I have no modifed cacerts. Using wget also fails on the agent, until I set a proxy. The Jenkins server does have proxy configured, but not the agents. When I add HTTP Proxy in Jenkins under the Update Center I get a totally different stacktrace when it tries to retrieve the gradle tool.
Unpacking https://services.gradle.org/distributions/gradle-5.5.1-bin.zip to /home/build/jenkins-test/tools/hudson.plugins.gradle.GradleInstallation/gradle-5.5 on master-sles12.3-x86_64_2 ERROR: Failed to download https://services.gradle.org/distributions/gradle-5.5.1-bin.zip from agent; will retry from master sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target at sun.security.provider.certpath.SunCertPathBuilder.build(SunCertPathBuilder.java:141) at sun.security.provider.certpath.SunCertPathBuilder.engineBuild(SunCertPathBuilder.java:126) at java.security.cert.CertPathBuilder.build(CertPathBuilder.java:280) at sun.security.validator.PKIXValidator.doBuild(PKIXValidator.java:392) Caused: sun.security.validator.ValidatorException: PKIX path building failed at sun.security.validator.PKIXValidator.doBuild(PKIXValidator.java:397) at sun.security.validator.PKIXValidator.engineValidate(PKIXValidator.java:302) at sun.security.validator.Validator.validate(Validator.java:262) at sun.security.ssl.X509TrustManagerImpl.validate(X509TrustManagerImpl.java:330) at sun.security.ssl.X509TrustManagerImpl.checkTrusted(X509TrustManagerImpl.java:237) at sun.security.ssl.X509TrustManagerImpl.checkServerTrusted(X509TrustManagerImpl.java:132) at sun.security.ssl.ClientHandshaker.serverCertificate(ClientHandshaker.java:1621) Also: hudson.remoting.Channel$CallSiteStackTrace: Remote call to master-sles12.3-x86_64_2 at hudson.remoting.Channel.attachCallSiteStackTrace(Channel.java:1743) at hudson.remoting.UserRequest$ExceptionResponse.retrieve(UserRequest.java:357) at hudson.remoting.Channel.call(Channel.java:957) at hudson.FilePath.act(FilePath.java:1070) at hudson.FilePath.act(FilePath.java:1059) at hudson.FilePath.installIfNecessaryFrom(FilePath.java:913) at hudson.FilePath.installIfNecessaryFrom(FilePath.java:846) at hudson.tools.DownloadFromUrlInstaller.performInstallation(DownloadFromUrlInstaller.java:77) at hudson.tools.InstallerTranslator.getToolHome(InstallerTranslator.java:69) at hudson.tools.ToolLocationNodeProperty.getToolHome(ToolLocationNodeProperty.java:109) at hudson.tools.ToolInstallation.translateFor(ToolInstallation.java:206) at hudson.plugins.gradle.GradleInstallation.forNode(GradleInstallation.java:92) at hudson.plugins.gradle.GradleInstallation.forNode(GradleInstallation.java:30) at org.jenkinsci.plugins.workflow.steps.ToolStep$Execution.run(ToolStep.java:152) at org.jenkinsci.plugins.workflow.steps.ToolStep$Execution.run(ToolStep.java:133) at org.jenkinsci.plugins.workflow.steps.SynchronousNonBlockingStepExecution.lambda$start$0(SynchronousNonBlockingStepExecution.java:47) at java.base/java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:515) at java.base/java.util.concurrent.FutureTask.run(FutureTask.java:264) at java.base/java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1128) at java.base/java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:628) at java.base/java.lang.Thread.run(Thread.java:834) Caused: javax.net.ssl.SSLHandshakeException at sun.security.ssl.Alerts.getSSLException(Alerts.java:192) at sun.security.ssl.SSLSocketImpl.fatal(SSLSocketImpl.java:1946) at sun.security.ssl.Handshaker.fatalSE(Handshaker.java:316) at sun.security.ssl.Handshaker.fatalSE(Handshaker.java:310) at sun.security.ssl.ClientHandshaker.serverCertificate(ClientHandshaker.java:1639) at sun.security.ssl.ClientHandshaker.processMessage(ClientHandshaker.java:223) at sun.security.ssl.Handshaker.processLoop(Handshaker.java:1037) at sun.security.ssl.Handshaker.process_record(Handshaker.java:965) at sun.security.ssl.SSLSocketImpl.readRecord(SSLSocketImpl.java:1064) at sun.security.ssl.SSLSocketImpl.performInitialHandshake(SSLSocketImpl.java:1367) at sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1395) at sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1379) at sun.net.www.protocol.https.HttpsClient.afterConnect(HttpsClient.java:559) at sun.net.www.protocol.https.AbstractDelegateHttpsURLConnection.connect(AbstractDelegateHttpsURLConnection.java:185) at sun.net.www.protocol.http.HttpURLConnection.followRedirect0(HttpURLConnection.java:2735) at sun.net.www.protocol.http.HttpURLConnection.followRedirect(HttpURLConnection.java:2647) at sun.net.www.protocol.http.HttpURLConnection.getInputStream0(HttpURLConnection.java:1830) at sun.net.www.protocol.http.HttpURLConnection.getInputStream(HttpURLConnection.java:1498) at sun.net.www.protocol.https.HttpsURLConnectionImpl.getInputStream(HttpsURLConnectionImpl.java:268) at java.net.URL.openStream(URL.java:1057) at hudson.FilePath$Unpack.invoke(FilePath.java:949) at hudson.FilePath$Unpack.invoke(FilePath.java:943) at hudson.FilePath$FileCallableWrapper.call(FilePath.java:3050) at hudson.remoting.UserRequest.perform(UserRequest.java:212) at hudson.remoting.UserRequest.perform(UserRequest.java:54) at hudson.remoting.Request$2.run(Request.java:369) at hudson.remoting.InterceptingExecutorService$1.call(InterceptingExecutorService.java:72) at java.util.concurrent.FutureTask.run(FutureTask.java:266) at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149) at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624) at java.lang.Thread.run(Thread.java:748) javax.net.ssl.SSLHandshakeException: Received fatal alert: access_denied at java.base/sun.security.ssl.Alert.createSSLException(Alert.java:131) at java.base/sun.security.ssl.Alert.createSSLException(Alert.java:117) at java.base/sun.security.ssl.TransportContext.fatal(TransportContext.java:308) at java.base/sun.security.ssl.Alert$AlertConsumer.consume(Alert.java:285) at java.base/sun.security.ssl.TransportContext.dispatch(TransportContext.java:181) at java.base/sun.security.ssl.SSLTransport.decode(SSLTransport.java:164) at java.base/sun.security.ssl.SSLSocketImpl.decode(SSLSocketImpl.java:1152) at java.base/sun.security.ssl.SSLSocketImpl.readHandshakeRecord(SSLSocketImpl.java:1063) at java.base/sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:402) at java.base/sun.net.www.protocol.https.HttpsClient.afterConnect(HttpsClient.java:567) at java.base/sun.net.www.protocol.https.AbstractDelegateHttpsURLConnection.connect(AbstractDelegateHttpsURLConnection.java:185) at java.base/sun.net.www.protocol.http.HttpURLConnection.followRedirect0(HttpURLConnection.java:2768) at java.base/sun.net.www.protocol.http.HttpURLConnection.followRedirect(HttpURLConnection.java:2680) at java.base/sun.net.www.protocol.http.HttpURLConnection.getInputStream0(HttpURLConnection.java:1843) at java.base/sun.net.www.protocol.http.HttpURLConnection.getInputStream(HttpURLConnection.java:1509) at java.base/sun.net.www.protocol.http.HttpURLConnection.getHeaderField(HttpURLConnection.java:3084) at java.base/java.net.URLConnection.getHeaderFieldLong(URLConnection.java:636) at java.base/java.net.URLConnection.getContentLengthLong(URLConnection.java:508) at java.base/java.net.URLConnection.getContentLength(URLConnection.java:492) at java.base/sun.net.www.protocol.https.HttpsURLConnectionImpl.getContentLength(HttpsURLConnectionImpl.java:389) at org.jvnet.robust_http_client.RetryableHttpStream.<init>(RetryableHttpStream.java:90) Caused: javax.net.ssl.SSLHandshakeException: Received fatal alert: access_denied at java.base/jdk.internal.reflect.NativeConstructorAccessorImpl.newInstance0(Native Method) at java.base/jdk.internal.reflect.NativeConstructorAccessorImpl.newInstance(NativeConstructorAccessorImpl.java:62) at java.base/jdk.internal.reflect.DelegatingConstructorAccessorImpl.newInstance(DelegatingConstructorAccessorImpl.java:45) at java.base/java.lang.reflect.Constructor.newInstance(Constructor.java:490) at java.base/sun.net.www.protocol.http.HttpURLConnection$10.run(HttpURLConnection.java:1963) at java.base/sun.net.www.protocol.http.HttpURLConnection$10.run(HttpURLConnection.java:1958) at java.base/java.security.AccessController.doPrivileged(Native Method) at java.base/sun.net.www.protocol.http.HttpURLConnection.getChainedException(HttpURLConnection.java:1957) at java.base/sun.net.www.protocol.http.HttpURLConnection.getInputStream0(HttpURLConnection.java:1525) at java.base/sun.net.www.protocol.http.HttpURLConnection.getInputStream(HttpURLConnection.java:1509) at java.base/sun.net.www.protocol.https.HttpsURLConnectionImpl.getInputStream(HttpsURLConnectionImpl.java:245) at org.jvnet.robust_http_client.RetryableHttpStream.getStream(RetryableHttpStream.java:98) at org.jvnet.robust_http_client.RetryableHttpStream.<init>(RetryableHttpStream.java:91) at hudson.ProxyConfiguration.getInputStream(ProxyConfiguration.java:285) at hudson.FilePath.installIfNecessaryFrom(FilePath.java:924) Caused: java.io.IOException: Failed to install https://services.gradle.org/distributions/gradle-5.5.1-bin.zip to /home/build/jenkins-test/tools/hudson.plugins.gradle.GradleInstallation/gradle-5.5 at hudson.FilePath.installIfNecessaryFrom(FilePath.java:938) at hudson.FilePath.installIfNecessaryFrom(FilePath.java:846) at hudson.tools.DownloadFromUrlInstaller.performInstallation(DownloadFromUrlInstaller.java:77) at hudson.tools.InstallerTranslator.getToolHome(InstallerTranslator.java:69) at hudson.tools.ToolLocationNodeProperty.getToolHome(ToolLocationNodeProperty.java:109) at hudson.tools.ToolInstallation.translateFor(ToolInstallation.java:206) at hudson.plugins.gradle.GradleInstallation.forNode(GradleInstallation.java:92) at hudson.plugins.gradle.GradleInstallation.forNode(GradleInstallation.java:30) at org.jenkinsci.plugins.workflow.steps.ToolStep$Execution.run(ToolStep.java:152) at org.jenkinsci.plugins.workflow.steps.ToolStep$Execution.run(ToolStep.java:133) at org.jenkinsci.plugins.workflow.steps.SynchronousNonBlockingStepExecution.lambda$start$0(SynchronousNonBlockingStepExecution.java:47) at java.base/java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:515) at java.base/java.util.concurrent.FutureTask.run(FutureTask.java:264) at java.base/java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1128) at java.base/java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:628) at java.base/java.lang.Thread.run(Thread.java:834) onsdag 7. august 2019 19.28.15 UTC+2 skrev Mark Waite følgende: > > I would guess that you may already be using a modified cacerts file which > does not include the authority that is certifying the validity of the SSL > certificate on the gradle site. > > When I download from that URL, my web browser reports no issues from > Google Chrome on Windows and no issues from wget on a FreeBSD computer. > > On Wed, Aug 7, 2019 at 10:51 AM Sverre Moe <[email protected] > <javascript:>> wrote: > >> This has worked before. Now that we where to upgrade from Gradle 5.0 to >> 5.5 and added the tool gradle-5.5 it fails to retrieve the archive. >> >> Anyone have an idea what the problem might be? >> >> Running both Jenkins and Agents on Java 8 Update 221. >> >> Is there any way arround this without hacking the JRE cacerts with the >> gradle web site certificate? >> >> sun.security.provider.certpath.SunCertPathBuilderException: unable to find >> valid certification path to requested target >> at >> java.base/sun.security.provider.certpath.SunCertPathBuilder.build(SunCertPathBuilder.java:141) >> at >> java.base/sun.security.provider.certpath.SunCertPathBuilder.engineBuild(SunCertPathBuilder.java:126) >> at >> java.base/java.security.cert.CertPathBuilder.build(CertPathBuilder.java:297) >> at >> java.base/sun.security.validator.PKIXValidator.doBuild(PKIXValidator.java:380) >> Caused: sun.security.validator.ValidatorException: PKIX path building failed >> at >> java.base/sun.security.validator.PKIXValidator.doBuild(PKIXValidator.java:385) >> at >> java.base/sun.security.validator.PKIXValidator.engineValidate(PKIXValidator.java:290) >> at >> java.base/sun.security.validator.Validator.validate(Validator.java:264) >> at >> java.base/sun.security.ssl.X509TrustManagerImpl.validate(X509TrustManagerImpl.java:321) >> at >> java.base/sun.security.ssl.X509TrustManagerImpl.checkTrusted(X509TrustManagerImpl.java:221) >> at >> java.base/sun.security.ssl.X509TrustManagerImpl.checkServerTrusted(X509TrustManagerImpl.java:129) >> at >> java.base/sun.security.ssl.CertificateMessage$T12CertificateConsumer.checkServerCerts(CertificateMessage.java:626) >> Caused: javax.net.ssl.SSLHandshakeException: PKIX path building failed: >> sun.security.provider.certpath.SunCertPathBuilderException: unable to find >> valid certification path to requested target >> at java.base/sun.security.ssl.Alert.createSSLException(Alert.java:131) >> at >> java.base/sun.security.ssl.TransportContext.fatal(TransportContext.java:321) >> at >> java.base/sun.security.ssl.TransportContext.fatal(TransportContext.java:264) >> at >> java.base/sun.security.ssl.TransportContext.fatal(TransportContext.java:259) >> at >> java.base/sun.security.ssl.CertificateMessage$T12CertificateConsumer.checkServerCerts(CertificateMessage.java:642) >> at >> java.base/sun.security.ssl.CertificateMessage$T12CertificateConsumer.onCertificate(CertificateMessage.java:461) >> at >> java.base/sun.security.ssl.CertificateMessage$T12CertificateConsumer.consume(CertificateMessage.java:361) >> at >> java.base/sun.security.ssl.SSLHandshake.consume(SSLHandshake.java:392) >> at >> java.base/sun.security.ssl.HandshakeContext.dispatch(HandshakeContext.java:448) >> at >> java.base/sun.security.ssl.HandshakeContext.dispatch(HandshakeContext.java:425) >> at >> java.base/sun.security.ssl.TransportContext.dispatch(TransportContext.java:178) >> at java.base/sun.security.ssl.SSLTransport.decode(SSLTransport.java:164) >> at >> java.base/sun.security.ssl.SSLSocketImpl.decode(SSLSocketImpl.java:1152) >> at >> java.base/sun.security.ssl.SSLSocketImpl.readHandshakeRecord(SSLSocketImpl.java:1063) >> at >> java.base/sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:402) >> at >> java.base/sun.net.www.protocol.https.HttpsClient.afterConnect(HttpsClient.java:567) >> at >> java.base/sun.net.www.protocol.https.AbstractDelegateHttpsURLConnection.connect(AbstractDelegateHttpsURLConnection.java:185) >> at >> java.base/sun.net.www.protocol.http.HttpURLConnection.followRedirect0(HttpURLConnection.java:2768) >> at >> java.base/sun.net.www.protocol.http.HttpURLConnection.followRedirect(HttpURLConnection.java:2680) >> at >> java.base/sun.net.www.protocol.http.HttpURLConnection.getInputStream0(HttpURLConnection.java:1843) >> at >> java.base/sun.net.www.protocol.http.HttpURLConnection.getInputStream(HttpURLConnection.java:1509) >> at >> java.base/java.net.HttpURLConnection.getResponseCode(HttpURLConnection.java:527) >> at >> java.base/sun.net.www.protocol.https.HttpsURLConnectionImpl.getResponseCode(HttpsURLConnectionImpl.java:329) >> at hudson.FilePath.installIfNecessaryFrom(FilePath.java:874) >> Caused: java.io.IOException: Failed to install >> https://services.gradle.org/distributions/gradle-5.5.1-bin.zip to >> /home/build/jenkins-test/tools/hudson.plugins.gradle.GradleInstallation/gradle-5.5 >> at hudson.FilePath.installIfNecessaryFrom(FilePath.java:938) >> at hudson.FilePath.installIfNecessaryFrom(FilePath.java:846) >> at >> hudson.tools.DownloadFromUrlInstaller.performInstallation(DownloadFromUrlInstaller.java:77) >> at >> hudson.tools.InstallerTranslator.getToolHome(InstallerTranslator.java:69) >> at >> hudson.tools.ToolLocationNodeProperty.getToolHome(ToolLocationNodeProperty.java:109) >> at hudson.tools.ToolInstallation.translateFor(ToolInstallation.java:206) >> at >> hudson.plugins.gradle.GradleInstallation.forNode(GradleInstallation.java:92) >> at >> hudson.plugins.gradle.GradleInstallation.forNode(GradleInstallation.java:30) >> at >> org.jenkinsci.plugins.workflow.steps.ToolStep$Execution.run(ToolStep.java:152) >> at >> org.jenkinsci.plugins.workflow.steps.ToolStep$Execution.run(ToolStep.java:133) >> at >> org.jenkinsci.plugins.workflow.steps.SynchronousNonBlockingStepExecution.lambda$start$0(SynchronousNonBlockingStepExecution.java:47) >> at >> java.base/java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:515) >> at java.base/java.util.concurrent.FutureTask.run(FutureTask.java:264) >> at >> java.base/java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1128) >> at >> java.base/java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:628) >> at java.base/java.lang.Thread.run(Thread.java:834) >> >> -- >> You received this message because you are subscribed to the Google Groups >> "Jenkins Users" group. >> To unsubscribe from this group and stop receiving emails from it, send an >> email to [email protected] <javascript:>. >> To view this discussion on the web visit >> https://groups.google.com/d/msgid/jenkinsci-users/93ecd2ab-622a-4306-ad97-6546972c3471%40googlegroups.com >> >> <https://groups.google.com/d/msgid/jenkinsci-users/93ecd2ab-622a-4306-ad97-6546972c3471%40googlegroups.com?utm_medium=email&utm_source=footer> >> . >> > > > -- > Thanks! > Mark Waite > -- You received this message because you are subscribed to the Google Groups "Jenkins Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/jenkinsci-users/4f6bdea1-95fd-4237-a7d7-b2f4c0834046%40googlegroups.com.
