• Icon: Bug Bug
    • Resolution: Cannot Reproduce
    • Icon: Major Major
    • _unsorted
    • None
    • v2.7.4

      When trying to update to latest plugin version (e.g. dependency-check-jenkins-plugin v1.3.4 from v1.3.0 )the following error is reported by Jenkins Update-Center:

      java.io.IOException: Downloaded file /var/lib/jenkins/plugins/dependency-check-jenkins-plugin.jpi.tmp does not match expected SHA-1, expected 'f2ncNlydUUSPrk6SoG255v+2kQU=', actual 'lZRJco4Ouv1j0AG4Aet7HadHg/Q='
      at hudson.model.UpdateCenter.verifyChecksums(UpdateCenter.java:1307)
      at hudson.model.UpdateCenter.access$900(UpdateCenter.java:124)
      at hudson.model.UpdateCenter$InstallationJob.replace(UpdateCenter.java:1406)
      at hudson.model.UpdateCenter$UpdateCenterConfiguration.install(UpdateCenter.java:846)
      at hudson.model.UpdateCenter$DownloadJob._run(UpdateCenter.java:1186)
      at hudson.model.UpdateCenter$InstallationJob._run(UpdateCenter.java:1364)
      at hudson.model.UpdateCenter$DownloadJob.run(UpdateCenter.java:1161)
      at java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:471)
      at java.util.concurrent.FutureTask.run(FutureTask.java:262)
      at hudson.remoting.AtmostOneThreadExecutor$Worker.run(AtmostOneThreadExecutor.java:110)
      at java.lang.Thread.run(Thread.java:745)

          [JENKINS-32796] Can't update plugins: incorrect checksum

          tik dik added a comment -

          download the hpi file, and in manage plugins advance tab ,upload the file install.
          before install ,need install analysis-core plugin manual upload.

          i have to install plugin manual

          tik dik added a comment - download the hpi file, and in manage plugins advance tab ,upload the file install. before install ,need install analysis-core plugin manual upload. i have to install plugin manual

          Andy Wang added a comment -

          Just out of curiosity, is there anyone who's not from China also encountered this problem? Maybe it's the Chinese network issue.

          Andy Wang added a comment - Just out of curiosity, is there anyone who's not from China also encountered this problem? Maybe it's the Chinese network issue.

          Daniel Beck added a comment -

          Tracking this as JENKINS-38340, which I've rewritten to address the actual issue (at least as far as I currently understand it). Please refrain from posting further comments here.

          Daniel Beck added a comment - Tracking this as JENKINS-38340 , which I've rewritten to address the actual issue (at least as far as I currently understand it). Please refrain from posting further comments here.

          Adil Chahid added a comment -

          Same problem here!

          After updating our Jenkins instance to version 2.46.3.

          Cannot update a single plugin.

          java.io.IOException: Downloaded file /var/lib/jenkins/plugins/blueocean-autofavorite.jpi.tmp does not match expected SHA-1, expected 'Kkky+jvLE9oX9AxORzXXTVi82U4=', actual 'yw1neSO8aq/gYWbuMhhULie8GEw=' at hudson.model.UpdateCenter.verifyChecksums(UpdateCenter.java:1815) at hudson.model.UpdateCenter.access$1100(UpdateCenter.java:148) at hudson.model.UpdateCenter$InstallationJob.replace(UpdateCenter.java:1969) at hudson.model.UpdateCenter$UpdateCenterConfiguration.install(UpdateCenter.java:1201) at hudson.model.UpdateCenter$DownloadJob._run(UpdateCenter.java:1685) at hudson.model.UpdateCenter$InstallationJob._run(UpdateCenter.java:1880) at hudson.model.UpdateCenter$DownloadJob.run(UpdateCenter.java:1656) at java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:511) at java.util.concurrent.FutureTask.run(FutureTask.java:266) at hudson.remoting.AtmostOneThreadExecutor$Worker.run(AtmostOneThreadExecutor.java:110) at java.lang.Thread.run(Thread.java:748)

          here is the content of my hudson.model.UpdateCenter.xml:

          <?xml version='1.0' encoding='UTF-8'?>
          <sites>
            <site>
              <id>default</id>
              <url>http://updates.jenkins-ci.org/update-center.json</url>
            </site>
          </sites>

          Adil Chahid added a comment - Same problem here! After updating our Jenkins instance to version 2.46.3. Cannot update a single plugin. java.io.IOException: Downloaded file / var /lib/jenkins/plugins/blueocean-autofavorite.jpi.tmp does not match expected SHA-1, expected 'Kkky+jvLE9oX9AxORzXXTVi82U4=' , actual 'yw1neSO8aq/gYWbuMhhULie8GEw=' at hudson.model.UpdateCenter.verifyChecksums(UpdateCenter.java:1815) at hudson.model.UpdateCenter.access$1100(UpdateCenter.java:148) at hudson.model.UpdateCenter$InstallationJob.replace(UpdateCenter.java:1969) at hudson.model.UpdateCenter$UpdateCenterConfiguration.install(UpdateCenter.java:1201) at hudson.model.UpdateCenter$DownloadJob._run(UpdateCenter.java:1685) at hudson.model.UpdateCenter$InstallationJob._run(UpdateCenter.java:1880) at hudson.model.UpdateCenter$DownloadJob.run(UpdateCenter.java:1656) at java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:511) at java.util.concurrent.FutureTask.run(FutureTask.java:266) at hudson.remoting.AtmostOneThreadExecutor$Worker.run(AtmostOneThreadExecutor.java:110) at java.lang. Thread .run( Thread .java:748) here is the content of my hudson.model.UpdateCenter.xml: <?xml version= '1.0' encoding= 'UTF-8' ?> <sites>   <site>     <id> default </id>     <url>http: //updates.jenkins-ci.org/update-center.json</url>   </site> </sites>

          Daniel Beck added a comment -

          The actual content of /var/lib/jenkins/plugins/blueocean-autofavorite.jpi.tmp would be useful to understand what happened.

          Daniel Beck added a comment - The actual content of /var/lib/jenkins/plugins/blueocean-autofavorite.jpi.tmp would be useful to understand what happened.

          Tom Nijboer added a comment -

          Tom Nijboer added a comment - Problem is the redirect from http://updates.jenkins-ci.org/update-center.json  to for example http://ftp-chi.osuosl.org/pub/jenkins/updates/current/update-center.json  

          Daniel Beck added a comment -

          Some plugins, like Kubernetes Pipeline globally disable following redirects (see my comments in JENKINS-38185). Still not a bug in Jenkins core, just a misbehaving plugin.

          Daniel Beck added a comment - Some plugins, like Kubernetes Pipeline globally disable following redirects (see my comments in JENKINS-38185 ). Still not a bug in Jenkins core, just a misbehaving plugin.

          Adil Chahid added a comment -

          Hi Daniel, we think that we have discovered the problem on our end: the cacerts used by the Open JDK (that runs Jenkins ) was alterted in order to include our internal Certificate Authorities so Jenkins was not able anymore to connect to the Update servers exposed in HTTPS.

          Thanks for your time and interest!

           

          Adil Chahid added a comment - Hi Daniel, we think that we have discovered the problem on our end: the cacerts used by the Open JDK (that runs Jenkins ) was alterted in order to include our internal Certificate Authorities so Jenkins was not able anymore to connect to the Update servers exposed in HTTPS. Thanks for your time and interest!  

          Ronak SHAH added a comment - - edited

          Facing the issue again on Jenkins 2.73.1. Attached the screenshot

          Ronak SHAH added a comment - - edited Facing the issue again on Jenkins 2.73.1. Attached the screenshot

          Daniel Beck added a comment -

          ronak1009 There are plenty of reasons this can happen due to your infrastructure, as well as the issue I mention above. You need to show that the file that the Jenkins project infra serves is broken in some way.

          Daniel Beck added a comment - ronak1009 There are plenty of reasons this can happen due to your infrastructure, as well as the issue I mention above. You need to show that the file that the Jenkins project infra serves is broken in some way.

            oleg_nenashev Oleg Nenashev
            albuch Alexander Buchholtz
            Votes:
            2 Vote for this issue
            Watchers:
            10 Start watching this issue

              Created:
              Updated:
              Resolved: