Jess, Thanks !
Brian -----Original Message----- From: Jessica Wagantall via RT <[email protected]> Sent: Friday, April 26, 2019 7:07 PM Cc: FREEMAN, BRIAN D <[email protected]>; [email protected]; DRAGOSH, PAM <[email protected]> Subject: [ONAP Helpdesk #71334] Re: [onap-discuss] nexus having certificate issues Dear team, We should be good to go for now. We have installed a new short term certificate which was issued for 90 days. Let's chat more about this in the PTL call next Monday Thanks! Jess On Fri Apr 26 16:28:36 2019, jwagantall wrote: > Re-adding my response to PAM in a different RT: > > > It seems to be an issue with the actual plugin nexus-staging-maven- > plugin. It is broken when it comes to SNI / SAN certificates. I am > still checking what we can do with my team but it looks > like Sonatype stated that they won't fix this. > > My team is looking into how to fix it right now by not having a > certification doing SNI / SAN > until we are able to get to a permanent fix which would be to not use > the plugin and use > maven-deploy-plugin instead which is what the global-jjb jobs use. > > I am updating more information as I get it > > thanks! > Jess > > On Fri Apr 26 10:14:06 2019, [email protected] wrote: > > All, > > > > CCSDK is having the same issue, starting yesterday. > > > > I’ve been looking at this a bit (thinking at first it was just me), > > and found the following in the CCSDK builds: > > > > > > * If you browse to > > https://urldefense.proofpoint.com/v2/url?u=https-3A__nexus.onap.org&d=DwIDaQ&c=LFYZ-o9_HUMeMTSQicvjIg&r=e3d1ehx3DI5AoMgDmi2Fzw&m=6sJv-8AGPNfYbFc_gSKTPDgLbWGTayEHnQ-bCI0zw3M&s=7dmsqJH7RIfAu8MPPPznmITjbzWdlZKwIoVHxHhDOGY&e= > > and look at the > > certificate in your browser, it looks fine (nexus.onap.org is the CN > > and also the only SAN). > > * I see this problem in our daily release builds, and in one of our > > merge builds, but not all the merge builds. > > * Our staging builds seem to be unaffected. > > > > That first observation made me suspect a bad cached DNS entry on > > Jenkins, but that would have broken ALL builds except verify builds, > > and that’s not what I’m seeing. I also thought perhaps this had to > > do > > with the staging plugin, but some of the builds that work use the > > staging plugin (which is used even for snapshot builds – which is > > sort > > of pointless, but that’s how the plugin works: it’s not smart enough > > to only disable the deploy-plugin for release versions). > > > > I don’t know how helpful those observations will be, but thought I’d > > share. > > > > Dan > > > > Dan Timoney > > Principal Technical Staff Member > > AT&T > > Email : [email protected]<mailto:[email protected]> > > Office : +1 (732) 420-3226 > > Mobile : +1 (201) 960-1211 > > 200 S Laurel Ave, Rm E2-2A03 > > Middletown, NJ 08873 > > > > From: onap-discuss <[email protected]> on behalf of > > "DRAGOSH, PAM" <[email protected]> > > Reply-To: onap-discuss <[email protected]>, "DRAGOSH, PAM" > > <[email protected]> > > Date: Friday, April 26, 2019 at 8:07 AM > > To: Bengt Thuree via RT <[email protected]> > > Cc: onap-discuss <[email protected]> > > Subject: [onap-discuss] nexus having certificate issues > > > > ***Security Advisory: This Message Originated Outside of AT&T *** > > Reference http://cso.att.com/EmailSecurity/IDSP.html for more > > information. > > > > > > Hi, > > > > Our Jenkins jobs are struggling to run: > > > > https://urldefense.proofpoint.com/v2/url?u=https-3A__jenkins.onap.org_view_policy_job_policy-2Dparent-2Dmaster-2D&d=DwIDaQ&c=LFYZ-o9_HUMeMTSQicvjIg&r=e3d1ehx3DI5AoMgDmi2Fzw&m=6sJv-8AGPNfYbFc_gSKTPDgLbWGTayEHnQ-bCI0zw3M&s=N4tCmNOuZ409TuChHHu_4LOPCcrt-A9DIu2K51LrSvI&e= > > release- > > version-java- > > daily/26/console<https://urldefense.proofpoint.com/v2/url?u=https- > > 3A__jenkins.onap.org_view_policy_job_policy-2Dparent-2Dmaster- > > 2Drelease-2Dversion-2Djava-2Ddaily_26_console&d=DwMGaQ&c=LFYZ- > > o9_HUMeMTSQicvjIg&r=qLcfee4a2vOwYSub0bljcQ&m=cTzdGHfgEOFz0WnO_z- > > aFwUCmNXKty0Gl54Gcg0XRl4&s=49H35uzCp5C_Oj9GCyd733t5unZVrmSwVSWrsqxKUnM&e=> > > > > ERROR] Failed to execute goal org.sonatype.plugins:nexus-staging- > > maven-plugin:1.6.7:deploy (injected-nexus-deploy) on project policy- > > parent: Execution injected-nexus-deploy of goal > > org.sonatype.plugins:nexus-staging-maven-plugin:1.6.7:deploy failed: > > Nexus connection problem to URL > > [https://urldefense.proofpoint.com/v2/url?u=https-3A__nexus.onap.org&d=DwIDaQ&c=LFYZ-o9_HUMeMTSQicvjIg&r=e3d1ehx3DI5AoMgDmi2Fzw&m=6sJv-8AGPNfYbFc_gSKTPDgLbWGTayEHnQ-bCI0zw3M&s=7dmsqJH7RIfAu8MPPPznmITjbzWdlZKwIoVHxHhDOGY&e=<https://urldefense.proofpoint.com/v2/url?u=https- > > 3A__nexus.onap.org_&d=DwMGaQ&c=LFYZ- > > o9_HUMeMTSQicvjIg&r=jwTiArcEj6aUX0HjV0M3dT12gUtk7rC07xpgpVZkS_4&m=nJfsg8aR5stzdNSv2D_rG3UfnjauFQSmXmL4exNmZ6g&s=Tp97v76hod2SCWivF4oIO4T2F95CabUglk4fZsp0zRE&e=> > > ]: com.sun.jersey.api.client.ClientHandlerException: > > javax.net.ssl.SSLException: hostname in certificate didn't match: > > <nexus.onap.org> != <logs.onap.org> OR <logs.onap.org> -> [Hel > > > > Other teams have reported similar issue: > > > > 13:07:46 [ERROR] Failed to execute goal org.sonatype.plugins:nexus- > > staging-maven-plugin:1.6.7:deploy (injected-nexus-deploy) on project > > multicloud-openstack-starlingx: Execution injected-nexus-deploy of > > goal org.sonatype.plugins:nexus-staging-maven-plugin:1.6.7:deploy > > failed: Nexus connection problem to URL > > [https://urldefense.proofpoint.com/v2/url?u=https-3A__nexus.onap.org&d=DwIDaQ&c=LFYZ-o9_HUMeMTSQicvjIg&r=e3d1ehx3DI5AoMgDmi2Fzw&m=6sJv-8AGPNfYbFc_gSKTPDgLbWGTayEHnQ-bCI0zw3M&s=7dmsqJH7RIfAu8MPPPznmITjbzWdlZKwIoVHxHhDOGY&e=<https://urldefense.proofpoint.com/v2/url?u=https- > > 3A__nexus.onap.org&d=DwMFAg&c=LFYZ- > > o9_HUMeMTSQicvjIg&r=jwTiArcEj6aUX0HjV0M3dT12gUtk7rC07xpgpVZkS_4&m=XMhF1nHcAAefPx41nL9y6ejJ8RGaIs6- > > LmAKx9vQD4g&s=LZIsvpnglSC1Fllz4jNcOV31yinzHaUMZRJZoxp31a4&e=> ]: > > com.sun.jersey.api.client.ClientHandlerException: > > javax.net.ssl.SSLException: hostname in certificate didn't match: > > <nexus.onap.org> != <logs.onap.org> OR <logs.onap.org> -> [Help 1] > > > > can someone please check? > > > > Thanks! > > > > Pam > > -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#16774): https://lists.onap.org/g/onap-discuss/message/16774 Mute This Topic: https://lists.onap.org/mt/31358531/21656 Group Owner: [email protected] Unsubscribe: https://lists.onap.org/g/onap-discuss/unsub [[email protected]] -=-=-=-=-=-=-=-=-=-=-=-
