritier Arnaud Héritier added a comment -

            https://jenkins-updates.cloudbees.com/update-center/envelope-cje/updates/hudson.tools.JDKInstaller.json => I don't see any certificate issue ? What do I miss? Was it fixed ?

            I confirm that the crawler looks broken

            groovy -Dgrape.config=./grapeConfig.xml ./lib/runner.groovy jdk.groovy
loading dependencies...done
Caught: java.lang.NullPointerException: Cannot invoke method keySet() on null object
java.lang.NullPointerException: Cannot invoke method keySet() on null object
	at ListJDK.family(jdk.groovy:53)
	at ListJDK.build(jdk.groovy:32)
	at ListJDK.main(jdk.groovy:24)
	at ListJDK$main.call(Unknown Source)
	at jdk.run(jdk.groovy:144)
	at runner$_run_closure1.doCall(runner.groovy:13)
	at runner.run(runner.groovy:10)
            Show
            aheritier Arnaud Héritier added a comment - https://jenkins-updates.cloudbees.com/update-center/envelope-cje/updates/hudson.tools.JDKInstaller.json  => I don't see any certificate issue ? What do I miss? Was it fixed ? I confirm that the crawler looks broken groovy -Dgrape.config=./grapeConfig.xml ./lib/runner.groovy jdk.groovy loading dependencies...done Caught: java.lang.NullPointerException: Cannot invoke method keySet() on null object java.lang.NullPointerException: Cannot invoke method keySet() on null object at ListJDK.family(jdk.groovy:53) at ListJDK.build(jdk.groovy:32) at ListJDK.main(jdk.groovy:24) at ListJDK$main.call(Unknown Source) at jdk.run(jdk.groovy:144) at runner$_run_closure1.doCall(runner.groovy:13) at runner.run(runner.groovy:10)
            Hide
            Permalink
            batmat Baptiste Mathus added a comment -

            Arnaud Héritier https://jenkins-updates.cloudbees.com/update-center/envelope-cje/updates/hudson.tools.JDKInstaller.json is not something the community is using or concerned about, FWIW .

            Show
            batmat Baptiste Mathus added a comment - Arnaud Héritier https://jenkins-updates.cloudbees.com/update-center/envelope-cje/updates/hudson.tools.JDKInstaller.json is not something the community is using or concerned about, FWIW .
            Hide
            Permalink
            danielbeck Daniel Beck added a comment -

            Baptiste Mathus Just a mirror anyway.

            Proposed "fix" at https://github.com/jenkins-infra/crawler/pull/79 (and I really don't care enough to make Java 10 work).

            Show
            danielbeck Daniel Beck added a comment - Baptiste Mathus Just a mirror anyway. Proposed "fix" at https://github.com/jenkins-infra/crawler/pull/79 (and I really don't care enough to make Java 10 work).
            Hide
            Permalink
            danielbeck Daniel Beck added a comment -

            Should be resolved.

            Show
            danielbeck Daniel Beck added a comment - Should be resolved.

              People

              Assignee:
              Unassigned Unassigned
              Reporter:
              danielbeck Daniel Beck
              Votes:
              6 Vote for this issue
              Watchers:
              11 Start watching this issue

                Dates

                Created:
                Updated:
                Resolved: