• Icon: Bug Bug
    • Resolution: Not A Defect
    • Icon: Critical Critical
    • core
    • None
    • Docker Jenkins 2.155 and 2.156 seems to affect all variants (jdk11, alpine, etc)

      First start of new installation generates an error during the installation of the default plugin set:

      WARNING: signature check failed for https://updates.jenkins.io/updates/hudson.tools.JDKInstaller.json
      
      Exception: NotAfter: Sat Dec 15 16:54:02 GMT 2018

      Install seems to complete but creating jobs results in exceptions.

          [JENKINS-55222] JDK Installer certificate expiry

          Applicable portion of the log extracted


          WARNING: signature check failed for http://updates.jenkins-ci.org/updates/hudson.tools.JDKInstaller.json
          ERROR: Signature verification failed in downloadable 'hudson.tools.JDKInstaller' <a href='#' class='showDetails'>(show details)</a><pre style='display:none'>java.security.cert.CertificateExpiredException: NotAfter: Sat Dec 15 10:54:02 CST 2018
          <br> at sun.security.x509.CertificateValidity.valid(Unknown Source)
          <br> at sun.security.x509.X509CertImpl.checkValidity(Unknown Source)
          <br> at sun.security.provider.certpath.BasicChecker.verifyValidity(Unknown Source)
          <br> at sun.security.provider.certpath.BasicChecker.check(Unknown Source)
          <br>Caused: java.security.cert.CertPathValidatorException: validity check failed
          <br> at sun.security.provider.certpath.PKIXMasterCertPathValidator.validate(Unknown Source)
          <br> at sun.security.provider.certpath.PKIXCertPathValidator.validate(Unknown Source)
          <br> at sun.security.provider.certpath.PKIXCertPathValidator.validate(Unknown Source)
          <br> at sun.security.provider.certpath.PKIXCertPathValidator.engineValidate(Unknown Source)
          <br> at java.security.cert.CertPathValidator.validate(Unknown Source)
          <br> at org.jvnet.hudson.crypto.CertificateUtil.validatePath(CertificateUtil.java:93)
          <br> at jenkins.util.JSONSignatureValidator.verifySignature(JSONSignatureValidator.java:85)
          <br> at hudson.model.DownloadService$Downloadable.updateNow(DownloadService.java:416)
          <br> at jenkins.model.DownloadSettings$DailyCheck.execute(DownloadSettings.java:121)
          <br> at hudson.model.AsyncPeriodicWork$1.run(AsyncPeriodicWork.java:101)
          <br> at java.lang.Thread.run(Unknown Source)
          <br></pre>
          at hudson.util.FormValidation._errorWithMarkup(FormValidation.java:266)
          at hudson.util.FormValidation._error(FormValidation.java:198)
          at hudson.util.FormValidation.error(FormValidation.java:188)
          at jenkins.util.JSONSignatureValidator.verifySignature(JSONSignatureValidator.java:134)
          at hudson.model.DownloadService$Downloadable.updateNow(DownloadService.java:416)
          at jenkins.model.DownloadSettings$DailyCheck.execute(DownloadSettings.java:121)
          at hudson.model.AsyncPeriodicWork$1.run(AsyncPeriodicWork.java:101)
          at java.lang.Thread.run(Unknown Source)

          Nathan Lindshield added a comment - Applicable portion of the log extracted WARNING: signature check failed for http://updates.jenkins-ci.org/updates/hudson.tools.JDKInstaller.json ERROR: Signature verification failed in downloadable 'hudson.tools.JDKInstaller' <a href='#' class='showDetails'>(show details)</a><pre style='display:none'>java.security.cert.CertificateExpiredException: NotAfter: Sat Dec 15 10:54:02 CST 2018 <br> at sun.security.x509.CertificateValidity.valid(Unknown Source) <br> at sun.security.x509.X509CertImpl.checkValidity(Unknown Source) <br> at sun.security.provider.certpath.BasicChecker.verifyValidity(Unknown Source) <br> at sun.security.provider.certpath.BasicChecker.check(Unknown Source) <br>Caused: java.security.cert.CertPathValidatorException: validity check failed <br> at sun.security.provider.certpath.PKIXMasterCertPathValidator.validate(Unknown Source) <br> at sun.security.provider.certpath.PKIXCertPathValidator.validate(Unknown Source) <br> at sun.security.provider.certpath.PKIXCertPathValidator.validate(Unknown Source) <br> at sun.security.provider.certpath.PKIXCertPathValidator.engineValidate(Unknown Source) <br> at java.security.cert.CertPathValidator.validate(Unknown Source) <br> at org.jvnet.hudson.crypto.CertificateUtil.validatePath(CertificateUtil.java:93) <br> at jenkins.util.JSONSignatureValidator.verifySignature(JSONSignatureValidator.java:85) <br> at hudson.model.DownloadService$Downloadable.updateNow(DownloadService.java:416) <br> at jenkins.model.DownloadSettings$DailyCheck.execute(DownloadSettings.java:121) <br> at hudson.model.AsyncPeriodicWork$1.run(AsyncPeriodicWork.java:101) <br> at java.lang.Thread.run(Unknown Source) <br></pre> at hudson.util.FormValidation._errorWithMarkup(FormValidation.java:266) at hudson.util.FormValidation._error(FormValidation.java:198) at hudson.util.FormValidation.error(FormValidation.java:188) at jenkins.util.JSONSignatureValidator.verifySignature(JSONSignatureValidator.java:134) at hudson.model.DownloadService$Downloadable.updateNow(DownloadService.java:416) at jenkins.model.DownloadSettings$DailyCheck.execute(DownloadSettings.java:121) at hudson.model.AsyncPeriodicWork$1.run(AsyncPeriodicWork.java:101) at java.lang.Thread.run(Unknown Source)

          Pavel Roskin added a comment -

          Updating plugins gets me to a page with the text " None of the tool installer metadata passed the signature check". This started recently.

          jenkins.log includes: "java.security.cert.CertificateExpiredException: NotAfter: Sat Dec 15 08:54:02 PST 2018".

          That's the same time in a different timezone.

          Pavel Roskin added a comment - Updating plugins gets me to a page with the text " None of the tool installer metadata passed the signature check". This started recently. jenkins.log includes: "java.security.cert.CertificateExpiredException: NotAfter: Sat Dec 15 08:54:02 PST 2018". That's the same time in a different timezone.

          Daniel Beck added a comment -

          Actually an infra issue tracked at INFRA-1944.

          Daniel Beck added a comment - Actually an infra issue tracked at INFRA-1944.

            Unassigned Unassigned
            javapress Corey Groves
            Votes:
            4 Vote for this issue
            Watchers:
            6 Start watching this issue

              Created:
              Updated:
              Resolved: