-
Bug
-
Resolution: Not A Defect
-
Major
-
None
-
CA_CERTIFICATES_JAVA_VERSION 20140324
COPY_REFERENCE_FILE_LOG /var/jenkins_home/copy_reference_file.log
HOME /root
HOSTNAME a943100ea48e
JAVA_DEBIAN_VERSION 8u111-b14-2~bpo8+1
JAVA_HOME /usr/lib/jvm/java-8-openjdk-amd64
JAVA_OPTS -Djava.util.logging.config.file=/var/jenkins_home/log.properties
JAVA_VERSION 8u111
JENKINS_HOME /var/jenkins_home
JENKINS_SLAVE_AGENT_PORT 50000
JENKINS_UC https://updates.jenkins.io
JENKINS_VERSION 2.32.1
LANG C.UTF-8
PATH /usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
PWD /
SHLVL 0
TINI_SHA 0f78709a0e3c80e7c9119fdc32c2bc0f4cfc4cab
TINI_VERSION 0.13.1
------------------------------------------------------------
Installed plugins
ace-editor 1.1 true false
ant 1.4 true false
antisamy-markup-formatter 1.5 true false
bouncycastle-api 2.16.0 true false
branch-api 1.11.1 true false
build-timeout 1.18 true false
cloudbees-folder 5.16 true false
conditional-buildstep 1.3.5 true false
copyartifact 1.38.1 true false
credentials 2.1.11 true false
credentials-binding 1.10 true false
display-url-api 1.0 true false
durable-task 1.13 true false
email-ext 2.54 true false
external-monitor-job 1.7 true false
git 3.0.1 true false
git-client 2.2.1 true false
git-server 1.7 true false
github 1.25.1 true false
github-api 1.84 true false
github-branch-source 1.10.1 true false
github-organization-folder 1.5 true false
gradle 1.25 true false
handlebars 1.1.1 true false
icon-shim 2.0.3 true false
javadoc 1.4 true false
job-dsl 1.57 true false
jquery-detached 1.2.1 true false
junit 1.19 true false
ldap 1.14 true false
mailer 1.18 true false
mapdb-api 1.0.9.0 true false
matrix-auth 1.4 true false
matrix-project 1.8 true false
maven-plugin 2.14 true false
momentjs 1.1.1 true false
pam-auth 1.3 true false
parameterized-trigger 2.32 true false
pipeline-build-step 2.4 true false
pipeline-graph-analysis 1.3 true false
pipeline-input-step 2.5 true false
pipeline-milestone-step 1.3 true false
pipeline-rest-api 2.4 true false
pipeline-stage-step 2.2 true false
pipeline-stage-view 2.4 true false
plain-credentials 1.3 true false
publish-over-ssh 1.14 true false
resource-disposer 0.6 true false
run-condition 1.0 true false
sbt 1.5 true false
scm-api 1.3 true false
script-security 1.25 true false
skip-certificate-check 1.0 true false
ssh-credentials 1.12 true false
ssh-slaves 1.13 true false
structs 1.5 true false
subversion 2.7.1 true false
timestamper 1.8.8 true false
token-macro 2.0 true false
windows-slaves 1.2 true false
workflow-aggregator 2.4 true false
workflow-api 2.8 true false
workflow-basic-steps 2.3 true false
workflow-cps 2.24 true false
workflow-cps-global-lib 2.5 true false
workflow-durable-task-step 2.8 true false
workflow-job 2.9 true false
workflow-multibranch 2.9.2 true false
workflow-scm-step 2.3 true false
workflow-step-api 2.7 true false
workflow-support 2.12 true false
ws-cleanup 0.32 true falseCA_CERTIFICATES_JAVA_VERSION 20140324 COPY_REFERENCE_FILE_LOG /var/jenkins_home/copy_reference_file.log HOME /root HOSTNAME a943100ea48e JAVA_DEBIAN_VERSION 8u111-b14-2~bpo8+1 JAVA_HOME /usr/lib/jvm/java-8-openjdk-amd64 JAVA_OPTS -Djava.util.logging.config.file=/var/jenkins_home/log.properties JAVA_VERSION 8u111 JENKINS_HOME /var/jenkins_home JENKINS_SLAVE_AGENT_PORT 50000 JENKINS_UC https://updates.jenkins.io JENKINS_VERSION 2.32.1 LANG C.UTF-8 PATH /usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin PWD / SHLVL 0 TINI_SHA 0f78709a0e3c80e7c9119fdc32c2bc0f4cfc4cab TINI_VERSION 0.13.1 ------------------------------------------------------------ Installed plugins ace-editor 1.1 true false ant 1.4 true false antisamy-markup-formatter 1.5 true false bouncycastle-api 2.16.0 true false branch-api 1.11.1 true false build-timeout 1.18 true false cloudbees-folder 5.16 true false conditional-buildstep 1.3.5 true false copyartifact 1.38.1 true false credentials 2.1.11 true false credentials-binding 1.10 true false display-url-api 1.0 true false durable-task 1.13 true false email-ext 2.54 true false external-monitor-job 1.7 true false git 3.0.1 true false git-client 2.2.1 true false git-server 1.7 true false github 1.25.1 true false github-api 1.84 true false github-branch-source 1.10.1 true false github-organization-folder 1.5 true false gradle 1.25 true false handlebars 1.1.1 true false icon-shim 2.0.3 true false javadoc 1.4 true false job-dsl 1.57 true false jquery-detached 1.2.1 true false junit 1.19 true false ldap 1.14 true false mailer 1.18 true false mapdb-api 1.0.9.0 true false matrix-auth 1.4 true false matrix-project 1.8 true false maven-plugin 2.14 true false momentjs 1.1.1 true false pam-auth 1.3 true false parameterized-trigger 2.32 true false pipeline-build-step 2.4 true false pipeline-graph-analysis 1.3 true false pipeline-input-step 2.5 true false pipeline-milestone-step 1.3 true false pipeline-rest-api 2.4 true false pipeline-stage-step 2.2 true false pipeline-stage-view 2.4 true false plain-credentials 1.3 true false publish-over-ssh 1.14 true false resource-disposer 0.6 true false run-condition 1.0 true false sbt 1.5 true false scm-api 1.3 true false script-security 1.25 true false skip-certificate-check 1.0 true false ssh-credentials 1.12 true false ssh-slaves 1.13 true false structs 1.5 true false subversion 2.7.1 true false timestamper 1.8.8 true false token-macro 2.0 true false windows-slaves 1.2 true false workflow-aggregator 2.4 true false workflow-api 2.8 true false workflow-basic-steps 2.3 true false workflow-cps 2.24 true false workflow-cps-global-lib 2.5 true false workflow-durable-task-step 2.8 true false workflow-job 2.9 true false workflow-multibranch 2.9.2 true false workflow-scm-step 2.3 true false workflow-step-api 2.7 true false workflow-support 2.12 true false ws-cleanup 0.32 true false
I'm running the official jenkins docker image on CentOS 7.2. I use the SBT plugin for my builds and when it runs I see...
[DataSieve_Build_Web] $ java -Xmx2G -Xms512M -Xss32M -Dsbt.log.noformat=true -jar /var/jenkins_home/tools/org.jvnet.hudson.plugins.SbtPluginBuilder_SbtInstallation/default/sbt/bin/sbt-launch.jar web/dist
Getting org.scala-sbt sbt 0.13.11 ...
:::: ERRORS
Server access Error: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target url=https://repo.typesafe.com/typesafe/ivy-releases/org.scala-sbt/sbt/0.13.11/ivys/ivy.xml
Server access Error: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target url=https://repo.scala-sbt.org/scalasbt/ivy-snapshots/org.scala-sbt/sbt/0.13.11/ivys/ivy.xml
I understand this is happening because my JVM cacerts did not have the certificates for repo.typesafe.com and repo.scala-sbt.org so using openssl I downloaded those certificate into .pem files and using java keytool I imported them into /etc/ssl/certs/java/cacerts which I confirmed is the keystore the container jenkins JVM is using. I restarted jenkins container and verified keystore via keytool -list -v -keystore /etc/ssl/certs/java/cacerts -storepass 'changeit'
but keep getting same error. OK, so I found the "Skip Certificate Check plugin" and install it and restarted jenkins container but same issue.
I would appreciate knowing if this is a known problem with this plugin or anything else I could do to resolve this problem. Thanks, Jesse
