I would guess that you may already be using a modified cacerts file which does not include the authority that is certifying the validity of the SSL certificate on the gradle site.
When I download from that URL, my web browser reports no issues from Google Chrome on Windows and no issues from wget on a FreeBSD computer. On Wed, Aug 7, 2019 at 10:51 AM Sverre Moe <[email protected]> wrote: > This has worked before. Now that we where to upgrade from Gradle 5.0 to > 5.5 and added the tool gradle-5.5 it fails to retrieve the archive. > > Anyone have an idea what the problem might be? > > Running both Jenkins and Agents on Java 8 Update 221. > > Is there any way arround this without hacking the JRE cacerts with the > gradle web site certificate? > > sun.security.provider.certpath.SunCertPathBuilderException: unable to find > valid certification path to requested target > at > java.base/sun.security.provider.certpath.SunCertPathBuilder.build(SunCertPathBuilder.java:141) > at > java.base/sun.security.provider.certpath.SunCertPathBuilder.engineBuild(SunCertPathBuilder.java:126) > at > java.base/java.security.cert.CertPathBuilder.build(CertPathBuilder.java:297) > at > java.base/sun.security.validator.PKIXValidator.doBuild(PKIXValidator.java:380) > Caused: sun.security.validator.ValidatorException: PKIX path building failed > at > java.base/sun.security.validator.PKIXValidator.doBuild(PKIXValidator.java:385) > at > java.base/sun.security.validator.PKIXValidator.engineValidate(PKIXValidator.java:290) > at > java.base/sun.security.validator.Validator.validate(Validator.java:264) > at > java.base/sun.security.ssl.X509TrustManagerImpl.validate(X509TrustManagerImpl.java:321) > at > java.base/sun.security.ssl.X509TrustManagerImpl.checkTrusted(X509TrustManagerImpl.java:221) > at > java.base/sun.security.ssl.X509TrustManagerImpl.checkServerTrusted(X509TrustManagerImpl.java:129) > at > java.base/sun.security.ssl.CertificateMessage$T12CertificateConsumer.checkServerCerts(CertificateMessage.java:626) > Caused: javax.net.ssl.SSLHandshakeException: PKIX path building failed: > sun.security.provider.certpath.SunCertPathBuilderException: unable to find > valid certification path to requested target > at java.base/sun.security.ssl.Alert.createSSLException(Alert.java:131) > at > java.base/sun.security.ssl.TransportContext.fatal(TransportContext.java:321) > at > java.base/sun.security.ssl.TransportContext.fatal(TransportContext.java:264) > at > java.base/sun.security.ssl.TransportContext.fatal(TransportContext.java:259) > at > java.base/sun.security.ssl.CertificateMessage$T12CertificateConsumer.checkServerCerts(CertificateMessage.java:642) > at > java.base/sun.security.ssl.CertificateMessage$T12CertificateConsumer.onCertificate(CertificateMessage.java:461) > at > java.base/sun.security.ssl.CertificateMessage$T12CertificateConsumer.consume(CertificateMessage.java:361) > at > java.base/sun.security.ssl.SSLHandshake.consume(SSLHandshake.java:392) > at > java.base/sun.security.ssl.HandshakeContext.dispatch(HandshakeContext.java:448) > at > java.base/sun.security.ssl.HandshakeContext.dispatch(HandshakeContext.java:425) > at > java.base/sun.security.ssl.TransportContext.dispatch(TransportContext.java:178) > at java.base/sun.security.ssl.SSLTransport.decode(SSLTransport.java:164) > at > java.base/sun.security.ssl.SSLSocketImpl.decode(SSLSocketImpl.java:1152) > at > java.base/sun.security.ssl.SSLSocketImpl.readHandshakeRecord(SSLSocketImpl.java:1063) > at > java.base/sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:402) > at > java.base/sun.net.www.protocol.https.HttpsClient.afterConnect(HttpsClient.java:567) > at > java.base/sun.net.www.protocol.https.AbstractDelegateHttpsURLConnection.connect(AbstractDelegateHttpsURLConnection.java:185) > at > java.base/sun.net.www.protocol.http.HttpURLConnection.followRedirect0(HttpURLConnection.java:2768) > at > java.base/sun.net.www.protocol.http.HttpURLConnection.followRedirect(HttpURLConnection.java:2680) > at > java.base/sun.net.www.protocol.http.HttpURLConnection.getInputStream0(HttpURLConnection.java:1843) > at > java.base/sun.net.www.protocol.http.HttpURLConnection.getInputStream(HttpURLConnection.java:1509) > at > java.base/java.net.HttpURLConnection.getResponseCode(HttpURLConnection.java:527) > at > java.base/sun.net.www.protocol.https.HttpsURLConnectionImpl.getResponseCode(HttpsURLConnectionImpl.java:329) > at hudson.FilePath.installIfNecessaryFrom(FilePath.java:874) > Caused: java.io.IOException: Failed to install > https://services.gradle.org/distributions/gradle-5.5.1-bin.zip to > /home/build/jenkins-test/tools/hudson.plugins.gradle.GradleInstallation/gradle-5.5 > at hudson.FilePath.installIfNecessaryFrom(FilePath.java:938) > at hudson.FilePath.installIfNecessaryFrom(FilePath.java:846) > at > hudson.tools.DownloadFromUrlInstaller.performInstallation(DownloadFromUrlInstaller.java:77) > at > hudson.tools.InstallerTranslator.getToolHome(InstallerTranslator.java:69) > at > hudson.tools.ToolLocationNodeProperty.getToolHome(ToolLocationNodeProperty.java:109) > at hudson.tools.ToolInstallation.translateFor(ToolInstallation.java:206) > at > hudson.plugins.gradle.GradleInstallation.forNode(GradleInstallation.java:92) > at > hudson.plugins.gradle.GradleInstallation.forNode(GradleInstallation.java:30) > at > org.jenkinsci.plugins.workflow.steps.ToolStep$Execution.run(ToolStep.java:152) > at > org.jenkinsci.plugins.workflow.steps.ToolStep$Execution.run(ToolStep.java:133) > at > org.jenkinsci.plugins.workflow.steps.SynchronousNonBlockingStepExecution.lambda$start$0(SynchronousNonBlockingStepExecution.java:47) > at > java.base/java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:515) > at java.base/java.util.concurrent.FutureTask.run(FutureTask.java:264) > at > java.base/java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1128) > at > java.base/java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:628) > at java.base/java.lang.Thread.run(Thread.java:834) > > -- > You received this message because you are subscribed to the Google Groups > "Jenkins Users" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [email protected]. > To view this discussion on the web visit > https://groups.google.com/d/msgid/jenkinsci-users/93ecd2ab-622a-4306-ad97-6546972c3471%40googlegroups.com > <https://groups.google.com/d/msgid/jenkinsci-users/93ecd2ab-622a-4306-ad97-6546972c3471%40googlegroups.com?utm_medium=email&utm_source=footer> > . > -- Thanks! Mark Waite -- You received this message because you are subscribed to the Google Groups "Jenkins Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/jenkinsci-users/CAO49JtGcos8AcPadeP2odSM%3DbynXGTswNg5j4ip%3D2mFpEk6rQg%40mail.gmail.com.
