• Icon: Bug Bug
    • Resolution: Unresolved
    • Icon: Critical Critical
    • p4-plugin
    • None
    • Jenkins Version 2.426.3

      Unable to scan branch indexing using helix swarm, Helix streams work fine. We are getting below error in Scan Multibranch Pipeline Log. Tried all ways of giving cert path.
       
      [Fri Feb 23 14:21:24 IST 2024] Starting branch indexing...
      ... p4 client -d jenkinsTemp-51fa172c-68f9-4a92-b5ec-6056bf8e0981 +
      Client 'jenkinsTemp-51fa172c-68f9-4a92-b5ec-6056bf8e0981' doesn't exist.
       
      ERROR: [Fri Feb 23 14:21:35 IST 2024] Could not fetch branches from source ae2249af-0266-4e23-86cb-e6b95a5b31f7
      [Fri Feb 23 14:21:35 IST 2024] Finished branch indexing. Indexing took 10 sec
      FATAL: Failed to recompute children of precheckin_test
      sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
      at java.base/sun.security.provider.certpath.SunCertPathBuilder.build(SunCertPathBuilder.java:146)
      at java.base/sun.security.provider.certpath.SunCertPathBuilder.engineBuild(SunCertPathBuilder.java:127)
      at java.base/java.security.cert.CertPathBuilder.build(CertPathBuilder.java:297)
      at java.base/sun.security.validator.PKIXValidator.doBuild(PKIXValidator.java:434)
      Caused: sun.security.validator.ValidatorException: PKIX path building failed
      at java.base/sun.security.validator.PKIXValidator.doBuild(PKIXValidator.java:439)
      at java.base/sun.security.validator.PKIXValidator.engineValidate(PKIXValidator.java:306)
      at java.base/sun.security.validator.Validator.validate(Validator.java:264)
      at java.base/sun.security.ssl.X509TrustManagerImpl.validate(X509TrustManagerImpl.java:313)
      at java.base/sun.security.ssl.X509TrustManagerImpl.checkTrusted(X509TrustManagerImpl.java:222)
      at java.base/sun.security.ssl.X509TrustManagerImpl.checkServerTrusted(X509TrustManagerImpl.java:129)
      at java.base/sun.security.ssl.CertificateMessage$T12CertificateConsumer.checkServerCerts(CertificateMessage.java:638)
      Caused: javax.net.ssl.SSLHandshakeException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
      at java.base/sun.security.ssl.Alert.createSSLException(Alert.java:131)
      at java.base/sun.security.ssl.TransportContext.fatal(TransportContext.java:360)
      at java.base/sun.security.ssl.TransportContext.fatal(TransportContext.java:303)
      at java.base/sun.security.ssl.TransportContext.fatal(TransportContext.java:298)
      at java.base/sun.security.ssl.CertificateMessage$T12CertificateConsumer.checkServerCerts(CertificateMessage.java:654)
      at java.base/sun.security.ssl.CertificateMessage$T12CertificateConsumer.onCertificate(CertificateMessage.java:473)
      at java.base/sun.security.ssl.CertificateMessage$T12CertificateConsumer.consume(CertificateMessage.java:369)
      at java.base/sun.security.ssl.SSLHandshake.consume(SSLHandshake.java:392)
      at java.base/sun.security.ssl.HandshakeContext.dispatch(HandshakeContext.java:443)
      at java.base/sun.security.ssl.HandshakeContext.dispatch(HandshakeContext.java:421)
      at java.base/sun.security.ssl.TransportContext.dispatch(TransportContext.java:183)
      at java.base/sun.security.ssl.SSLTransport.decode(SSLTransport.java:172)
      at java.base/sun.security.ssl.SSLSocketImpl.decode(SSLSocketImpl.java:1511)
      at java.base/sun.security.ssl.SSLSocketImpl.readHandshakeRecord(SSLSocketImpl.java:1421)
      at java.base/sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:456)
      at java.base/sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:427)
      at org.apache.http.conn.ssl.SSLConnectionSocketFactory.createLayeredSocket(SSLConnectionSocketFactory.java:436)
      at org.apache.http.conn.ssl.SSLConnectionSocketFactory.connectSocket(SSLConnectionSocketFactory.java:384)
      at org.apache.http.impl.conn.DefaultHttpClientConnectionOperator.connect(DefaultHttpClientConnectionOperator.java:142)
      at org.apache.http.impl.conn.PoolingHttpClientConnectionManager.connect(PoolingHttpClientConnectionManager.java:376)
      at org.apache.http.impl.execchain.MainClientExec.establishRoute(MainClientExec.java:393)
      at org.apache.http.impl.execchain.MainClientExec.execute(MainClientExec.java:236)
      at org.apache.http.impl.execchain.ProtocolExec.execute(ProtocolExec.java:186)
      at org.apache.http.impl.execchain.RetryExec.execute(RetryExec.java:89)
      at org.apache.http.impl.execchain.RedirectExec.execute(RedirectExec.java:110)
      at org.apache.http.impl.client.InternalHttpClient.doExecute(InternalHttpClient.java:185)
      at org.apache.http.impl.client.CloseableHttpClient.execute(CloseableHttpClient.java:83)
      at org.apache.http.impl.client.CloseableHttpClient.execute(CloseableHttpClient.java:108)
      at org.apache.http.impl.client.CloseableHttpClient.execute(CloseableHttpClient.java:56)
      at com.mashape.unirest.http.HttpClientHelper.request(HttpClientHelper.java:138)
      Caused: com.mashape.unirest.http.exceptions.UnirestException
      at com.mashape.unirest.http.HttpClientHelper.request(HttpClientHelper.java:143)
      at com.mashape.unirest.request.BaseRequest.asJson(BaseRequest.java:68)
      at org.jenkinsci.plugins.p4.swarmAPI.SwarmHelper.checkVersion(SwarmHelper.java:51)
      at org.jenkinsci.plugins.p4.swarmAPI.SwarmHelper.<init>(SwarmHelper.java:32)
      at org.jenkinsci.plugins.p4.scm.SwarmScmSource.getSwarm(SwarmScmSource.java:79)
      at org.jenkinsci.plugins.p4.scm.SwarmScmSource.getHeads(SwarmScmSource.java:157)
      at org.jenkinsci.plugins.p4.scm.AbstractP4ScmSource.getP4SCMHeads(AbstractP4ScmSource.java:193)
      at org.jenkinsci.plugins.p4.scm.AbstractP4ScmSource.retrieve(AbstractP4ScmSource.java:175)
      Caused: java.io.IOException
      at org.jenkinsci.plugins.p4.scm.AbstractP4ScmSource.retrieve(AbstractP4ScmSource.java:181)
      at jenkins.scm.api.SCMSource._retrieve(SCMSource.java:372)
      at jenkins.scm.api.SCMSource.fetch(SCMSource.java:282)
      at jenkins.branch.MultiBranchProject.computeChildren(MultiBranchProject.java:654)
      at com.cloudbees.hudson.plugins.folder.computed.ComputedFolder.updateChildren(ComputedFolder.java:269)
      at com.cloudbees.hudson.plugins.folder.computed.FolderComputation.run(FolderComputation.java:167)
      at jenkins.branch.MultiBranchProject$BranchIndexing.run(MultiBranchProject.java:1057)
      at hudson.model.ResourceController.execute(ResourceController.java:101)
      at hudson.model.Executor.run(Executor.java:442)
      Finished: FAILURE
       

          [JENKINS-72760] helix swarm unable to scan multibranch

          Karl Wirth added a comment -

          Hi ukr.

          Is your Swarm using HTTP or HTTPS? If HTTPS is the certificate self signed?

          The error looks like it may be certificate related:

          sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target 

          If you are using a self signed Swarm certificate you will need to add it to a Jenkins Java keystore. For example:

               https://community.bmc.com/s/article/AMA1210-How-can-I-import-a-SSL-certificate-into-the-Java-Truststore-to-have-Jenkins-use-it-to-connect-to-the-Mainframe

          Without this Jenkins does not trust the connection to the HTTPS swarm server so fails the browse of the branches.

          Regards,

          Karl

          Karl Wirth added a comment - Hi ukr . Is your Swarm using HTTP or HTTPS? If HTTPS is the certificate self signed? The error looks like it may be certificate related: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target If you are using a self signed Swarm certificate you will need to add it to a Jenkins Java keystore. For example:       https://community.bmc.com/s/article/AMA1210-How-can-I-import-a-SSL-certificate-into-the-Java-Truststore-to-have-Jenkins-use-it-to-connect-to-the-Mainframe Without this Jenkins does not trust the connection to the HTTPS swarm server so fails the browse of the branches. Regards, Karl

          ukr added a comment -

          hi p4karl 

          We are using http to connect to the server. and still getting this error.

          ukr added a comment - hi p4karl   We are using http to connect to the server. and still getting this error.

          Shubham added a comment -

          Hi ukr 

          Could you please try using the latest p4-plugin (1.15.1)

          Regards,

          Shubham

          Shubham added a comment - Hi ukr   Could you please try using the latest p4-plugin (1.15.1) Regards, Shubham

            Unassigned Unassigned
            ukr ukr
            Votes:
            0 Vote for this issue
            Watchers:
            3 Start watching this issue

              Created:
              Updated: