Mark, Daniel, According to the logs I can confirm that I got the certificate error when there was no server_name sent in the ClientHello message. Actually the log shows that the SNI was tried to be set, but failed.
javax.net.ssl|DEBUG|49|Update center installer thread [#1]|2021-11-22 09:15:12.165 CET|Utilities.java:73|the previous server name in SNI (type=host_name (0), value=get.jenkins.io) was replaced with (type=host_name (0), value=get.jenkins.io) javax.net.ssl|WARNING|49|Update center installer thread [#1]|2021-11-22 09:15:12.166 CET|ServerNameExtension.java:255|*Unable to indicate server name* I've found this Java bug https://bugs.openjdk.java.net/browse/JDK-8220564, which seems to be related and fixed since then. I managed to upgrade my java and it seems it solved the issue. Thank you both. -- Tamas On Friday, November 19, 2021 at 11:18:26 PM UTC+1 Daniel Beck wrote: > > > > On 19. Nov 2021, at 20:52, Mark Waite <mark.ea...@gmail.com> wrote: > > > > I thought that certificate could be reported when a request is made to > the IP address of an HTTP server hosted in Kubernetes. The Kubernetes > server needs the hostname in order to use the correct SSL certificate (or > something like that). > > > > https://en.wikipedia.org/wiki/Server_Name_Indication > > The Kubernetes cert in the first message is the one for get.jenkins.io > without SNI. > > -- You received this message because you are subscribed to the Google Groups "Jenkins Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-users+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/jenkinsci-users/ade70882-9df7-4fe5-8198-d2650a524ab5n%40googlegroups.com.
