Uploaded image for project: 'Jenkins'
  1. Jenkins
  2. JENKINS-13499

CertPathValidatorException when trying to use the update center

    • Icon: Bug Bug
    • Resolution: Fixed
    • Icon: Blocker Blocker
    • core
    • None

      On a new install, when trying to use the update center I get this in the logs an no plugins are displayed in the update or install tabs.changing the system date to 2012/04/17 allows me to see the plugins installation of plugins works fine even after setting the system date back to normal

      18 avr. 2012 15:34:51 hudson.model.UpdateSite doPostBack
      GRAVE: <div class=error><img src='/static/6d2d4a0f/images/none.gif' height=16 width=1>Signature verification failed in the update center 'default' <a href='#' class='showDetails'>(show details)</a><pre style='display:none'>java.security.cert.CertPathValidatorException: timestamp check failed
      at sun.security.provider.certpath.PKIXMasterCertPathValidator.validate(Unknown Source)
      at sun.security.provider.certpath.PKIXCertPathValidator.doValidate(Unknown Source)
      at sun.security.provider.certpath.PKIXCertPathValidator.engineValidate(Unknown Source)
      at java.security.cert.CertPathValidator.validate(Unknown Source)
      at org.jvnet.hudson.crypto.CertificateUtil.validatePath(CertificateUtil.java:93)
      at hudson.model.UpdateSite.verifySignature(UpdateSite.java:229)
      at hudson.model.UpdateSite.doPostBack(UpdateSite.java:164)
      at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
      at sun.reflect.NativeMethodAccessorImpl.invoke(Unknown Source)
      at sun.reflect.DelegatingMethodAccessorImpl.invoke(Unknown Source)
      at java.lang.reflect.Method.invoke(Unknown Source)
      at org.kohsuke.stapler.Function$InstanceFunction.invoke(Function.java:288)
      at org.kohsuke.stapler.Function.bindAndInvoke(Function.java:151)
      at org.kohsuke.stapler.Function.bindAndInvokeAndServeResponse(Function.java:90)
      at org.kohsuke.stapler.MetaClass$1.doDispatch(MetaClass.java:111)
      at org.kohsuke.stapler.NameBasedDispatcher.dispatch(NameBasedDispatcher.java:53)
      at org.kohsuke.stapler.Stapler.tryInvoke(Stapler.java:574)
      at org.kohsuke.stapler.Stapler.invoke(Stapler.java:659)
      at org.kohsuke.stapler.MetaClass$6.doDispatch(MetaClass.java:241)
      at org.kohsuke.stapler.NameBasedDispatcher.dispatch(NameBasedDispatcher.java:53)
      at org.kohsuke.stapler.Stapler.tryInvoke(Stapler.java:574)
      at org.kohsuke.stapler.Stapler.invoke(Stapler.java:659)
      at org.kohsuke.stapler.MetaClass$4.doDispatch(MetaClass.java:203)
      at org.kohsuke.stapler.NameBasedDispatcher.dispatch(NameBasedDispatcher.java:53)
      at org.kohsuke.stapler.Stapler.tryInvoke(Stapler.java:574)
      at org.kohsuke.stapler.Stapler.invoke(Stapler.java:659)
      at org.kohsuke.stapler.Stapler.invoke(Stapler.java:488)
      at org.kohsuke.stapler.Stapler.service(Stapler.java:162)
      at javax.servlet.http.HttpServlet.service(HttpServlet.java:45)
      at winstone.ServletConfiguration.execute(ServletConfiguration.java:248)
      at winstone.RequestDispatcher.forward(RequestDispatcher.java:333)
      at winstone.RequestDispatcher.doFilter(RequestDispatcher.java:376)
      at hudson.util.PluginServletFilter$1.doFilter(PluginServletFilter.java:95)
      at hudson.util.PluginServletFilter.doFilter(PluginServletFilter.java:87)
      at winstone.FilterConfiguration.execute(FilterConfiguration.java:194)
      at winstone.RequestDispatcher.doFilter(RequestDispatcher.java:366)
      at hudson.security.csrf.CrumbFilter.doFilter(CrumbFilter.java:47)
      at winstone.FilterConfiguration.execute(FilterConfiguration.java:194)
      at winstone.RequestDispatcher.doFilter(RequestDispatcher.java:366)
      at hudson.security.ChainedServletFilter$1.doFilter(ChainedServletFilter.java:84)
      at hudson.security.ChainedServletFilter.doFilter(ChainedServletFilter.java:76)
      at hudson.security.HudsonFilter.doFilter(HudsonFilter.java:164)
      at winstone.FilterConfiguration.execute(FilterConfiguration.java:194)
      at winstone.RequestDispatcher.doFilter(RequestDispatcher.java:366)
      at hudson.util.CharacterEncodingFilter.doFilter(CharacterEncodingFilter.java:81)
      at winstone.FilterConfiguration.execute(FilterConfiguration.java:194)
      at winstone.RequestDispatcher.doFilter(RequestDispatcher.java:366)
      at winstone.RequestDispatcher.forward(RequestDispatcher.java:331)
      at winstone.RequestHandlerThread.processRequest(RequestHandlerThread.java:215)
      at winstone.RequestHandlerThread.run(RequestHandlerThread.java:138)
      at java.util.concurrent.Executors$RunnableAdapter.call(Unknown Source)
      at java.util.concurrent.FutureTask$Sync.innerRun(Unknown Source)
      at java.util.concurrent.FutureTask.run(Unknown Source)
      at winstone.BoundedExecutorService$1.run(BoundedExecutorService.java:77)
      at java.util.concurrent.ThreadPoolExecutor$Worker.runTask(Unknown Source)
      at java.util.concurrent.ThreadPoolExecutor$Worker.run(Unknown Source)
      at java.lang.Thread.run(Unknown Source)
      Caused by: java.security.cert.CertificateExpiredException: NotAfter: Wed Apr 18 09:35:04 CEST 2012
      at sun.security.x509.CertificateValidity.valid(Unknown Source)
      at sun.security.x509.X509CertImpl.checkValidity(Unknown Source)
      at sun.security.provider.certpath.BasicChecker.verifyTimestamp(Unknown Source)
      at sun.security.provider.certpath.BasicChecker.check(Unknown Source)
      ... 57 more
      </pre></div>

      trying

          [JENKINS-13499] CertPathValidatorException when trying to use the update center

          Jean Helou created issue -

          Basilio Vera added a comment -

          It's because the server certificate expired at Wed Apr 18 09:35:04 CEST 2012. New installations couldn't get plugins until this is fixed.

          Basilio Vera added a comment - It's because the server certificate expired at Wed Apr 18 09:35:04 CEST 2012. New installations couldn't get plugins until this is fixed.

          Having the same problem. (as per the above comment this affects all users)

          [I was trying to install new plugins for the latest stable version of Jenkins CI ver. 1.460 that was deployed as a war file in Glassfish 3.1.2 server but when I go to the URL: jenkins/pluginManager/available there are no entries there. Just an empty list...
          I tried going to Advanced tab and clicking Check now button without any results... I've tried to restart the application without results.]

          Jenkins Log: http://pastebin.com/0Tf9KAtg

          Topics on the mailing list:
          https://groups.google.com/d/topic/jenkinsci-users/0onzaqUscr0/discussion
          https://groups.google.com/d/topic/jenkinsci-dev/d_pR5BpIFCM/discussion

          Hope the new certificates will be up and running soon.

          9emE0iL18gxCqLTa added a comment - Having the same problem. (as per the above comment this affects all users) [I was trying to install new plugins for the latest stable version of Jenkins CI ver. 1.460 that was deployed as a war file in Glassfish 3.1.2 server but when I go to the URL: jenkins/pluginManager/available there are no entries there. Just an empty list... I tried going to Advanced tab and clicking Check now button without any results... I've tried to restart the application without results.] Jenkins Log: http://pastebin.com/0Tf9KAtg Topics on the mailing list: https://groups.google.com/d/topic/jenkinsci-users/0onzaqUscr0/discussion https://groups.google.com/d/topic/jenkinsci-dev/d_pR5BpIFCM/discussion Hope the new certificates will be up and running soon.
          Andrew Bayer made changes -
          Assignee New: Kohsuke Kawaguchi [ kohsuke ]
          Andrew Bayer made changes -
          Priority Original: Major [ 3 ] New: Blocker [ 1 ]

          Grr, looking into it.

          We need a test so that we notice this problem before it actually expires...

          Kohsuke Kawaguchi added a comment - Grr, looking into it. We need a test so that we notice this problem before it actually expires...

          New update center metadata being generated with the renewed certificate: http://ci.jenkins-ci.org/job/infra_update_center/4629/console

          Kohsuke Kawaguchi added a comment - New update center metadata being generated with the renewed certificate: http://ci.jenkins-ci.org/job/infra_update_center/4629/console

          The new update center metadata is generated. It will take some time for it to propagate through mirrors, so I'll leave this ticket open for a while more.

          Kohsuke Kawaguchi added a comment - The new update center metadata is generated. It will take some time for it to propagate through mirrors, so I'll leave this ticket open for a while more.
          david fasani made changes -
          Link New: This issue is blocking JENKINS-13498 [ JENKINS-13498 ]

          Mirrors are hopefully updated by now. Closing.

          Kohsuke Kawaguchi added a comment - Mirrors are hopefully updated by now. Closing.
          Kohsuke Kawaguchi made changes -
          Resolution New: Fixed [ 1 ]
          Status Original: Open [ 1 ] New: Resolved [ 5 ]

            Unassigned Unassigned
            jeantil Jean Helou
            Votes:
            10 Vote for this issue
            Watchers:
            10 Start watching this issue

              Created:
              Updated:
              Resolved: