Florent Revelut created JENKINS-13498: -----------------------------------------
Summary: certificate used to sign update list is expired Key: JENKINS-13498 URL: https://issues.jenkins-ci.org/browse/JENKINS-13498 Project: Jenkins Issue Type: Bug Components: core Environment: Latest jenkins for windows Reporter: Florent Revelut Priority: Blocker Attachments: DecodedBase64.bin trying to update list of plugins from http://mirrors.karan.org/jenkins/updates/update-center.json Provides a signing certificate : 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 Once dumped : Certificate: Data: Version: 1 (0x0) Serial Number: 3735928560 (0xdeadbef0) Signature Algorithm: md5WithRSAEncryption Issuer: C=US, ST=California, L=San Jose, O=Jenkins Project, CN=Kohsuke Kawaguchi/emailAddress=k...@kohsuke.org Validity Not Before: Apr 19 07:35:04 2011 GMT Not After : Apr 18 07:35:04 2012 GMT Subject: C=US, ST=California, O=Jenkins Project, OU=Default Update Center, CN=Kohsuke Kawaguchi => certificate expired this morning. this leads to the following exception when trying to refresh plugins list: 18 avr. 2012 15:28:23 hudson.model.UpdateSite doPostBack GRAVE: <div class=error><img src='/static/10b6d8c8/images/none.gif' height=16 width=1>Signature verification failed in the update center 'default' <a href='#' class='showDetails'>(show details)</a><pre style='display:none'>java.security.cert.CertPathValidatorException: timestamp check failed at sun.security.provider.certpath.PKIXMasterCertPathValidator.validate(Unknown Source) at sun.security.provider.certpath.PKIXCertPathValidator.doValidate(Unknown Source) (zip) => certificate should be renewed => as a workaround, we could be able to bypass signature validation -- This message is automatically generated by JIRA. If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.jenkins-ci.org/secure/ContactAdministrators!default.jspa For more information on JIRA, see: http://www.atlassian.com/software/jira