In Jenkins, how can I manually check the signature of plugin updates?

user_1807667 0
Viewed 3360

In Jenkins -> Manage Plugins, I observe this message:

There were errors checking the update sites: None of the tool installer metadata passed the signature check

My question is: How can I manually check the signature of updates in order to determine if they are valid?

Subsidiary question, how can I determine the cause of this error?

jenkins-plugins signature jenkins
2 Answers

UPDATE: In the meantime it seems the expired cert has been renewed:

https://updates.jenkins-ci.org/updates/hudson.tools.JDKInstaller.json.html

Certificate:
    Data:
        Version: 1 (0x0)
        Serial Number: 3735928570 (0xdeadbefa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, ST=California, L=San Jose, O=Jenkins Project, CN=Kohsuke Kawaguchi/emailAddress=kk@kohsuke.org
        Validity
            Not Before: Nov 19 21:21:39 2018 GMT
            Not After : Nov 19 21:21:39 2019 GMT
        Subject: C=US, ST=California, O=Jenkins Project, CN=Community Update Center
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)

So for me the issue seems solved.

user_93499310

Have you tried : Why is there Failed Signature Check when using update server?

Suppress the signature verification check by adding the following Java option

-Dhudson.model.DownloadService.noSignatureCheck=true

or

Modify your JDK security policy to admit unsecure encryption algorithms by replacing jdk.certpath.disabledAlgorithms=MD2, RSA keySize < 1024 with jdk.certpath.disabledAlgorithms=MD2, RSA keySize < 512 in the file $JRE_HOME/lib/securityjava.security

user_5981410
Related