server-based downloads

[Ashish Yadav]

I am getting this warning on my Manage Jenkins screen "You currently are using browser-based download to retrieve metadata for Jenkins plugins and tools. This has reliability issues and is not considered fully secure. Considerswitching to server-based download.”

Could you please let me know why I am getting this warning and how I can resolve it? I didn’t see any ‘articles’ about this online.

[Daniel Beck]

Try clicking the link.

On 18.03.2015, at 15:14, Ashish Yadav <ashish...@firemon.com> wrote:

> I am getting this warning on my Manage Jenkins screen "You currently are using browser-based download to retrieve metadata for Jenkins plugins and tools. This has reliability issues and is not considered fully secure. Considerswitching to server-based download.”
>
> Could you please let me know why I am getting this warning and how I can resolve it? I didn’t see any ‘articles’ about this online.
>

> --
> You received this message because you are subscribed to the Google Groups "Jenkins Users" group.
> To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-use...@googlegroups.com.
> To view this discussion on the web visit https://groups.google.com/d/msgid/jenkinsci-users/D12EF268.8BBD%25ashish.yadav%40firemon.com.
> For more options, visit https://groups.google.com/d/optout.

[Ashish Yadav]

I am not sure what option I should select on the configure security page?

[] Prevent Cross Site Request Forgery exploits

Crumbs Crumbs Algorithm
[] Default Crumb Issuer
[] Enable proxy compatibility

[] Use browser for metadata download


Why am I getting this warning anyway?

On 3/18/15, 9:18 AM, "Daniel Beck" <m...@beckweb.net> wrote:

>Try clicking the link.
>
>On 18.03.2015, at 15:14, Ashish Yadav <ashish...@firemon.com> wrote:
>
>> I am getting this warning on my Manage Jenkins screen "You currently
>>are using browser-based download to retrieve metadata for Jenkins
>>plugins and tools. This has reliability issues and is not considered
>>fully secure. Considerswitching to server-based download.²
>>
>> Could you please let me know why I am getting this warning and how I

>>can resolve it? I didn¹t see any Œarticles¹ about this online.

>>
>> --
>> You received this message because you are subscribed to the Google
>>Groups "Jenkins Users" group.
>> To unsubscribe from this group and stop receiving emails from it, send
>>an email to jenkinsci-use...@googlegroups.com.
>> To view this discussion on the web visit
>>https://groups.google.com/d/msgid/jenkinsci-users/D12EF268.8BBD%25ashish.
>>yadav%40firemon.com.
>> For more options, visit https://groups.google.com/d/optout.
>
>--
>You received this message because you are subscribed to the Google Groups
>"Jenkins Users" group.
>To unsubscribe from this group and stop receiving emails from it, send an
>email to jenkinsci-use...@googlegroups.com.
>To view this discussion on the web visit

>https://groups.google.com/d/msgid/jenkinsci-users/205A0F81-2B4A-4064-A633-
>DBB2413435D1%40beckweb.net.

[Ashish Yadav]

Any idea why I am getting this warning message and if it is ‘valid’?

[Richard Bywater]

On that screen was " Use browser for metadata download" enabled or disabled?

Richard

--
You received this message because you are subscribed to the Google Groups "Jenkins Users" group.

To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-users+unsubscribe@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/jenkinsci-users/D12F3D14.8C5B%25ashish.yadav%40firemon.com.

[Ashish Yadav]

It was enabled.

To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-use...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/jenkinsci-users/CAMui944do3ReXJjrbSpav%2BfLM%2BJB2F%3DfZOWSbY2T1Xd2X6w41w%40mail.gmail.com.

[Richard Bywater]

That would be why you are getting the warning then as server side metadata collection is the preferred method :)

Richard

To view this discussion on the web visit https://groups.google.com/d/msgid/jenkinsci-users/D1303AFE.8C9E%25ashish.yadav%40firemon.com.

[Ashish Yadav]

How do I setup and configure the server side collection?

To view this discussion on the web visit https://groups.google.com/d/msgid/jenkinsci-users/CAMui946YDcSDJWue%3DggdGL0JtZYUuMx8rhZvMTHGhHxSWkgr%3Dg%40mail.gmail.com.

[Richard Bywater]

I would assume that unticking that "Use browser" box would do the trick. Although if your Jenkins server is behind a corporate firewall or similar then you'll need to setup the proxy settings.

Richard.

To view this discussion on the web visit https://groups.google.com/d/msgid/jenkinsci-users/D1308F57.8D33%25ashish.yadav%40firemon.com.