Unable to Update Jenkins and Plugin

[cmc...@gmail.com]

I am running Jenkins 2.235.1 on Windows.  I am not able to Update Jenkins and Plugin failed to update.  I have tried to installed self sign SSL Cert and does not solve the issue.  What is the cause and how to fix?

 Failure -

sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target at sun.security.provider.certpath.SunCertPathBuilder.build(Unknown Source) at sun.security.provider.certpath.SunCertPathBuilder.engineBuild(Unknown Source) at java.security.cert.CertPathBuilder.build(Unknown Source) Caused: sun.security.validator.ValidatorException: PKIX path building failed at sun.security.validator.PKIXValidator.doBuild(Unknown Source) at sun.security.validator.PKIXValidator.engineValidate(Unknown Source) at sun.security.validator.Validator.validate(Unknown Source) at sun.security.ssl.X509TrustManagerImpl.validate(Unknown Source) at sun.security.ssl.X509TrustManagerImpl.checkTrusted(Unknown Source) at sun.security.ssl.X509TrustManagerImpl.checkServerTrusted(Unknown Source) Caused: javax.net.ssl.SSLHandshakeException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target at sun.security.ssl.Alert.createSSLException(Unknown Source) at sun.security.ssl.TransportContext.fatal(Unknown Source) at sun.security.ssl.TransportContext.fatal(Unknown Source) at sun.security.ssl.TransportContext.fatal(Unknown Source) at sun.security.ssl.CertificateMessage$T12CertificateConsumer.checkServerCerts(Unknown Source) at sun.security.ssl.CertificateMessage$T12CertificateConsumer.onCertificate(Unknown Source) at sun.security.ssl.CertificateMessage$T12CertificateConsumer.consume(Unknown Source) at sun.security.ssl.SSLHandshake.consume(Unknown Source) at sun.security.ssl.HandshakeContext.dispatch(Unknown Source) at sun.security.ssl.HandshakeContext.dispatch(Unknown Source) at sun.security.ssl.TransportContext.dispatch(Unknown Source) at sun.security.ssl.SSLTransport.decode(Unknown Source) at sun.security.ssl.SSLSocketImpl.decode(Unknown Source) at sun.security.ssl.SSLSocketImpl.readHandshakeRecord(Unknown Source) at sun.security.ssl.SSLSocketImpl.startHandshake(Unknown Source) at sun.security.ssl.SSLSocketImpl.startHandshake(Unknown Source) at sun.net.www.protocol.https.HttpsClient.afterConnect(Unknown Source)  

[Mark Waite]

That may indicate that the Java installation used by your Jenkins on WIndows does not recognize the SSL certificates that Let's Encrypt provides for the Jenkins update center.

Check the Java version from the "System Information" page in "Manage Jenkins".  Java 8u262 is the most recent version of Java 8.  Java 11.0.8 is the most recent version of Java 11.  If you're not running one of those versions, download and install a version of AdoptOpenJDK for Windows and modify the Jenkins configuration to use that new Java installation.

--
You received this message because you are subscribed to the Google Groups "Jenkins Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-use...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/jenkinsci-users/0d0c3c60-741e-4ef9-a362-3fed70c8bf7fn%40googlegroups.com.

[cmc...@gmail.com]

master is running current JRE 8

java.version
1.8.0_261  

I was able to upgrade from jenkins-2.222.3 to jenkins-2.235.1 at 06/30/20.

I am puzzled by this error.

[Richard Bywater]

Are you running in a corporate environment that uses a proxy to talk to the Internet? If so then you'll need to ensure that the certificate used by the proxy (assuming it intercepts TLS traffic) is loaded in the "cacerts" file for the given version of Java. Unfortunately I'm not sure where that resides on a Windows instance.

Richard.

To view this discussion on the web visit https://groups.google.com/d/msgid/jenkinsci-users/01ce2a4c-d423-4a55-ac2a-e9e71445df25n%40googlegroups.com.