We've seen reports of SSL failures from the HTTPS update site when users were running very old versions of Java. The old versions of Java did not recognize the current Let's Encrypt SSL certificates. Check that you're running Java 1.8.0_282 and not something long outdated like 1.8.0_161. Old versions of Java need to be updated in any case, since later Java updates include important fixes.
Mark Waite On Tue, Mar 30, 2021 at 3:10 PM Victoria Wei Lei <weile...@gmail.com> wrote: > Hi, All, > I run into issues when I tried to update a plugin. Messages below. > Please help me to figure out what's the cause. I was trying to upgrade > Jenkins version from 2.164 to 2.277, but got missing Jenkins instance when > running a job. so I downgrade version back to 2.164, found that EnvInject > API showed as installed, but don't have GUI to inject envrionement variable > as before. Therefore I try to upgrade the plugin, and run into this issue. > > > Installing Plugins/Upgrades > Preparation > > - Checking internet connectivity > - Checking update center connectivity > - Success > > > EnvInject API > Failure - > sun.security.provider.certpath.SunCertPathBuilderException: unable to find > valid certification path to requested target at > sun.security.provider.certpath.SunCertPathBuilder.build(Unknown Source) at > sun.security.provider.certpath.SunCertPathBuilder.engineBuild(Unknown > Source) at java.security.cert.CertPathBuilder.build(Unknown Source) Caused: > sun.security.validator.ValidatorException: PKIX path building failed at > sun.security.validator.PKIXValidator.doBuild(Unknown Source) at > sun.security.validator.PKIXValidator.engineValidate(Unknown Source) at > sun.security.validator.Validator.validate(Unknown Source) at > sun.security.ssl.X509TrustManagerImpl.validate(Unknown Source) at > sun.security.ssl.X509TrustManagerImpl.checkTrusted(Unknown Source) at > sun.security.ssl.X509TrustManagerImpl.checkServerTrusted(Unknown Source) > Caused: javax.net.ssl.SSLHandshakeException at > sun.security.ssl.Alerts.getSSLException(Unknown Source) at > sun.security.ssl.SSLSocketImpl.fatal(Unknown Source) at > sun.security.ssl.Handshaker.fatalSE(Unknown Source) at > sun.security.ssl.Handshaker.fatalSE(Unknown Source) at > sun.security.ssl.ClientHandshaker.serverCertificate(Unknown Source) at > sun.security.ssl.ClientHandshaker.processMessage(Unknown Source) at > sun.security.ssl.Handshaker.processLoop(Unknown Source) at > sun.security.ssl.Handshaker.process_record(Unknown Source) at > sun.security.ssl.SSLSocketImpl.readRecord(Unknown Source) at > sun.security.ssl.SSLSocketImpl.performInitialHandshake(Unknown Source) at > sun.security.ssl.SSLSocketImpl.startHandshake(Unknown Source) at > sun.security.ssl.SSLSocketImpl.startHandshake(Unknown Source) at > sun.net.www.protocol.https.HttpsClient.afterConnect(Unknown Source) at > sun.net.www.protocol.https.AbstractDelegateHttpsURLConnection.connect(Unknown > Source) at > sun.net.www.protocol.http.HttpURLConnection.getInputStream0(Unknown Source) > at sun.net.www.protocol.http.HttpURLConnection.getInputStream(Unknown > Source) at > sun.net.www.protocol.http.HttpURLConnection.getHeaderField(Unknown Source) > at java.net.URLConnection.getHeaderFieldLong(Unknown Source) at > java.net.URLConnection.getContentLengthLong(Unknown Source) at > java.net.URLConnection.getContentLength(Unknown Source) at > sun.net.www.protocol.https.HttpsURLConnectionImpl.getContentLength(Unknown > Source) at > hudson.model.UpdateCenter$UpdateCenterConfiguration.download(UpdateCenter.java:1158) > Caused: javax.net.ssl.SSLHandshakeException: > sun.security.validator.ValidatorException: PKIX path building failed: > sun.security.provider.certpath.SunCertPathBuilderException: unable to find > valid certification path to requested target at > sun.reflect.NativeConstructorAccessorImpl.newInstance0(Native Method) at > sun.reflect.NativeConstructorAccessorImpl.newInstance(Unknown Source) at > sun.reflect.DelegatingConstructorAccessorImpl.newInstance(Unknown Source) > at java.lang.reflect.Constructor.newInstance(Unknown Source) at > sun.net.www.protocol.http.HttpURLConnection$10.run(Unknown Source) at > sun.net.www.protocol.http.HttpURLConnection$10.run(Unknown Source) at > java.security.AccessController.doPrivileged(Native Method) at > sun.net.www.protocol.http.HttpURLConnection.getChainedException(Unknown > Source) at > sun.net.www.protocol.http.HttpURLConnection.getInputStream0(Unknown Source) > at sun.net.www.protocol.http.HttpURLConnection.getInputStream(Unknown > Source) at > sun.net.www.protocol.https.HttpsURLConnectionImpl.getInputStream(Unknown > Source) at > hudson.model.UpdateCenter$UpdateCenterConfiguration.download(UpdateCenter.java:1174) > Caused: java.io.IOException: Failed to load > https://updates.jenkins.io/download/plugins/envinject-api/1.7/envinject-api.hpi > to C:\Jenkins\plugins\envinject-api.jpi.tmp at > hudson.model.UpdateCenter$UpdateCenterConfiguration.download(UpdateCenter.java:1181) > Caused: java.io.IOException: Failed to download from > https://updates.jenkins.io/download/plugins/envinject-api/1.7/envinject-api.hpi > at > hudson.model.UpdateCenter$UpdateCenterConfiguration.download(UpdateCenter.java:1215) > at hudson.model.UpdateCenter$DownloadJob._run(UpdateCenter.java:1752) at > hudson.model.UpdateCenter$InstallationJob._run(UpdateCenter.java:2015) at > hudson.model.UpdateCenter$DownloadJob.run(UpdateCenter.java:1726) at > java.util.concurrent.Executors$RunnableAdapter.call(Unknown Source) at > java.util.concurrent.FutureTask.run(Unknown Source) at > hudson.remoting.AtmostOneThreadExecutor$Worker.run(AtmostOneThreadExecutor.java:112) > at java.lang.Thread.run(Unknown Source) > > Thanks > Victoria > > -- > You received this message because you are subscribed to the Google Groups > "Jenkins Users" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to jenkinsci-users+unsubscr...@googlegroups.com. > To view this discussion on the web visit > https://groups.google.com/d/msgid/jenkinsci-users/a2042d43-7d93-4b16-949a-b37cef54372dn%40googlegroups.com > <https://groups.google.com/d/msgid/jenkinsci-users/a2042d43-7d93-4b16-949a-b37cef54372dn%40googlegroups.com?utm_medium=email&utm_source=footer> > . > -- You received this message because you are subscribed to the Google Groups "Jenkins Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-users+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/jenkinsci-users/CAO49JtFCkXc6CdLKhR9RUdrPXiB8hZwVDrdY54kc%3DGGrqsLu8g%40mail.gmail.com.
