Uploaded image for project: 'Jenkins'
  1. Jenkins
  2. JENKINS-21570

Slave JNLP not signed by a CA causes issues with Java 7.51

    • Icon: Bug Bug
    • Resolution: Duplicate
    • Icon: Major Major
    • slave-setup-plugin
    • None
    • Windows 7 64 Bit

      We have started to get an error saying that the Slave Agent cannot be launched due to our security settings. There appear to be some workarounds, however, the recommended solution is to ensure that the JNLPs are properly signed. See

      http://www.java.com/en/download/help/java_blocked.xml

      for some context

      And

      http://jenkins-ci.361315.n4.nabble.com/Java-Version-7-Update-45-warning-every-time-I-try-starting-the-slave-td4679570.html

      for a discussion around the issues.

          [JENKINS-21570] Slave JNLP not signed by a CA causes issues with Java 7.51

          Simon Strauch added a comment -

          The Website http://www.java.com/en/download/help/java_blocked.xml describes 3 of 2 topics that went wrong in the JNLP-Slave.

          1st: self-signed certificat. I used this description to extract the public key and add it to Java as Signer CA:

          stackoverflow: Extract raw X.509 Certificate from a signed APK or JAR

          Now Java Webstart begin to except the JAR file. But the 2nd Problem is:

          Missing required Permissions manifest attribute in main jar

          The MANIFEST.MF file does not contain the Permissions attribute.

          The workaround is to add the download server URL. That work.

          Simon Strauch added a comment - The Website http://www.java.com/en/download/help/java_blocked.xml describes 3 of 2 topics that went wrong in the JNLP-Slave. 1st: self-signed certificat. I used this description to extract the public key and add it to Java as Signer CA: stackoverflow: Extract raw X.509 Certificate from a signed APK or JAR Now Java Webstart begin to except the JAR file. But the 2nd Problem is: Missing required Permissions manifest attribute in main jar The MANIFEST.MF file does not contain the Permissions attribute. The workaround is to add the download server URL. That work.

          illenseer added a comment -

          Any news on this topic?
          It would be great to have the functionality of Windows DCOMP slaves back again! - Thanks.

          illenseer added a comment - Any news on this topic? It would be great to have the functionality of Windows DCOMP slaves back again! - Thanks.

          Jesse Glick added a comment -

          I guess the CA issue was fixed as part of remoting 2.35 as mentioned in JENKINS-20204.

          Jesse Glick added a comment - I guess the CA issue was fixed as part of remoting 2.35 as mentioned in JENKINS-20204 .

            kohsuke Kohsuke Kawaguchi
            stuartjsmith Stuart Smith
            Votes:
            3 Vote for this issue
            Watchers:
            6 Start watching this issue

              Created:
              Updated:
              Resolved: