[JIRA] (JENKINS-53288) Signature verification failed in update site 'default' (again)

[akostadi...@java.net (JIRA)]

Title: Message Title

akostadinov created an issue   Jenkins / JENKINS-53288 Signature verification failed in update site 'default' (again) Issue Type: Bug Assignee: Unassigned Components: update-sites-manager-plugin Created: 2018-08-28 12:26 Priority: Critical Reporter: akostadinov I have applied proposed fix from JENKINS-31089 and this is my line in `/usr/lib/jvm/java-openjdk/jre/lib/security/java.security`: jdk.certpath.disabledAlgorithms=MD2, MD5, SHA1 jdkCA & usage TLSServer, \ RSA keySize < 512, DSA keySize < 1024, EC keySize < 224 But still I'm seeing this in Jenkins 2.121.3 log: Aug 28, 2018 3:20:15 PM hudson.model.UpdateSite updateData SEVERE: ERROR: Signature verification failed in update site &#039;default&#039; <a href="" class="code-quote" style="color: #009100">'#' class='showDetails'>(show details)</a><pre style='display:none'>java.security.cert.CertPathValidatorException: Algorithm constraints check failed on keysize limits. RSA 1024bit key used with certificate: CN=Community Update Center, O=Jenkins Project, ST=California, C=US.<br> at sun.security.util.DisabledAlgorithmConstraints$KeySizeConstraint.permits(DisabledAlgorithmConstraints.java:817) Add Comment   This message was sent by Atlassian Jira (v7.11.2#711002-sha1:fdc329d) -- You received this message because you are subscribed to the Google Groups "Jenkins Issues" group. To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-issues+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.