Skip to content

regression: 2.11 JDK6 started failing, unable to retrieve sbt 0.13.18 #836

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Closed
SethTisue opened this issue Jan 17, 2019 · 5 comments
Closed
Assignees

Comments

@SethTisue
Copy link
Member

SethTisue commented Jan 17, 2019

scala/scala-parser-combinators#182 was, if not the actual cause, at least the trigger

first failed run is https://scala-ci.typesafe.com/view/scala-2.11.x/job/scala-2.11.x-integrate-community-build/1248/console

[scala-parser-combinators] :::: ERRORS
[scala-parser-combinators] 	Server access Error: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target url=https://scala-ci.typesafe.com/artifactory/dbuild/org/scala-sbt/sbt/0.13.18/sbt-0.13.18.pom
[scala-parser-combinators] 
@SethTisue SethTisue self-assigned this Jan 17, 2019
@SethTisue
Copy link
Member Author

SethTisue commented Jan 18, 2019

probably as part of Adriaan's recent round of system upgrades, our Artifactory's certificate apparently changed, and I guess nothing failed as a result until now because artifacts were cached locally on behemoth 1

I guess I need to add a certificate to /usr/lib/jvm/jdk1.6.0_45/jre/lib/security/cacerts

using https://stackoverflow.com/a/11617655/86485 as my guide, ssh admin@jenkins-worker-behemoth-1 and then:

echo -n | openssl s_client -connect scala-ci.typesafe.com:443 | sed -ne '/-BEGIN CERTIFICATE-/,/-END CERTIFICATE-/p' > /tmp/artifactory.crt
sudo keytool -import -trustcacerts -keystore /usr/lib/jvm/jdk1.6.0_45/jre/lib/security/cacerts -storepass changeit -noprompt -alias mycert -file /tmp/artifactory.crt

which responded with Certificate was added to keystore, so hopefully that does it

@SethTisue
Copy link
Member Author

@SethTisue
Copy link
Member Author

to delete before re-adding it's sudo keytool -delete -trustcacerts -keystore /usr/lib/jvm/jdk1.6.0_45/jre/lib/security/cacerts -alias mycert -storepass changeit

not sure why I needed to do a re-add. failure log https://scala-ci.typesafe.com/view/scala-2.11.x/job/scala-2.11.x-integrate-community-build/1337/

@SethTisue
Copy link
Member Author

[scala-logging-api:error] 	Server access Error: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target url=https://scala-ci.typesafe.com/artifactory/dbuild/com/typesafe/scala-logging/scala-logging-api_2.11/2.1.2/scala-logging-api_2.11-2.1.2.pom

seen in recent runs such as https://scala-ci.typesafe.com/view/scala-2.11.x/job/scala-2.11.x-integrate-community-build/1387/

@SethTisue
Copy link
Member Author

I did the same delete/re-add steps and that seems to have fixed it

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant