Uploaded image for project: 'Jenkins'
  1. Jenkins
  2. JENKINS-13018

The IRC bot cannot connect over SSL to a server with a self-signed cert.

XMLWordPrintable

    • Icon: Improvement Improvement
    • Resolution: Unresolved
    • Icon: Minor Minor
    • ircbot-plugin
    • None

      The IRC Bot should have a checkbox that allows Jenkins to connect to servers using self-signed SSL certs. This is the error I'm seeing in the logs:

      INFO: Jenkins is fully up and running
      hudson.plugins.rake.Rvm@809791
      Mar 7, 2012 8:33:30 PM hudson.plugins.im.IMConnectionProvider$ConnectorRunnable run
      INFO: Trying to reconnect
      Mar 7, 2012 8:33:30 PM hudson.plugins.ircbot.v2.IRCConnection connect
      INFO: Connecting to irc.geoloqi.com:1337 as jenkins-bot using charset UTF-8
      Mar 7, 2012 8:33:31 PM hudson.plugins.ircbot.v2.IRCConnection connect
      WARNING: Error connecting to irc: javax.net.ssl.SSLException: Connection has been shutdown: javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
      Mar 7, 2012 8:33:31 PM hudson.plugins.im.IMConnectionProvider$ConnectorRunnable run
      INFO: Reconnect failed. Next connection attempt in 1 minutes

      This would avoid having to do a hacky workaround like this:

      http://www.erikzaadi.com/2011/09/09/connecting-jenkins-to-self-signed-certificated-servers/

          [JENKINS-13018] The IRC bot cannot connect over SSL to a server with a self-signed cert.

          kutzi added a comment -

          Well, I would consider adding the certificate to your keystore not as a 'workaround', but as the proper way to go but anyway I can have a look at it if time permits.

          kutzi added a comment - Well, I would consider adding the certificate to your keystore not as a 'workaround', but as the proper way to go but anyway I can have a look at it if time permits.

          Tristan Waddington added a comment - - edited

          Hah, you're right of course. Unfortunately, it can be hard to come by the correct cert for some servers, especially ones you don't maintain yourself. This also seems to be a standard option for most IRC clients these days. Thanks!

          Tristan Waddington added a comment - - edited Hah, you're right of course. Unfortunately, it can be hard to come by the correct cert for some servers, especially ones you don't maintain yourself. This also seems to be a standard option for most IRC clients these days. Thanks!

          charles-erid dessart added a comment -

          Worked for me http://www.erikzaadi.com/2011/09/09/connecting-jenkins-to-self-signed-certificated-servers/

          charles-erid dessart added a comment - Worked for me http://www.erikzaadi.com/2011/09/09/connecting-jenkins-to-self-signed-certificated-servers/

            Unassigned Unassigned
            twaddington Tristan Waddington
            Votes:
            1 Vote for this issue
            Watchers:
            2 Start watching this issue

              Created:
              Updated: