Uploaded image for project: 'Infrastructure'
  1. Infrastructure
  2. INFRA-2616

Links in Jira email notifications broken due to HSTS errors on url1399.jenkins.io

    XMLWordPrintable

    Details

    • Type: Bug
    • Status: Closed (View Workflow)
    • Priority: Minor
    • Resolution: Fixed
    • Component/s: jira, sendgrid
    • Labels:
      None
    • Environment:
      Chrome Version 81.0.4044.138 (Official Build) (64-bit)
    • Similar Issues:

      Description

      Links inside of the Jira email notifications from issues.jenkins-ci.org have been broken for me for a few days now due to HSTS errors on https://url1399.jenkins.io/. Here is one of the links from one of the notifications as an example (it should go to JENKINS-42214).

      The error that Chrome shows is NET::ERR_CERT_COMMON_NAME_INVALID. From a quick look at the cert chain, I think the common name for the cert on that site is *.sendgrid.net, but I might be looking at the wrong one.

      Let me know if you need any other information from me to help diagnose the issue. For now, my workaround is to just navigate to JIRA directly instead of using the links in the notifications.

        Attachments

          Activity

          Hide
          olblak Olivier Vernin added a comment -

          Your HSTS issue is because you visited jenkins.io when we accidentally enabled HSTS on it, so you'll probably have issues to open http://mirrors.jenkins.io as well.
          Regarding url1399.jenkins.io, it's something used by SendGrid to track behaviors like if you open an email, I disabled tracking, we don't need it anyway.

          Show
          olblak Olivier Vernin added a comment - Your HSTS issue is because you visited jenkins.io when we accidentally enabled HSTS on it, so you'll probably have issues to open http://mirrors.jenkins.io as well. Regarding url1399.jenkins.io, it's something used by SendGrid to track behaviors like if you open an email, I disabled tracking, we don't need it anyway.
          Hide
          dnusbaum Devin Nusbaum added a comment -

          Olivier Vernin You're right, I got the same error for http://mirrors.jenkins.io/. I fixed the HSTS issue by clearing out those settings for Chrome, and now the links in the emails work correctly. Thanks! Disabling tracking should help as well so users won't have to remove the HSTS config from their browsers going forward. I'll go ahead and close this issue.

          Show
          dnusbaum Devin Nusbaum added a comment - Olivier Vernin You're right, I got the same error for http://mirrors.jenkins.io/ . I fixed the HSTS issue by clearing out those settings for Chrome, and now the links in the emails work correctly. Thanks! Disabling tracking should help as well so users won't have to remove the HSTS config from their browsers going forward. I'll go ahead and close this issue.

            People

            Assignee:
            Unassigned Unassigned
            Reporter:
            dnusbaum Devin Nusbaum
            Votes:
            1 Vote for this issue
            Watchers:
            2 Start watching this issue

              Dates

              Created:
              Updated:
              Resolved: