[JIRA] (JENKINS-60854) Upgrade to 2.217 on Windows failed due to Jetty exception

[michael.litwak@nuix.com (JIRA)]

Michael Litwak created an issue

Jenkins / JENKINS-60854 Upgrade to 2.217 on Windows failed due to Jetty exception Issue Type: Bug Assignee: Unassigned Attachments: jenkins.err.log Components: core Created: 2020-01-24 05:49 Environment: Operating System: Windows 2012 R2 64-bit (Jenkins Master) Running bundled Java 8 JRE version 8.0.1440.1 Running as a Windows service. Java parameters: -Xrs -Xmx256m -Dhudson.lifecycle=hudson.lifecycle.WindowsServiceLifecycle -Dhudson.model.DirectoryBrowserSupport.CSP="sandbox allow-scripts; default-src 'none'; img-src 'self' data: ; style-src 'self' 'unsafe-inline' data: ; script-src 'self' 'unsafe-inline' 'unsafe-eval' ;" -jar "%BASE%\jenkins.war" --httpPort=-1 --httpsPort=443 --httpsKeyStore="%BASE%\jenkins.jks" --httpsKeyStorePassword="*****not**shown**here*****" Jenkins version 2.217 (installed via automatic upgrade) Running Jenkins directly. No reverse proxy. Installed Jenkins via Windows installer. Your web browser: latest Firefox for Windows on Windows 10 64-bit. Priority: Blocker Reporter: Michael Litwak Immediately after attempting to upgrade Jenkins automatically, Jenkins Windows service starts but fails within 4 seconds.  See attached error log. The key error is apparently: java.lang.IllegalStateException: KeyStores with multiple certificates are not supported on the base class org.eclipse.jetty.util.ssl.SslContextFactory. (Use org.eclipse.jetty.util.ssl.SslContextFactory$Server or org.eclipse.jetty.util.ssl.SslContextFactory$Client instead) The issue relates to a change in Jetty noted at the following post: https://github.com/eclipse/jetty.project/issues/4425 Note that Jetty in Jenkins 2.217 was recently updated, per the changelog, from 9.4.22.v20191022 to 9.4.25.v20191220 Apparently a code fix is required to use the newer Jetty, as detailed in comment https://github.com/eclipse/jetty.project/issues/4425#issuecomment-565967384   Add Comment

This message was sent by Atlassian Jira (v7.13.6#713006-sha1:cc4451f)

[michael.litwak@nuix.com (JIRA)]

Michael Litwak updated an issue

Jenkins / JENKINS-60854 Upgrade to 2.217 on Windows failed due to Jetty exception

Change By: Michael Litwak Attachment: plugins-and-their-versions.txt

Add Comment

[bernd.wahlen@k2interactive.de (JIRA)]

Bernd Wahlen commented on JENKINS-60854

Re: Upgrade to 2.217 on Windows failed due to Jetty exception We have the same problem. There are not really multiple certificates in the store, just the certificate together with intermediate and root certificate.

Add Comment

[christian.keck@macio.de (JIRA)]

Christian Keck commented on JENKINS-60854

Re: Upgrade to 2.217 on Windows failed due to Jetty exception

The same on Linux systems.

Add Comment

[o.v.nenashev@gmail.com (JIRA)]

Oleg Nenashev resolved as Duplicate

I am closing it as a duplicate of JENKINS-60857 which got referenced in Winstone changelogs and got more attention. The patch has been submitted

Jenkins / JENKINS-60854

Upgrade to 2.217 on Windows failed due to Jetty exception

Change By: Oleg Nenashev Status: Open Resolved Resolution: Duplicate

Add Comment