Thanks for explaining what's the issue. I think I'll wait for a while until the certificate is fixed so I don't change the java.security settings yet.
On Tuesday, November 17, 2015 at 8:05:43 AM UTC+2, Daniel Beck wrote: > > > KK needs to fix the cert/secret used by the crawler, similar to the issue > on the update site a few weeks ago (which he fixed). I'll keep annoying him > until he fixes this :-) > > Workarounds should be to use a slightly older build of Java, or customize > JAVA_HOME/lib/security/java.security to set > `jdk.certpath.disabledAlgorithms=MD2, RSA keySize < 512` (rather than < > 1024). > > On 16.11.2015, at 11:49, Daniel Anechitoaie <danie...@gmail.com > <javascript:>> wrote: > > > I get the following error when I click on the "Check now" button on > manage plugins page. > > Any idea what's going on? This is a fresh installation of Jenkins 1.638 > on CentOS 7.1 running on Java 1.8.0_66-b17 > > > > Signature verification failed in downloadable > 'hudson.tasks.Maven.MavenInstaller' (show details) > > java.security.cert.CertPathValidatorException: algorithm constraints > check failed > > at > sun.security.provider.certpath.PKIXMasterCertPathValidator.validate(PKIXMasterCertPathValidator.java:135) > > > > at > sun.security.provider.certpath.PKIXCertPathValidator.validate(PKIXCertPathValidator.java:219) > > > > at > sun.security.provider.certpath.PKIXCertPathValidator.validate(PKIXCertPathValidator.java:140) > > > > at > sun.security.provider.certpath.PKIXCertPathValidator.engineValidate(PKIXCertPathValidator.java:79) > > > > at > java.security.cert.CertPathValidator.validate(CertPathValidator.java:292) > > at > org.jvnet.hudson.crypto.CertificateUtil.validatePath(CertificateUtil.java:93) > > > at > jenkins.util.JSONSignatureValidator.verifySignature(JSONSignatureValidator.java:76) > > > > at > hudson.model.DownloadService$Downloadable.load(DownloadService.java:370) > > at > hudson.model.DownloadService$Downloadable.updateNow(DownloadService.java:385) > > > at > hudson.PluginManager.doCheckUpdatesServer(PluginManager.java:963) > > at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) > > at > sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62) > > > at > sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43) > > > > at java.lang.reflect.Method.invoke(Method.java:497) > > at > org.kohsuke.stapler.Function$InstanceFunction.invoke(Function.java:298) > > at > org.kohsuke.stapler.interceptor.RequirePOST$Processor.invoke(RequirePOST.java:46) > > > > at > org.kohsuke.stapler.Function$InterceptedFunction.invoke(Function.java:399) > > at org.kohsuke.stapler.Function.bindAndInvoke(Function.java:161) > > at > org.kohsuke.stapler.Function.bindAndInvokeAndServeResponse(Function.java:96) > > > at > org.kohsuke.stapler.MetaClass$1.doDispatch(MetaClass.java:121) > > at > org.kohsuke.stapler.NameBasedDispatcher.dispatch(NameBasedDispatcher.java:53) > > > at org.kohsuke.stapler.Stapler.tryInvoke(Stapler.java:746) > > at org.kohsuke.stapler.Stapler.invoke(Stapler.java:876) > > at > org.kohsuke.stapler.MetaClass$3.doDispatch(MetaClass.java:183) > > at > org.kohsuke.stapler.NameBasedDispatcher.dispatch(NameBasedDispatcher.java:53) > > > at org.kohsuke.stapler.Stapler.tryInvoke(Stapler.java:746) > > at org.kohsuke.stapler.Stapler.invoke(Stapler.java:876) > > at org.kohsuke.stapler.Stapler.invoke(Stapler.java:649) > > at org.kohsuke.stapler.Stapler.service(Stapler.java:238) > > at javax.servlet.http.HttpServlet.service(HttpServlet.java:848) > > at > org.eclipse.jetty.servlet.ServletHolder.handle(ServletHolder.java:686) > > at > org.eclipse.jetty.servlet.ServletHandler$CachedChain.doFilter(ServletHandler.java:1494) > > > > at > hudson.util.PluginServletFilter$1.doFilter(PluginServletFilter.java:132) > > at > hudson.util.PluginServletFilter.doFilter(PluginServletFilter.java:123) > > at > org.eclipse.jetty.servlet.ServletHandler$CachedChain.doFilter(ServletHandler.java:1482) > > > > at > hudson.security.csrf.CrumbFilter.doFilter(CrumbFilter.java:49) > > at > org.eclipse.jetty.servlet.ServletHandler$CachedChain.doFilter(ServletHandler.java:1482) > > > > at > hudson.security.ChainedServletFilter$1.doFilter(ChainedServletFilter.java:84) > > > at > hudson.security.UnwrapSecurityExceptionFilter.doFilter(UnwrapSecurityExceptionFilter.java:51) > > > > at > hudson.security.ChainedServletFilter$1.doFilter(ChainedServletFilter.java:87) > > > at > jenkins.security.ExceptionTranslationFilter.doFilter(ExceptionTranslationFilter.java:117) > > > > at > hudson.security.ChainedServletFilter$1.doFilter(ChainedServletFilter.java:87) > > > at > org.acegisecurity.providers.anonymous.AnonymousProcessingFilter.doFilter(AnonymousProcessingFilter.java:125) > > > > at > hudson.security.ChainedServletFilter$1.doFilter(ChainedServletFilter.java:87) > > > at > org.acegisecurity.ui.rememberme.RememberMeProcessingFilter.doFilter(RememberMeProcessingFilter.java:142) > > > > at > hudson.security.ChainedServletFilter$1.doFilter(ChainedServletFilter.java:87) > > > at > org.acegisecurity.ui.AbstractProcessingFilter.doFilter(AbstractProcessingFilter.java:271) > > > > at > hudson.security.ChainedServletFilter$1.doFilter(ChainedServletFilter.java:87) > > > at > jenkins.security.BasicHeaderProcessor.doFilter(BasicHeaderProcessor.java:93) > > > at > hudson.security.ChainedServletFilter$1.doFilter(ChainedServletFilter.java:87) > > > at > org.acegisecurity.context.HttpSessionContextIntegrationFilter.doFilter(HttpSessionContextIntegrationFilter.java:249) > > > > at > hudson.security.HttpSessionContextIntegrationFilter2.doFilter(HttpSessionContextIntegrationFilter2.java:67) > > > > at > hudson.security.ChainedServletFilter$1.doFilter(ChainedServletFilter.java:87) > > > at > hudson.security.ChainedServletFilter.doFilter(ChainedServletFilter.java:76) > > at hudson.security.HudsonFilter.doFilter(HudsonFilter.java:171) > > at > org.eclipse.jetty.servlet.ServletHandler$CachedChain.doFilter(ServletHandler.java:1482) > > > > at > org.kohsuke.stapler.compression.CompressionFilter.doFilter(CompressionFilter.java:49) > > > > at > org.eclipse.jetty.servlet.ServletHandler$CachedChain.doFilter(ServletHandler.java:1482) > > > > at > hudson.util.CharacterEncodingFilter.doFilter(CharacterEncodingFilter.java:81) > > > at > org.eclipse.jetty.servlet.ServletHandler$CachedChain.doFilter(ServletHandler.java:1482) > > > > at > org.kohsuke.stapler.DiagnosticThreadNameFilter.doFilter(DiagnosticThreadNameFilter.java:30) > > > > at > org.eclipse.jetty.servlet.ServletHandler$CachedChain.doFilter(ServletHandler.java:1474) > > > > at > org.eclipse.jetty.servlet.ServletHandler.doHandle(ServletHandler.java:499) > > at > org.eclipse.jetty.server.handler.ScopedHandler.handle(ScopedHandler.java:137) > > > at > org.eclipse.jetty.security.SecurityHandler.handle(SecurityHandler.java:533) > > at > org.eclipse.jetty.server.session.SessionHandler.doHandle(SessionHandler.java:231) > > > > at > org.eclipse.jetty.server.handler.ContextHandler.doHandle(ContextHandler.java:1086) > > > > at > org.eclipse.jetty.servlet.ServletHandler.doScope(ServletHandler.java:428) > > at > org.eclipse.jetty.server.session.SessionHandler.doScope(SessionHandler.java:193) > > > > at > org.eclipse.jetty.server.handler.ContextHandler.doScope(ContextHandler.java:1020) > > > > at > org.eclipse.jetty.server.handler.ScopedHandler.handle(ScopedHandler.java:135) > > > at > org.eclipse.jetty.server.handler.HandlerWrapper.handle(HandlerWrapper.java:116) > > > > at org.eclipse.jetty.server.Server.handle(Server.java:370) > > at > org.eclipse.jetty.server.AbstractHttpConnection.handleRequest(AbstractHttpConnection.java:489) > > > > at > org.eclipse.jetty.server.AbstractHttpConnection.headerComplete(AbstractHttpConnection.java:949) > > > > at > org.eclipse.jetty.server.AbstractHttpConnection$RequestHandler.headerComplete(AbstractHttpConnection.java:1011) > > > > at > org.eclipse.jetty.http.HttpParser.parseNext(HttpParser.java:644) > > at > org.eclipse.jetty.http.HttpParser.parseAvailable(HttpParser.java:235) > > at > org.eclipse.jetty.server.AsyncHttpConnection.handle(AsyncHttpConnection.java:82) > > > > at > org.eclipse.jetty.io.nio.SelectChannelEndPoint.handle(SelectChannelEndPoint.java:668) > > > > at > org.eclipse.jetty.io.nio.SelectChannelEndPoint$1.run(SelectChannelEndPoint.java:52) > > > > at > winstone.BoundedExecutorService$1.run(BoundedExecutorService.java:77) > > at > java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1142) > > > > at > java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:617) > > > > at java.lang.Thread.run(Thread.java:745) > > > > -- > > You received this message because you are subscribed to the Google > Groups "Jenkins Users" group. > > To unsubscribe from this group and stop receiving emails from it, send > an email to jenkinsci-use...@googlegroups.com <javascript:>. > > To view this discussion on the web visit > https://groups.google.com/d/msgid/jenkinsci-users/c812483c-de03-40a4-a151-37d5d13d113b%40googlegroups.com. > > > > For more options, visit https://groups.google.com/d/optout. > > -- You received this message because you are subscribed to the Google Groups "Jenkins Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-users+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/jenkinsci-users/3558e68a-4ddf-4ccc-b2b1-d8a8aa93b8b6%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
