Uploaded image for project: 'Jenkins'
  1. Jenkins
  2. JENKINS-13018

The IRC bot cannot connect over SSL to a server with a self-signed cert.

    XMLWordPrintable

    Details

    • Similar Issues:

      Description

      The IRC Bot should have a checkbox that allows Jenkins to connect to servers using self-signed SSL certs. This is the error I'm seeing in the logs:

      INFO: Jenkins is fully up and running
      hudson.plugins.rake.Rvm@809791
      Mar 7, 2012 8:33:30 PM hudson.plugins.im.IMConnectionProvider$ConnectorRunnable run
      INFO: Trying to reconnect
      Mar 7, 2012 8:33:30 PM hudson.plugins.ircbot.v2.IRCConnection connect
      INFO: Connecting to irc.geoloqi.com:1337 as jenkins-bot using charset UTF-8
      Mar 7, 2012 8:33:31 PM hudson.plugins.ircbot.v2.IRCConnection connect
      WARNING: Error connecting to irc: javax.net.ssl.SSLException: Connection has been shutdown: javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
      Mar 7, 2012 8:33:31 PM hudson.plugins.im.IMConnectionProvider$ConnectorRunnable run
      INFO: Reconnect failed. Next connection attempt in 1 minutes

      This would avoid having to do a hacky workaround like this:

      http://www.erikzaadi.com/2011/09/09/connecting-jenkins-to-self-signed-certificated-servers/

        Attachments

          Activity

          Hide
          kutzi kutzi added a comment -

          Well, I would consider adding the certificate to your keystore not as a 'workaround', but as the proper way to go but anyway I can have a look at it if time permits.

          Show
          kutzi kutzi added a comment - Well, I would consider adding the certificate to your keystore not as a 'workaround', but as the proper way to go but anyway I can have a look at it if time permits.
          Hide
          twaddington Tristan Waddington added a comment - - edited

          Hah, you're right of course. Unfortunately, it can be hard to come by the correct cert for some servers, especially ones you don't maintain yourself. This also seems to be a standard option for most IRC clients these days. Thanks!

          Show
          twaddington Tristan Waddington added a comment - - edited Hah, you're right of course. Unfortunately, it can be hard to come by the correct cert for some servers, especially ones you don't maintain yourself. This also seems to be a standard option for most IRC clients these days. Thanks!
          Show
          charly charles-erid dessart added a comment - Worked for me http://www.erikzaadi.com/2011/09/09/connecting-jenkins-to-self-signed-certificated-servers/

            People

            • Assignee:
              Unassigned
              Reporter:
              twaddington Tristan Waddington
            • Votes:
              1 Vote for this issue
              Watchers:
              2 Start watching this issue

              Dates

              • Created:
                Updated: