• Icon: Bug Bug
    • Resolution: Cannot Reproduce
    • Icon: Major Major
    • _unsorted
    • None
    • v2.7.4

      When trying to update to latest plugin version (e.g. dependency-check-jenkins-plugin v1.3.4 from v1.3.0 )the following error is reported by Jenkins Update-Center:

      java.io.IOException: Downloaded file /var/lib/jenkins/plugins/dependency-check-jenkins-plugin.jpi.tmp does not match expected SHA-1, expected 'f2ncNlydUUSPrk6SoG255v+2kQU=', actual 'lZRJco4Ouv1j0AG4Aet7HadHg/Q='
      at hudson.model.UpdateCenter.verifyChecksums(UpdateCenter.java:1307)
      at hudson.model.UpdateCenter.access$900(UpdateCenter.java:124)
      at hudson.model.UpdateCenter$InstallationJob.replace(UpdateCenter.java:1406)
      at hudson.model.UpdateCenter$UpdateCenterConfiguration.install(UpdateCenter.java:846)
      at hudson.model.UpdateCenter$DownloadJob._run(UpdateCenter.java:1186)
      at hudson.model.UpdateCenter$InstallationJob._run(UpdateCenter.java:1364)
      at hudson.model.UpdateCenter$DownloadJob.run(UpdateCenter.java:1161)
      at java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:471)
      at java.util.concurrent.FutureTask.run(FutureTask.java:262)
      at hudson.remoting.AtmostOneThreadExecutor$Worker.run(AtmostOneThreadExecutor.java:110)
      at java.lang.Thread.run(Thread.java:745)

          [JENKINS-32796] Can't update plugins: incorrect checksum

          I have this error also with every plugin in try to update:

          Git plugin                  Failure
          java.io.IOException: Downloaded file /var/lib/jenkins/plugins/git.jpi.tmp does not match expected SHA-1, expected 'lwiTe8A0PGiqYzaeKElzmefzY2Q=', actual 'anAU1+oliegyXOf0ZFTogzVOe7s='
          	at hudson.model.UpdateCenter.verifyChecksums(UpdateCenter.java:1309)
          	at hudson.model.UpdateCenter.access$900(UpdateCenter.java:124)
          	at hudson.model.UpdateCenter$InstallationJob.replace(UpdateCenter.java:1408)
          	at hudson.model.UpdateCenter$UpdateCenterConfiguration.install(UpdateCenter.java:846)
          	at hudson.model.UpdateCenter$DownloadJob._run(UpdateCenter.java:1188)
          	at hudson.model.UpdateCenter$InstallationJob._run(UpdateCenter.java:1366)
          	at hudson.model.UpdateCenter$DownloadJob.run(UpdateCenter.java:1163)
          	at java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:471)
          	at java.util.concurrent.FutureTask.run(FutureTask.java:262)
          	at hudson.remoting.AtmostOneThreadExecutor$Worker.run(AtmostOneThreadExecutor.java:110)
          	at java.lang.Thread.run(Thread.java:745)
          

          When i choose to "Check now" the update information, i get this error:

          java.io.IOException: Could not find JSON in http://updates.jenkins-ci.org/update-center.json?id=default&version=1.625.3
          	at hudson.model.DownloadService.loadJSON(DownloadService.java:170)
          	at hudson.model.UpdateSite.updateDirectlyNow(UpdateSite.java:173)
          	at hudson.PluginManager.doCheckUpdatesServer(PluginManager.java:894)
          	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
          	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:57)
          	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
          	at java.lang.reflect.Method.invoke(Method.java:606)
          	at org.kohsuke.stapler.Function$InstanceFunction.invoke(Function.java:298)
          	at org.kohsuke.stapler.interceptor.RequirePOST$Processor.invoke(RequirePOST.java:46)
          	at org.kohsuke.stapler.Function$InterceptedFunction.invoke(Function.java:399)
          	at org.kohsuke.stapler.Function.bindAndInvoke(Function.java:161)
          	at org.kohsuke.stapler.Function.bindAndInvokeAndServeResponse(Function.java:96)
          	at org.kohsuke.stapler.MetaClass$1.doDispatch(MetaClass.java:121)
          	at org.kohsuke.stapler.NameBasedDispatcher.dispatch(NameBasedDispatcher.java:53)
          	at org.kohsuke.stapler.Stapler.tryInvoke(Stapler.java:746)
          	at org.kohsuke.stapler.Stapler.invoke(Stapler.java:876)
          	at org.kohsuke.stapler.MetaClass$3.doDispatch(MetaClass.java:183)
          	at org.kohsuke.stapler.NameBasedDispatcher.dispatch(NameBasedDispatcher.java:53)
          	at org.kohsuke.stapler.Stapler.tryInvoke(Stapler.java:746)
          	at org.kohsuke.stapler.Stapler.invoke(Stapler.java:876)
          	at org.kohsuke.stapler.Stapler.invoke(Stapler.java:649)
          	at org.kohsuke.stapler.Stapler.service(Stapler.java:238)
          	at javax.servlet.http.HttpServlet.service(HttpServlet.java:848)
          	at org.eclipse.jetty.servlet.ServletHolder.handle(ServletHolder.java:686)
          	at org.eclipse.jetty.servlet.ServletHandler$CachedChain.doFilter(ServletHandler.java:1494)
          	at hudson.util.PluginServletFilter$1.doFilter(PluginServletFilter.java:132)
          	at hudson.util.PluginServletFilter.doFilter(PluginServletFilter.java:123)
          	at org.eclipse.jetty.servlet.ServletHandler$CachedChain.doFilter(ServletHandler.java:1482)
          	at hudson.security.csrf.CrumbFilter.doFilter(CrumbFilter.java:49)
          	at org.eclipse.jetty.servlet.ServletHandler$CachedChain.doFilter(ServletHandler.java:1482)
          	at hudson.security.ChainedServletFilter$1.doFilter(ChainedServletFilter.java:84)
          	at hudson.security.UnwrapSecurityExceptionFilter.doFilter(UnwrapSecurityExceptionFilter.java:51)
          	at hudson.security.ChainedServletFilter$1.doFilter(ChainedServletFilter.java:87)
          	at jenkins.security.ExceptionTranslationFilter.doFilter(ExceptionTranslationFilter.java:117)
          	at hudson.security.ChainedServletFilter$1.doFilter(ChainedServletFilter.java:87)
          	at org.acegisecurity.providers.anonymous.AnonymousProcessingFilter.doFilter(AnonymousProcessingFilter.java:125)
          	at hudson.security.ChainedServletFilter$1.doFilter(ChainedServletFilter.java:87)
          	at org.acegisecurity.ui.rememberme.RememberMeProcessingFilter.doFilter(RememberMeProcessingFilter.java:142)
          	at hudson.security.ChainedServletFilter$1.doFilter(ChainedServletFilter.java:87)
          	at org.acegisecurity.ui.AbstractProcessingFilter.doFilter(AbstractProcessingFilter.java:271)
          	at hudson.security.ChainedServletFilter$1.doFilter(ChainedServletFilter.java:87)
          	at jenkins.security.BasicHeaderProcessor.doFilter(BasicHeaderProcessor.java:93)
          	at hudson.security.ChainedServletFilter$1.doFilter(ChainedServletFilter.java:87)
          	at org.acegisecurity.context.HttpSessionContextIntegrationFilter.doFilter(HttpSessionContextIntegrationFilter.java:249)
          	at hudson.security.HttpSessionContextIntegrationFilter2.doFilter(HttpSessionContextIntegrationFilter2.java:67)
          	at hudson.security.ChainedServletFilter$1.doFilter(ChainedServletFilter.java:87)
          	at hudson.security.ChainedServletFilter.doFilter(ChainedServletFilter.java:76)
          	at hudson.security.HudsonFilter.doFilter(HudsonFilter.java:171)
          	at org.eclipse.jetty.servlet.ServletHandler$CachedChain.doFilter(ServletHandler.java:1482)
          	at org.kohsuke.stapler.compression.CompressionFilter.doFilter(CompressionFilter.java:49)
          	at org.eclipse.jetty.servlet.ServletHandler$CachedChain.doFilter(ServletHandler.java:1482)
          	at hudson.util.CharacterEncodingFilter.doFilter(CharacterEncodingFilter.java:81)
          	at org.eclipse.jetty.servlet.ServletHandler$CachedChain.doFilter(ServletHandler.java:1482)
          	at org.kohsuke.stapler.DiagnosticThreadNameFilter.doFilter(DiagnosticThreadNameFilter.java:30)
          	at org.eclipse.jetty.servlet.ServletHandler$CachedChain.doFilter(ServletHandler.java:1474)
          	at org.eclipse.jetty.servlet.ServletHandler.doHandle(ServletHandler.java:499)
          	at org.eclipse.jetty.server.handler.ScopedHandler.handle(ScopedHandler.java:137)
          	at org.eclipse.jetty.security.SecurityHandler.handle(SecurityHandler.java:533)
          	at org.eclipse.jetty.server.session.SessionHandler.doHandle(SessionHandler.java:231)
          	at org.eclipse.jetty.server.handler.ContextHandler.doHandle(ContextHandler.java:1086)
          	at org.eclipse.jetty.servlet.ServletHandler.doScope(ServletHandler.java:428)
          	at org.eclipse.jetty.server.session.SessionHandler.doScope(SessionHandler.java:193)
          	at org.eclipse.jetty.server.handler.ContextHandler.doScope(ContextHandler.java:1020)
          	at org.eclipse.jetty.server.handler.ScopedHandler.handle(ScopedHandler.java:135)
          	at org.eclipse.jetty.server.handler.HandlerWrapper.handle(HandlerWrapper.java:116)
          	at org.eclipse.jetty.server.Server.handle(Server.java:370)
          	at org.eclipse.jetty.server.AbstractHttpConnection.handleRequest(AbstractHttpConnection.java:489)
          	at org.eclipse.jetty.server.AbstractHttpConnection.headerComplete(AbstractHttpConnection.java:949)
          	at org.eclipse.jetty.server.AbstractHttpConnection$RequestHandler.headerComplete(AbstractHttpConnection.java:1011)
          	at org.eclipse.jetty.http.HttpParser.parseNext(HttpParser.java:644)
          	at org.eclipse.jetty.http.HttpParser.parseAvailable(HttpParser.java:235)
          	at org.eclipse.jetty.server.AsyncHttpConnection.handle(AsyncHttpConnection.java:82)
          	at org.eclipse.jetty.io.nio.SelectChannelEndPoint.handle(SelectChannelEndPoint.java:668)
          	at org.eclipse.jetty.io.nio.SelectChannelEndPoint$1.run(SelectChannelEndPoint.java:52)
          	at winstone.BoundedExecutorService$1.run(BoundedExecutorService.java:77)
          	at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1145)
          	at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:615)
          	at java.lang.Thread.run(Thread.java:745)
          

          David Zschille added a comment - I have this error also with every plugin in try to update: Git plugin Failure java.io.IOException: Downloaded file / var /lib/jenkins/plugins/git.jpi.tmp does not match expected SHA-1, expected 'lwiTe8A0PGiqYzaeKElzmefzY2Q=' , actual 'anAU1+oliegyXOf0ZFTogzVOe7s=' at hudson.model.UpdateCenter.verifyChecksums(UpdateCenter.java:1309) at hudson.model.UpdateCenter.access$900(UpdateCenter.java:124) at hudson.model.UpdateCenter$InstallationJob.replace(UpdateCenter.java:1408) at hudson.model.UpdateCenter$UpdateCenterConfiguration.install(UpdateCenter.java:846) at hudson.model.UpdateCenter$DownloadJob._run(UpdateCenter.java:1188) at hudson.model.UpdateCenter$InstallationJob._run(UpdateCenter.java:1366) at hudson.model.UpdateCenter$DownloadJob.run(UpdateCenter.java:1163) at java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:471) at java.util.concurrent.FutureTask.run(FutureTask.java:262) at hudson.remoting.AtmostOneThreadExecutor$Worker.run(AtmostOneThreadExecutor.java:110) at java.lang. Thread .run( Thread .java:745) When i choose to "Check now" the update information, i get this error: java.io.IOException: Could not find JSON in http: //updates.jenkins-ci.org/update-center.json?id= default &version=1.625.3 at hudson.model.DownloadService.loadJSON(DownloadService.java:170) at hudson.model.UpdateSite.updateDirectlyNow(UpdateSite.java:173) at hudson.PluginManager.doCheckUpdatesServer(PluginManager.java:894) at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:57) at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43) at java.lang.reflect.Method.invoke(Method.java:606) at org.kohsuke.stapler.Function$InstanceFunction.invoke(Function.java:298) at org.kohsuke.stapler.interceptor.RequirePOST$Processor.invoke(RequirePOST.java:46) at org.kohsuke.stapler.Function$InterceptedFunction.invoke(Function.java:399) at org.kohsuke.stapler.Function.bindAndInvoke(Function.java:161) at org.kohsuke.stapler.Function.bindAndInvokeAndServeResponse(Function.java:96) at org.kohsuke.stapler.MetaClass$1.doDispatch(MetaClass.java:121) at org.kohsuke.stapler.NameBasedDispatcher.dispatch(NameBasedDispatcher.java:53) at org.kohsuke.stapler.Stapler.tryInvoke(Stapler.java:746) at org.kohsuke.stapler.Stapler.invoke(Stapler.java:876) at org.kohsuke.stapler.MetaClass$3.doDispatch(MetaClass.java:183) at org.kohsuke.stapler.NameBasedDispatcher.dispatch(NameBasedDispatcher.java:53) at org.kohsuke.stapler.Stapler.tryInvoke(Stapler.java:746) at org.kohsuke.stapler.Stapler.invoke(Stapler.java:876) at org.kohsuke.stapler.Stapler.invoke(Stapler.java:649) at org.kohsuke.stapler.Stapler.service(Stapler.java:238) at javax.servlet.http.HttpServlet.service(HttpServlet.java:848) at org.eclipse.jetty.servlet.ServletHolder.handle(ServletHolder.java:686) at org.eclipse.jetty.servlet.ServletHandler$CachedChain.doFilter(ServletHandler.java:1494) at hudson.util.PluginServletFilter$1.doFilter(PluginServletFilter.java:132) at hudson.util.PluginServletFilter.doFilter(PluginServletFilter.java:123) at org.eclipse.jetty.servlet.ServletHandler$CachedChain.doFilter(ServletHandler.java:1482) at hudson.security.csrf.CrumbFilter.doFilter(CrumbFilter.java:49) at org.eclipse.jetty.servlet.ServletHandler$CachedChain.doFilter(ServletHandler.java:1482) at hudson.security.ChainedServletFilter$1.doFilter(ChainedServletFilter.java:84) at hudson.security.UnwrapSecurityExceptionFilter.doFilter(UnwrapSecurityExceptionFilter.java:51) at hudson.security.ChainedServletFilter$1.doFilter(ChainedServletFilter.java:87) at jenkins.security.ExceptionTranslationFilter.doFilter(ExceptionTranslationFilter.java:117) at hudson.security.ChainedServletFilter$1.doFilter(ChainedServletFilter.java:87) at org.acegisecurity.providers.anonymous.AnonymousProcessingFilter.doFilter(AnonymousProcessingFilter.java:125) at hudson.security.ChainedServletFilter$1.doFilter(ChainedServletFilter.java:87) at org.acegisecurity.ui.rememberme.RememberMeProcessingFilter.doFilter(RememberMeProcessingFilter.java:142) at hudson.security.ChainedServletFilter$1.doFilter(ChainedServletFilter.java:87) at org.acegisecurity.ui.AbstractProcessingFilter.doFilter(AbstractProcessingFilter.java:271) at hudson.security.ChainedServletFilter$1.doFilter(ChainedServletFilter.java:87) at jenkins.security.BasicHeaderProcessor.doFilter(BasicHeaderProcessor.java:93) at hudson.security.ChainedServletFilter$1.doFilter(ChainedServletFilter.java:87) at org.acegisecurity.context.HttpSessionContextIntegrationFilter.doFilter(HttpSessionContextIntegrationFilter.java:249) at hudson.security.HttpSessionContextIntegrationFilter2.doFilter(HttpSessionContextIntegrationFilter2.java:67) at hudson.security.ChainedServletFilter$1.doFilter(ChainedServletFilter.java:87) at hudson.security.ChainedServletFilter.doFilter(ChainedServletFilter.java:76) at hudson.security.HudsonFilter.doFilter(HudsonFilter.java:171) at org.eclipse.jetty.servlet.ServletHandler$CachedChain.doFilter(ServletHandler.java:1482) at org.kohsuke.stapler.compression.CompressionFilter.doFilter(CompressionFilter.java:49) at org.eclipse.jetty.servlet.ServletHandler$CachedChain.doFilter(ServletHandler.java:1482) at hudson.util.CharacterEncodingFilter.doFilter(CharacterEncodingFilter.java:81) at org.eclipse.jetty.servlet.ServletHandler$CachedChain.doFilter(ServletHandler.java:1482) at org.kohsuke.stapler.DiagnosticThreadNameFilter.doFilter(DiagnosticThreadNameFilter.java:30) at org.eclipse.jetty.servlet.ServletHandler$CachedChain.doFilter(ServletHandler.java:1474) at org.eclipse.jetty.servlet.ServletHandler.doHandle(ServletHandler.java:499) at org.eclipse.jetty.server.handler.ScopedHandler.handle(ScopedHandler.java:137) at org.eclipse.jetty.security.SecurityHandler.handle(SecurityHandler.java:533) at org.eclipse.jetty.server.session.SessionHandler.doHandle(SessionHandler.java:231) at org.eclipse.jetty.server.handler.ContextHandler.doHandle(ContextHandler.java:1086) at org.eclipse.jetty.servlet.ServletHandler.doScope(ServletHandler.java:428) at org.eclipse.jetty.server.session.SessionHandler.doScope(SessionHandler.java:193) at org.eclipse.jetty.server.handler.ContextHandler.doScope(ContextHandler.java:1020) at org.eclipse.jetty.server.handler.ScopedHandler.handle(ScopedHandler.java:135) at org.eclipse.jetty.server.handler.HandlerWrapper.handle(HandlerWrapper.java:116) at org.eclipse.jetty.server.Server.handle(Server.java:370) at org.eclipse.jetty.server.AbstractHttpConnection.handleRequest(AbstractHttpConnection.java:489) at org.eclipse.jetty.server.AbstractHttpConnection.headerComplete(AbstractHttpConnection.java:949) at org.eclipse.jetty.server.AbstractHttpConnection$RequestHandler.headerComplete(AbstractHttpConnection.java:1011) at org.eclipse.jetty.http.HttpParser.parseNext(HttpParser.java:644) at org.eclipse.jetty.http.HttpParser.parseAvailable(HttpParser.java:235) at org.eclipse.jetty.server.AsyncHttpConnection.handle(AsyncHttpConnection.java:82) at org.eclipse.jetty.io.nio.SelectChannelEndPoint.handle(SelectChannelEndPoint.java:668) at org.eclipse.jetty.io.nio.SelectChannelEndPoint$1.run(SelectChannelEndPoint.java:52) at winstone.BoundedExecutorService$1.run(BoundedExecutorService.java:77) at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1145) at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:615) at java.lang. Thread .run( Thread .java:745)

          I don't have the issue with "Check now". It completes without an error. Log file says "Obtained the latest update center data file for UpdateSource default".
          The error only occurs when attempting to update any plugin, so you are right it doesn't seem to be a plugin specific issue.

          Alexander Buchholtz added a comment - I don't have the issue with "Check now". It completes without an error. Log file says "Obtained the latest update center data file for UpdateSource default". The error only occurs when attempting to update any plugin, so you are right it doesn't seem to be a plugin specific issue.

          Daniel Beck added a comment -

          Probably a misconfigured internet connection, a (temporarily?) bad mirror, or an MITM attack. Not a bug in Jenkins (the bug was that checksums weren't verified for a long time).

          Daniel Beck added a comment - Probably a misconfigured internet connection, a (temporarily?) bad mirror, or an MITM attack. Not a bug in Jenkins (the bug was that checksums weren't verified for a long time).

          Yes, seems that it was a temporarily error, it's gone now. Perhaps somehow connected to INFRA-557, which i had at the same time.

          David Zschille added a comment - Yes, seems that it was a temporarily error, it's gone now. Perhaps somehow connected to INFRA-557, which i had at the same time.

          yang yury added a comment -

          Hello, I met this problem too, please tell me how to resolve it, thank you.

          yang yury added a comment - Hello, I met this problem too, please tell me how to resolve it, thank you.

          yang yury added a comment -

          when i installed jenkins and install plugins at first time, i met this:
          java.io.IOException: Downloaded file /Users/xiaoenai/.jenkins/plugins/structs.jpi.tmp does not match expected SHA-1, expected 'fK+F0PEfSS//DOqmNJvX2rQYabo=', actual '97ehMYq6rsni+8CN01dvmpqBTbY='
          at hudson.model.UpdateCenter.verifyChecksums(UpdateCenter.java:1799)
          at hudson.model.UpdateCenter.access$1100(UpdateCenter.java:147)
          at hudson.model.UpdateCenter$InstallationJob.replace(UpdateCenter.java:1950)
          at hudson.model.UpdateCenter$UpdateCenterConfiguration.install(UpdateCenter.java:1194)
          at hudson.model.UpdateCenter$DownloadJob._run(UpdateCenter.java:1669)
          at hudson.model.UpdateCenter$InstallationJob._run(UpdateCenter.java:1864)
          at hudson.model.UpdateCenter$DownloadJob.run(UpdateCenter.java:1640)
          at java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:511)
          at java.util.concurrent.FutureTask.run(FutureTask.java:266)
          at hudson.remoting.AtmostOneThreadExecutor$Worker.run(AtmostOneThreadExecutor.java:110)
          at java.lang.Thread.run(Thread.java:745)
          how to resolve that?

          yang yury added a comment - when i installed jenkins and install plugins at first time, i met this: java.io.IOException: Downloaded file /Users/xiaoenai/.jenkins/plugins/structs.jpi.tmp does not match expected SHA-1, expected 'fK+F0PEfSS//DOqmNJvX2rQYabo=', actual '97ehMYq6rsni+8CN01dvmpqBTbY=' at hudson.model.UpdateCenter.verifyChecksums(UpdateCenter.java:1799) at hudson.model.UpdateCenter.access$1100(UpdateCenter.java:147) at hudson.model.UpdateCenter$InstallationJob.replace(UpdateCenter.java:1950) at hudson.model.UpdateCenter$UpdateCenterConfiguration.install(UpdateCenter.java:1194) at hudson.model.UpdateCenter$DownloadJob._run(UpdateCenter.java:1669) at hudson.model.UpdateCenter$InstallationJob._run(UpdateCenter.java:1864) at hudson.model.UpdateCenter$DownloadJob.run(UpdateCenter.java:1640) at java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:511) at java.util.concurrent.FutureTask.run(FutureTask.java:266) at hudson.remoting.AtmostOneThreadExecutor$Worker.run(AtmostOneThreadExecutor.java:110) at java.lang.Thread.run(Thread.java:745) how to resolve that?

          Andy Wang added a comment -

          Same problem here.

          java.io.IOException: Downloaded file /var/lib/jenkins/plugins/jquery-detached.jpi.tmp does not match expected SHA-1, expected 'vuqbKZ3z2kJ78+Nc90ySO72bN9g=', actual '3GcisaizOxcwYMb7SuFf/INCny4='
          	at hudson.model.UpdateCenter.verifyChecksums(UpdateCenter.java:1799)
          	at hudson.model.UpdateCenter.access$1100(UpdateCenter.java:147)
          	at hudson.model.UpdateCenter$InstallationJob.replace(UpdateCenter.java:1950)
          	at hudson.model.UpdateCenter$UpdateCenterConfiguration.install(UpdateCenter.java:1194)
          	at hudson.model.UpdateCenter$DownloadJob._run(UpdateCenter.java:1669)
          	at hudson.model.UpdateCenter$InstallationJob._run(UpdateCenter.java:1864)
          	at hudson.model.UpdateCenter$DownloadJob.run(UpdateCenter.java:1640)
          	at java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:511)
          	at java.util.concurrent.FutureTask.run(FutureTask.java:266)
          	at hudson.remoting.AtmostOneThreadExecutor$Worker.run(AtmostOneThreadExecutor.java:110)
          	at java.lang.Thread.run(Thread.java:745)
          

          Andy Wang added a comment - Same problem here. java.io.IOException: Downloaded file / var /lib/jenkins/plugins/jquery-detached.jpi.tmp does not match expected SHA-1, expected 'vuqbKZ3z2kJ78+Nc90ySO72bN9g=' , actual '3GcisaizOxcwYMb7SuFf/INCny4=' at hudson.model.UpdateCenter.verifyChecksums(UpdateCenter.java:1799) at hudson.model.UpdateCenter.access$1100(UpdateCenter.java:147) at hudson.model.UpdateCenter$InstallationJob.replace(UpdateCenter.java:1950) at hudson.model.UpdateCenter$UpdateCenterConfiguration.install(UpdateCenter.java:1194) at hudson.model.UpdateCenter$DownloadJob._run(UpdateCenter.java:1669) at hudson.model.UpdateCenter$InstallationJob._run(UpdateCenter.java:1864) at hudson.model.UpdateCenter$DownloadJob.run(UpdateCenter.java:1640) at java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:511) at java.util.concurrent.FutureTask.run(FutureTask.java:266) at hudson.remoting.AtmostOneThreadExecutor$Worker.run(AtmostOneThreadExecutor.java:110) at java.lang. Thread .run( Thread .java:745)

          Daniel Beck added a comment -

          Still not a defect in Jenkins.

          Probably a misconfigured internet connection, a (temporarily?) bad mirror, or an MITM attack. Not a bug in Jenkins (the bug was that checksums weren't verified for a long time).

          And for infra issues to investigate, you don't provide enough information, e.g. which mirror is used.

          Daniel Beck added a comment - Still not a defect in Jenkins. Probably a misconfigured internet connection, a (temporarily?) bad mirror, or an MITM attack. Not a bug in Jenkins (the bug was that checksums weren't verified for a long time). And for infra issues to investigate, you don't provide enough information, e.g. which mirror is used.

          Daniel Beck added a comment -

          Probably what's described more accurately in recent comments to JENKINS-8028 – likely Chinese mirror weirdness.

          Daniel Beck added a comment - Probably what's described more accurately in recent comments to JENKINS-8028 – likely Chinese mirror weirdness.

          tik dik added a comment - - edited

          my jenkins version 2.19, still have the same issue

          Preparation
          Checking internet connectivity
          Checking update center connectivity
          java.net.MalformedURLException: no protocol: at java.net.URL.(URL.java:593) at java.net.URL.(URL.java:490) at java.net.URL.(URL.java:439) at hudson.model.UpdateCenter$UpdateCenterConfiguration.toUpdateCenterCheckUrl(UpdateCenter.java:1059) at hudson.model.UpdateCenter$UpdateCenterConfiguration.checkUpdateCenter(UpdateCenter.java:1045) at hudson.model.UpdateCenter$ConnectionCheckJob.run(UpdateCenter.java:1477) at java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:511) at java.util.concurrent.FutureTask.run(FutureTask.java:266) at hudson.remoting.AtmostOneThreadExecutor$Worker.run(AtmostOneThreadExecutor.java:110) at java.lang.Thread.run(Thread.java:745)
          xUnit plugin
          Failure - Details
          Static Analysis Utilities
          Failure - Details
          PMD Plug-in
          Failure - Details
          Static Analysis Utilities Success
          Checkstyle Plug-in
          Failure -
          java.io.IOException: Downloaded file /var/lib/jenkins/plugins/checkstyle.jpi.tmp does not match expected SHA-1, expected 'xapio8iSEkCFTYeIaD5R/N9ViYw=', actual 'oedAya3U0wtIaVcj7GhqGzy5dZU='
          at hudson.model.UpdateCenter.verifyChecksums(UpdateCenter.java:1799)
          at hudson.model.UpdateCenter.access$1100(UpdateCenter.java:147)
          at hudson.model.UpdateCenter$InstallationJob.replace(UpdateCenter.java:1950)
          at hudson.model.UpdateCenter$UpdateCenterConfiguration.install(UpdateCenter.java:1194)
          at hudson.model.UpdateCenter$DownloadJob._run(UpdateCenter.java:1669)
          at hudson.model.UpdateCenter$InstallationJob._run(UpdateCenter.java:1864)
          at hudson.model.UpdateCenter$DownloadJob.run(UpdateCenter.java:1640)
          at java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:511)
          at java.util.concurrent.FutureTask.run(FutureTask.java:266)
          at hudson.remoting.AtmostOneThreadExecutor$Worker.run(AtmostOneThreadExecutor.java:110)
          at java.lang.Thread.run(Thread.java:745)

          $:~/Web$ cat /var/lib/jenkins/plugins/checkstyle.jpi.tmp
          <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
          <html><head>
          <title>302 Found</title>
          </head><body>
          <h1>Found</h1>
          <p>The document has moved <a href="https://mirrors.tuna.tsinghua.edu.cn/jenkins/plugins/checkstyle/3.46/checkstyle.hpi">here</a>.</p>
          </body></html>

          tik dik added a comment - - edited my jenkins version 2.19, still have the same issue Preparation Checking internet connectivity Checking update center connectivity java.net.MalformedURLException: no protocol: at java.net.URL.(URL.java:593) at java.net.URL.(URL.java:490) at java.net.URL.(URL.java:439) at hudson.model.UpdateCenter$UpdateCenterConfiguration.toUpdateCenterCheckUrl(UpdateCenter.java:1059) at hudson.model.UpdateCenter$UpdateCenterConfiguration.checkUpdateCenter(UpdateCenter.java:1045) at hudson.model.UpdateCenter$ConnectionCheckJob.run(UpdateCenter.java:1477) at java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:511) at java.util.concurrent.FutureTask.run(FutureTask.java:266) at hudson.remoting.AtmostOneThreadExecutor$Worker.run(AtmostOneThreadExecutor.java:110) at java.lang.Thread.run(Thread.java:745) xUnit plugin Failure - Details Static Analysis Utilities Failure - Details PMD Plug-in Failure - Details Static Analysis Utilities Success Checkstyle Plug-in Failure - java.io.IOException: Downloaded file /var/lib/jenkins/plugins/checkstyle.jpi.tmp does not match expected SHA-1, expected 'xapio8iSEkCFTYeIaD5R/N9ViYw=', actual 'oedAya3U0wtIaVcj7GhqGzy5dZU=' at hudson.model.UpdateCenter.verifyChecksums(UpdateCenter.java:1799) at hudson.model.UpdateCenter.access$1100(UpdateCenter.java:147) at hudson.model.UpdateCenter$InstallationJob.replace(UpdateCenter.java:1950) at hudson.model.UpdateCenter$UpdateCenterConfiguration.install(UpdateCenter.java:1194) at hudson.model.UpdateCenter$DownloadJob._run(UpdateCenter.java:1669) at hudson.model.UpdateCenter$InstallationJob._run(UpdateCenter.java:1864) at hudson.model.UpdateCenter$DownloadJob.run(UpdateCenter.java:1640) at java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:511) at java.util.concurrent.FutureTask.run(FutureTask.java:266) at hudson.remoting.AtmostOneThreadExecutor$Worker.run(AtmostOneThreadExecutor.java:110) at java.lang.Thread.run(Thread.java:745) $:~/Web$ cat /var/lib/jenkins/plugins/checkstyle.jpi.tmp <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"> <html><head> <title>302 Found</title> </head><body> <h1>Found</h1> <p>The document has moved <a href="https://mirrors.tuna.tsinghua.edu.cn/jenkins/plugins/checkstyle/3.46/checkstyle.hpi">here</a>.</p> </body></html>

          tik dik added a comment -

          download the hpi file, and in manage plugins advance tab ,upload the file install.
          before install ,need install analysis-core plugin manual upload.

          i have to install plugin manual

          tik dik added a comment - download the hpi file, and in manage plugins advance tab ,upload the file install. before install ,need install analysis-core plugin manual upload. i have to install plugin manual

          Andy Wang added a comment -

          Just out of curiosity, is there anyone who's not from China also encountered this problem? Maybe it's the Chinese network issue.

          Andy Wang added a comment - Just out of curiosity, is there anyone who's not from China also encountered this problem? Maybe it's the Chinese network issue.

          Daniel Beck added a comment -

          Tracking this as JENKINS-38340, which I've rewritten to address the actual issue (at least as far as I currently understand it). Please refrain from posting further comments here.

          Daniel Beck added a comment - Tracking this as JENKINS-38340 , which I've rewritten to address the actual issue (at least as far as I currently understand it). Please refrain from posting further comments here.

          Adil Chahid added a comment -

          Same problem here!

          After updating our Jenkins instance to version 2.46.3.

          Cannot update a single plugin.

          java.io.IOException: Downloaded file /var/lib/jenkins/plugins/blueocean-autofavorite.jpi.tmp does not match expected SHA-1, expected 'Kkky+jvLE9oX9AxORzXXTVi82U4=', actual 'yw1neSO8aq/gYWbuMhhULie8GEw=' at hudson.model.UpdateCenter.verifyChecksums(UpdateCenter.java:1815) at hudson.model.UpdateCenter.access$1100(UpdateCenter.java:148) at hudson.model.UpdateCenter$InstallationJob.replace(UpdateCenter.java:1969) at hudson.model.UpdateCenter$UpdateCenterConfiguration.install(UpdateCenter.java:1201) at hudson.model.UpdateCenter$DownloadJob._run(UpdateCenter.java:1685) at hudson.model.UpdateCenter$InstallationJob._run(UpdateCenter.java:1880) at hudson.model.UpdateCenter$DownloadJob.run(UpdateCenter.java:1656) at java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:511) at java.util.concurrent.FutureTask.run(FutureTask.java:266) at hudson.remoting.AtmostOneThreadExecutor$Worker.run(AtmostOneThreadExecutor.java:110) at java.lang.Thread.run(Thread.java:748)

          here is the content of my hudson.model.UpdateCenter.xml:

          <?xml version='1.0' encoding='UTF-8'?>
          <sites>
            <site>
              <id>default</id>
              <url>http://updates.jenkins-ci.org/update-center.json</url>
            </site>
          </sites>

          Adil Chahid added a comment - Same problem here! After updating our Jenkins instance to version 2.46.3. Cannot update a single plugin. java.io.IOException: Downloaded file / var /lib/jenkins/plugins/blueocean-autofavorite.jpi.tmp does not match expected SHA-1, expected 'Kkky+jvLE9oX9AxORzXXTVi82U4=' , actual 'yw1neSO8aq/gYWbuMhhULie8GEw=' at hudson.model.UpdateCenter.verifyChecksums(UpdateCenter.java:1815) at hudson.model.UpdateCenter.access$1100(UpdateCenter.java:148) at hudson.model.UpdateCenter$InstallationJob.replace(UpdateCenter.java:1969) at hudson.model.UpdateCenter$UpdateCenterConfiguration.install(UpdateCenter.java:1201) at hudson.model.UpdateCenter$DownloadJob._run(UpdateCenter.java:1685) at hudson.model.UpdateCenter$InstallationJob._run(UpdateCenter.java:1880) at hudson.model.UpdateCenter$DownloadJob.run(UpdateCenter.java:1656) at java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:511) at java.util.concurrent.FutureTask.run(FutureTask.java:266) at hudson.remoting.AtmostOneThreadExecutor$Worker.run(AtmostOneThreadExecutor.java:110) at java.lang. Thread .run( Thread .java:748) here is the content of my hudson.model.UpdateCenter.xml: <?xml version= '1.0' encoding= 'UTF-8' ?> <sites>   <site>     <id> default </id>     <url>http: //updates.jenkins-ci.org/update-center.json</url>   </site> </sites>

          Daniel Beck added a comment -

          The actual content of /var/lib/jenkins/plugins/blueocean-autofavorite.jpi.tmp would be useful to understand what happened.

          Daniel Beck added a comment - The actual content of /var/lib/jenkins/plugins/blueocean-autofavorite.jpi.tmp would be useful to understand what happened.

          Tom Nijboer added a comment -

          Tom Nijboer added a comment - Problem is the redirect from http://updates.jenkins-ci.org/update-center.json  to for example http://ftp-chi.osuosl.org/pub/jenkins/updates/current/update-center.json  

          Daniel Beck added a comment -

          Some plugins, like Kubernetes Pipeline globally disable following redirects (see my comments in JENKINS-38185). Still not a bug in Jenkins core, just a misbehaving plugin.

          Daniel Beck added a comment - Some plugins, like Kubernetes Pipeline globally disable following redirects (see my comments in JENKINS-38185 ). Still not a bug in Jenkins core, just a misbehaving plugin.

          Adil Chahid added a comment -

          Hi Daniel, we think that we have discovered the problem on our end: the cacerts used by the Open JDK (that runs Jenkins ) was alterted in order to include our internal Certificate Authorities so Jenkins was not able anymore to connect to the Update servers exposed in HTTPS.

          Thanks for your time and interest!

           

          Adil Chahid added a comment - Hi Daniel, we think that we have discovered the problem on our end: the cacerts used by the Open JDK (that runs Jenkins ) was alterted in order to include our internal Certificate Authorities so Jenkins was not able anymore to connect to the Update servers exposed in HTTPS. Thanks for your time and interest!  

          Ronak SHAH added a comment - - edited

          Facing the issue again on Jenkins 2.73.1. Attached the screenshot

          Ronak SHAH added a comment - - edited Facing the issue again on Jenkins 2.73.1. Attached the screenshot

          Daniel Beck added a comment -

          ronak1009 There are plenty of reasons this can happen due to your infrastructure, as well as the issue I mention above. You need to show that the file that the Jenkins project infra serves is broken in some way.

          Daniel Beck added a comment - ronak1009 There are plenty of reasons this can happen due to your infrastructure, as well as the issue I mention above. You need to show that the file that the Jenkins project infra serves is broken in some way.

            oleg_nenashev Oleg Nenashev
            albuch Alexander Buchholtz
            Votes:
            2 Vote for this issue
            Watchers:
            10 Start watching this issue

              Created:
              Updated:
              Resolved: