Uploaded image for project: 'Infrastructure'
  1. Infrastructure
  2. INFRA-1944

JDK crawler has been broken for 2 months, now fails downloads due to expired cert

    Details

    • Similar Issues:

      Description

      Per https://updates.jenkins-ci.org/updates/ the last update of hudson.tools.JDKInstaller.json was in October.

      Since the crawler scrapes Oracle's web site, it seems a change there broke the script in https://github.com/jenkins-infra/crawler/blob/master/jdk.groovy

      Since today, the certificate has expired, making JDK installers entirely unavailable, and potentially breaking downloading of others too.

      Per a report in jenkinsci/jenkins Gitter:

      Dec 15, 2018 6:00:44 PM hudson.model.DownloadService$Downloadable updateNow
      WARNING: signature check failed for https://updates.jenkins.io/updates/hudson.tools.JDKInstaller.json
      ERROR: Signature verification failed in downloadable &#039;hudson.tools.JDKInstaller&#039; <a href='#' class='showDetails'>(show details)</a><pre style='display:none'>java.security.cert.CertificateExpiredException: NotAfter: Sat Dec 15 16:54:02 UTC 2018<br> 

        Attachments

          Issue Links

            Activity

            Hide
            rgouyet Romain GOUYET added a comment -

            Is there any workaround for this because my jobs can't install JDK and CI is broken because jenkins can't query mercurial or svn : 

             

            FATAL: JDK data is empty.
            java.io.IOException: JDK data is empty. 
            

             

            Show
            rgouyet Romain GOUYET added a comment - Is there any workaround for this because my jobs can't install JDK and CI is broken because jenkins can't query mercurial or svn :    FATAL: JDK data is empty. java.io.IOException: JDK data is empty.   
            Hide
            rgouyet Romain GOUYET added a comment -

            I found a workaround 

            • Manage Jenkins >> Configure Global Security >> Plugin Manager >> Tick the check-box for "Use browser for metadata download" option
            Show
            rgouyet Romain GOUYET added a comment - I found a workaround  Manage Jenkins  >>  Configure Global Security  >>  Plugin Manager  >> Tick the check-box for " Use browser for metadata download " option
            Hide
            aheritier Arnaud Héritier added a comment -

            https://jenkins-updates.cloudbees.com/update-center/envelope-cje/updates/hudson.tools.JDKInstaller.json => I don't see any certificate issue ? What do I miss? Was it fixed ?

            I confirm that the crawler looks broken

            groovy -Dgrape.config=./grapeConfig.xml ./lib/runner.groovy jdk.groovy
            loading dependencies...done
            Caught: java.lang.NullPointerException: Cannot invoke method keySet() on null object
            java.lang.NullPointerException: Cannot invoke method keySet() on null object
            	at ListJDK.family(jdk.groovy:53)
            	at ListJDK.build(jdk.groovy:32)
            	at ListJDK.main(jdk.groovy:24)
            	at ListJDK$main.call(Unknown Source)
            	at jdk.run(jdk.groovy:144)
            	at runner$_run_closure1.doCall(runner.groovy:13)
            	at runner.run(runner.groovy:10)
            
            Show
            aheritier Arnaud Héritier added a comment - https://jenkins-updates.cloudbees.com/update-center/envelope-cje/updates/hudson.tools.JDKInstaller.json  => I don't see any certificate issue ? What do I miss? Was it fixed ? I confirm that the crawler looks broken groovy -Dgrape.config=./grapeConfig.xml ./lib/runner.groovy jdk.groovy loading dependencies...done Caught: java.lang.NullPointerException: Cannot invoke method keySet() on null object java.lang.NullPointerException: Cannot invoke method keySet() on null object at ListJDK.family(jdk.groovy:53) at ListJDK.build(jdk.groovy:32) at ListJDK.main(jdk.groovy:24) at ListJDK$main.call(Unknown Source) at jdk.run(jdk.groovy:144) at runner$_run_closure1.doCall(runner.groovy:13) at runner.run(runner.groovy:10)
            Hide
            batmat Baptiste Mathus added a comment -
            Show
            batmat Baptiste Mathus added a comment - Arnaud Héritier https://jenkins-updates.cloudbees.com/update-center/envelope-cje/updates/hudson.tools.JDKInstaller.json is not something the community is using or concerned about, FWIW .
            Hide
            danielbeck Daniel Beck added a comment -

            Baptiste Mathus Just a mirror anyway.

            Proposed "fix" at https://github.com/jenkins-infra/crawler/pull/79 (and I really don't care enough to make Java 10 work).

            Show
            danielbeck Daniel Beck added a comment - Baptiste Mathus Just a mirror anyway. Proposed "fix" at https://github.com/jenkins-infra/crawler/pull/79 (and I really don't care enough to make Java 10 work).
            Hide
            danielbeck Daniel Beck added a comment -

            Should be resolved.

            Show
            danielbeck Daniel Beck added a comment - Should be resolved.

              People

              • Assignee:
                Unassigned
                Reporter:
                danielbeck Daniel Beck
              • Votes:
                6 Vote for this issue
                Watchers:
                11 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved: