Uploaded image for project: 'Infrastructure'
  1. Infrastructure
  2. INFRA-2345

Update center: expired certificates block tool updates

    XMLWordPrintable

    Details

    • Similar Issues:

      Description

      signature check failed for https://updates.jenkins.io/updates/hudson.tools.JDKInstaller.json
      ERROR: Signature verification failed in downloadable hudson.tools.JDKInstaller
      java.security.cert.CertificateExpiredException: NotAfter: Tue Nov 19 22:21:39 CET 2019

        Attachments

          Issue Links

            Activity

            Hide
            oleg_nenashev Oleg Nenashev added a comment -

            No strong opinion, I do not see any future or that plugin. I can live with this workaround

            Show
            oleg_nenashev Oleg Nenashev added a comment - No strong opinion, I do not see any future or that plugin. I can live with this workaround
            Hide
            danielbeck Daniel Beck added a comment -

            Filed INFRA-2352 to monitor tool installer metadata age. Both this and INFRA-1944 last year would have been trivial to prevent with basic monitoring.

            Show
            danielbeck Daniel Beck added a comment - Filed INFRA-2352 to monitor tool installer metadata age. Both this and INFRA-1944 last year would have been trivial to prevent with basic monitoring.
            Hide
            halkeye Gavin Mogan added a comment -

            Kohsuke Kawaguchi resigned the file last week

             

            https://github.com/jenkins-infra/crawler/pull/85 got merged this week

             

            https://updates.jenkins.io/updates/ has everything but the two legacy crawlers updated
            and https://updates.jenkins.io/updates/hudson.plugins.play.PlayInstaller.json has all the new releases.

            Show
            halkeye Gavin Mogan added a comment - Kohsuke Kawaguchi resigned the file last week   https://github.com/jenkins-infra/crawler/pull/85 got merged this week   https://updates.jenkins.io/updates/ has everything but the two legacy crawlers updated and https://updates.jenkins.io/updates/hudson.plugins.play.PlayInstaller.json has all the new releases.
            Hide
            pedersen Björn Pedersen added a comment - - edited

            As per https://github.com/jenkinsci/jdk-tool-plugin#usage-recommendations the temporary workaround might actually be good enough: people just need to stop using this plugin. Oleg Nenashev seems to be owner; WDYT?

            One problem is that this plugin still is a core plugin and hard to uninstall completly both due to deps and the core forcing the 1.0 version to be present once uninstalled.

            Show
            pedersen Björn Pedersen added a comment - - edited As per https://github.com/jenkinsci/jdk-tool-plugin#usage-recommendations the temporary workaround might actually be good enough: people just need to stop using this plugin. Oleg Nenashev seems to be owner; WDYT? One problem is that this plugin still is a core plugin and hard to uninstall completly both due to deps and the core forcing the 1.0 version to be present once uninstalled.
            Hide
            danielbeck Daniel Beck added a comment -

            Björn Pedersen The workaround will result in the file being kept up to date (wrt timestamp, signature), but not with new content (new JDK releases, potentially valid URLs at all). So it being installed would not be a problem, just if you were to actually use it. So while it's dead code, it's not a huge problem.

            Show
            danielbeck Daniel Beck added a comment - Björn Pedersen The workaround will result in the file being kept up to date (wrt timestamp, signature), but not with new content (new JDK releases, potentially valid URLs at all). So it being installed would not be a problem, just if you were to actually use it. So while it's dead code, it's not a huge problem.

              People

              Assignee:
              Unassigned Unassigned
              Reporter:
              pedersen Björn Pedersen
              Votes:
              1 Vote for this issue
              Watchers:
              11 Start watching this issue

                Dates

                Created:
                Updated:
                Resolved: