Mark, Daniel, According to the logs I can confirm that I got the certificate error when there was no server_name sent in the ClientHello message. Actually the log shows that the SNI was tried to be set, but failed.
javax.net.ssl|DEBUG|49|Update center installer thread [#1]|2021-11-22 09:15:12.165 CET|Utilities.java:73|the previous server name in SNI (type=host_name (0), value=get.jenkins.io) was replaced with (type=host_name (0), value=get.jenkins.io) javax.net.ssl|WARNING|49|Update center installer thread [#1]|2021-11-22 09:15:12.166 CET|ServerNameExtension.java:255|*Unable to indicate server name* I've found this Java bug https://bugs.openjdk.java.net/browse/JDK-8220564, which seems to be related and fixed since then. I managed to upgrade my java and it seems it solved the issue. Thank you both. -- Tamas On Friday, November 19, 2021 at 11:18:26 PM UTC+1 Daniel Beck wrote: > > > > On 19. Nov 2021, at 20:52, Mark Waite <[email protected]> wrote: > > > > I thought that certificate could be reported when a request is made to > the IP address of an HTTP server hosted in Kubernetes. The Kubernetes > server needs the hostname in order to use the correct SSL certificate (or > something like that). > > > > https://en.wikipedia.org/wiki/Server_Name_Indication > > The Kubernetes cert in the first message is the one for get.jenkins.io > without SNI. > > -- You received this message because you are subscribed to the Google Groups "Jenkins Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/jenkinsci-users/ade70882-9df7-4fe5-8198-d2650a524ab5n%40googlegroups.com.
