Uploaded image for project: 'Jenkins'
  1. Jenkins
  2. JENKINS-26580

For JNLP slaves the master-slave communication should be encrypted

    XMLWordPrintable

Details

    Description

      For more details about the requirements and possible implementation refer to:
      https://groups.google.com/forum/#!topic/jenkinsci-dev/Q1KMOSE1IEc

      Attachments

        Issue Links

          depends on

          Bug - A problem which impairs or prevents the functions of the product. JENKINS-31718 JNLP slaves can fail to correctly negotiate a transport

          • Critical - Crashes, loss of data, severe memory leak.
          • Closed
          is related to

          Bug - A problem which impairs or prevents the functions of the product. JENKINS-33886 Can only connect one JNLP3 slave per IP address

          • Critical - Crashes, loss of data, severe memory leak.
          • Resolved

          Improvement - An improvement or enhancement to an existing feature or task. JENKINS-45841 Disable JNLP1/JNLP2/CLI1 by default on new installations

          • Minor - Minor loss of function, or other problem where easy workaround is present.
          • Resolved
          links to

          Web Link PR 2010

          Activity

            Ascending order - Click to sort in descending order
            View 19 older comments
            aaron312 Aaron Curley added a comment -

            Great! Good to know.

            aaron312 Aaron Curley added a comment - Great! Good to know.
            marko_andrijevic Marko Andrijevic added a comment -

            Hi oleg_nenashev,

            Can you please reference Jenkins Master/Slave software version that contains the fix for this issue and the location where fixed version(s) can be downloaded from?

            Thanks,
            Marko

            marko_andrijevic Marko Andrijevic added a comment - Hi oleg_nenashev , Can you please reference Jenkins Master/Slave software version that contains the fix for this issue and the location where fixed version(s) can be downloaded from? Thanks, Marko
            oleg_nenashev Oleg Nenashev added a comment -

            marko_andrijevic So the fix is...

            1) Download Jenkins 2.32.1+
            2) Update Remoting on agents to 3.0+
            3) Disable JNLP1/JNLP2/CLI1 protocols in the Global Security Configuration

            BTW, JENKINS-45841 will disable old protocols by default in new installations

            oleg_nenashev Oleg Nenashev added a comment - marko_andrijevic So the fix is... 1) Download Jenkins 2.32.1+ 2) Update Remoting on agents to 3.0+ 3) Disable JNLP1/JNLP2/CLI1 protocols in the Global Security Configuration BTW, JENKINS-45841 will disable old protocols by default in new installations
            marko_andrijevic Marko Andrijevic added a comment -

            Thank you very much for fast response Oleg! Can you please also let me know how can I verify that TLS is really in use in Master/Slave communication? I'm already using Wireshark to inspect communication, but since this is a binary protocol, I can't tell for sure if the content is encrypted or just difficult to read.

            Regards,
            Marko

            marko_andrijevic Marko Andrijevic added a comment - Thank you very much for fast response Oleg! Can you please also let me know how can I verify that TLS is really in use in Master/Slave communication? I'm already using Wireshark to inspect communication, but since this is a binary protocol, I can't tell for sure if the content is encrypted or just difficult to read. Regards, Marko
            oleg_nenashev Oleg Nenashev added a comment -

            marko_andrijevic JNLP4 works only through TLS. If you disable other protocols, it should be enough.

            oleg_nenashev Oleg Nenashev added a comment - marko_andrijevic JNLP4 works only through TLS. If you disable other protocols, it should be enough.

            People

              akshay_abd akshay_abd
              akshay_abd akshay_abd
              Votes:
              6 Vote for this issue
              Watchers:
              15 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: