[Update Center] Workaround to use BioUno Update Center

[Bruno P. Kinoshita]

Hi all,

TL;DR: the guide to use our update center has been updated with a work around -> http://biouno.org/jenkins-update-site.html Rationale below.

After investigating the issue in our update center, it is confirmed that newer versions of Jenkins are - and correctly I believe - validating the certificate of third party update centers.

The problem is that when you install an Update Center, using the UpdateSites Manager Plug-in, you provide the certificate signature, but the file itself it never entered in Jenkins. Our certificate has always been available from http://biouno.org/jenkins-update-center/biouno-update-center.crt, but it has never been downloaded by users, as it wasn't required.

In the future I plan to file an issue and work on a more automated solution - perhaps asking the user for a certificate, or using a pre-defined certificate URL for update centers.

In the meantime, please use the work around described at http://biouno.org/jenkins-update-site.html and let us know if you have any problem.

All the best,

Bruno

[Ioannis Moutsatsos]

Thanks Bruno! This workaround is quite useful and not so hard to implement!

[Ioannis Moutsatsos]

Hi Bruno;

Although the  download link for the certificate you are providing here works, the link from the http://biouno.org/jenkins-update-site.html does not.

Link seems to have the biouno.org prefix twice. It would be nice to fix that. Thanks!

Best regards

Ioannis

On Saturday, April 11, 2015 at 4:32:15 AM UTC-4, Bruno Kinoshita wrote:

[Bruno P. Kinoshita]

Nice catch Ioannis!

Fixed https://github.com/biouno/biouno.github.io/commit/9f1108c1e67a8e1b59839de01bc76ab582a26114

Looks like I missed the http:// prefix

 

Thanks

Bruno

---

From: Ioannis Moutsatsos <imout...@gmail.com>
To: biouno-d...@googlegroups.com
Cc: biouno...@googlegroups.com; brunod...@yahoo.com.br
Sent: Wednesday, April 15, 2015 9:19 AM
Subject: Re: [Update Center] Workaround to use BioUno Update Center

Hi Bruno;

Although the  download link for the certificate you are providing here works, the link from the http://biouno.org/jenkins-update-site.html does not.

Link seems to have the biouno.org prefix twice. It would be nice to fix that. Thanks!

Best regards

Ioannis

On Saturday, April 11, 2015 at 4:32:15 AM UTC-4, Bruno Kinoshita wrote:

Hi all,

TL;DR: the guide to use our update center has been updated with a work around -> http://biouno.org/jenkins- update-site.html Rationale below.

After investigating the issue in our update center, it is confirmed that newer versions of Jenkins are - and correctly I believe - validating the certificate of third party update centers.

The problem is that when you install an Update Center, using the UpdateSites Manager Plug-in, you provide the certificate signature, but the file itself it never entered in Jenkins. Our certificate has always been available from http://biouno.org/jenkins- update-center/biouno-update- center.crt, but it has never been downloaded by users, as it wasn't required.

In the future I plan to file an issue and work on a more automated solution - perhaps asking the user for a certificate, or using a pre-defined certificate URL for update centers.

In the meantime, please use the work around described at http://biouno.org/jenkins- update-site.html and let us know if you have any problem.

All the best,

Bruno