-
Bug
-
Resolution: Duplicate
-
Blocker
-
None
-
Operating System: Windows 2012 R2 64-bit (Jenkins Master)
Running bundled Java 8 JRE version 8.0.1440.1
Running as a Windows service.
Java parameters:
-Xrs -Xmx256m -Dhudson.lifecycle=hudson.lifecycle.WindowsServiceLifecycle -Dhudson.model.DirectoryBrowserSupport.CSP="sandbox allow-scripts; default-src 'none'; img-src 'self' data: ; style-src 'self' 'unsafe-inline' data: ; script-src 'self' 'unsafe-inline' 'unsafe-eval' ;" -jar "%BASE%\jenkins.war" --httpPort=-1 --httpsPort=443 --httpsKeyStore="%BASE%\jenkins.jks" --httpsKeyStorePassword="*****not**shown**here*****"
Jenkins version 2.217 (installed via automatic upgrade)
Running Jenkins directly.
No reverse proxy.
Installed Jenkins via Windows installer.
Your web browser: latest Firefox for Windows on Windows 10 64-bit.Operating System: Windows 2012 R2 64-bit (Jenkins Master) Running bundled Java 8 JRE version 8.0.1440.1 Running as a Windows service. Java parameters: -Xrs -Xmx256m -Dhudson.lifecycle=hudson.lifecycle.WindowsServiceLifecycle -Dhudson.model.DirectoryBrowserSupport.CSP="sandbox allow-scripts; default-src 'none'; img-src 'self' data: ; style-src 'self' 'unsafe-inline' data: ; script-src 'self' 'unsafe-inline' 'unsafe-eval' ;" -jar "%BASE%\jenkins.war" --httpPort=-1 --httpsPort=443 --httpsKeyStore="%BASE%\jenkins.jks" --httpsKeyStorePassword="*****not**shown**here*****" Jenkins version 2.217 (installed via automatic upgrade) Running Jenkins directly. No reverse proxy. Installed Jenkins via Windows installer. Your web browser: latest Firefox for Windows on Windows 10 64-bit.
Immediately after attempting to upgrade Jenkins automatically, Jenkins Windows service starts but fails within 4 seconds. See attached error log.
The key error is apparently:
java.lang.IllegalStateException: KeyStores with multiple certificates are not supported on the base class org.eclipse.jetty.util.ssl.SslContextFactory. (Use org.eclipse.jetty.util.ssl.SslContextFactory$Server or org.eclipse.jetty.util.ssl.SslContextFactory$Client instead)
The issue relates to a change in Jetty noted at the following post:
https://github.com/eclipse/jetty.project/issues/4425
Note that Jetty in Jenkins 2.217 was recently updated, per the changelog, from 9.4.22.v20191022 to 9.4.25.v20191220
Apparently a code fix is required to use the newer Jetty, as detailed in comment https://github.com/eclipse/jetty.project/issues/4425#issuecomment-565967384
- duplicates
-
JENKINS-60857 Wildcard certificates rejected by Winstone after Jetty update
- Closed
- is duplicated by
-
JENKINS-60857 Wildcard certificates rejected by Winstone after Jetty update
- Closed