Uploaded image for project: 'Jenkins'
  1. Jenkins
  2. JENKINS-21570

Slave JNLP not signed by a CA causes issues with Java 7.51

    Details

    • Type: Bug
    • Status: Resolved (View Workflow)
    • Priority: Major
    • Resolution: Duplicate
    • Component/s: slave-setup-plugin
    • Labels:
      None
    • Environment:
      Windows 7 64 Bit
    • Similar Issues:

      Description

      We have started to get an error saying that the Slave Agent cannot be launched due to our security settings. There appear to be some workarounds, however, the recommended solution is to ensure that the JNLPs are properly signed. See

      http://www.java.com/en/download/help/java_blocked.xml

      for some context

      And

      http://jenkins-ci.361315.n4.nabble.com/Java-Version-7-Update-45-warning-every-time-I-try-starting-the-slave-td4679570.html

      for a discussion around the issues.

        Attachments

          Issue Links

            Activity

            Hide
            12delta Simon Strauch added a comment -

            The Website http://www.java.com/en/download/help/java_blocked.xml describes 3 of 2 topics that went wrong in the JNLP-Slave.

            1st: self-signed certificat. I used this description to extract the public key and add it to Java as Signer CA:

            stackoverflow: Extract raw X.509 Certificate from a signed APK or JAR

            Now Java Webstart begin to except the JAR file. But the 2nd Problem is:

            Missing required Permissions manifest attribute in main jar

            The MANIFEST.MF file does not contain the Permissions attribute.

            The workaround is to add the download server URL. That work.

            Show
            12delta Simon Strauch added a comment - The Website http://www.java.com/en/download/help/java_blocked.xml describes 3 of 2 topics that went wrong in the JNLP-Slave. 1st: self-signed certificat. I used this description to extract the public key and add it to Java as Signer CA: stackoverflow: Extract raw X.509 Certificate from a signed APK or JAR Now Java Webstart begin to except the JAR file. But the 2nd Problem is: Missing required Permissions manifest attribute in main jar The MANIFEST.MF file does not contain the Permissions attribute. The workaround is to add the download server URL. That work.
            Hide
            illenseer illenseer added a comment -

            Any news on this topic?
            It would be great to have the functionality of Windows DCOMP slaves back again! - Thanks.

            Show
            illenseer illenseer added a comment - Any news on this topic? It would be great to have the functionality of Windows DCOMP slaves back again! - Thanks.
            Hide
            jglick Jesse Glick added a comment -

            I guess the CA issue was fixed as part of remoting 2.35 as mentioned in JENKINS-20204.

            Show
            jglick Jesse Glick added a comment - I guess the CA issue was fixed as part of remoting 2.35 as mentioned in JENKINS-20204 .

              People

              • Assignee:
                kohsuke Kohsuke Kawaguchi
                Reporter:
                stuartjsmith Stuart Smith
              • Votes:
                3 Vote for this issue
                Watchers:
                6 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved: