Jenkins git plugin SSL验证修复

最新推荐文章于 2024-10-08 14:40:46 发布

froghui

最新推荐文章于 2024-10-08 14:40:46 发布

阅读量8.5k

点赞数

分类专栏： devops 文章标签： jenkins ssl devops

本文链接：https://blog.youkuaiyun.com/froghui/article/details/39641221

版权

升级Jenkins的git和git client插件后，通过HTTPS访问Git仓库遇到SSL验证错误。解决方法包括编辑Jenkins配置文件，重启服务，启用untrustedSSL，以及由于JENKINS-22675的bug，最终转向使用SSH配置：创建凭证填充私钥，启用部署密钥，和在Jenkins作业中配置使用SSH协议和私钥。

摘要生成于 C知道，由 DeepSeek-R1 满血版支持，前往体验 >

最近在将Jenkins内部使用的git和git client两个plugin分别升级到2.2(from 1.4), 1.9.1以后，git plugin 用https访问 git repo报错：

> git --version
using GIT_SSH to set credentials 
ERROR: Error cloning remote repo 'origin'
hudson.plugins.git.GitException: com.ibm.jsse2.util.j: PKIX path building failed: java.security.cert.CertPathBuilderException: PKIXCertPathBuilderImpl could not build a valid CertPath.; internal cause is: 
	java.security.cert.CertPathValidatorException: The certificate issued by CN=IBM Internal Root CA, O=International Business Machines Corporation, C=US is not trusted; internal cause is: 
	java.security.cert.CertPathValidatorException: Certificate chaining error
	at org.jenkinsci.plugins.gitclient.CliGitAPIImpl.checkCredentials(CliGitAPIImpl.java:1982)
	at org.jenkinsci.plugins.gitclient.CliGitAPIImpl.launchCommandWithCredentials(CliGitAPIImpl.java:1143)
	at org.jenkinsci.plugins.gitclient.CliGitAPIImpl.access$200(CliGitAPIImpl.java:87)
	at org.jenkinsci.plugins.gitclient.CliGitAPIImpl$1.execute(CliGitAPIImpl.java:257)
	at org.jenkinsci.plugins.gitclient.CliGitAPIImpl$2.execute(CliGitAPIImpl.java:413)
	at org.jenkinsci.plugins.gitclient.RemoteGitImpl$CommandInvocationHandler$1.call(RemoteGitImpl.java:153)
	at org.jenkinsci.plugins.gitclient.RemoteGitImpl$CommandInvocationHandler$1.call(RemoteGitImpl.java:146)
	at hudson.remoting.UserRequest.perform(UserRequest.java:118)
	at hudson.remoting.UserRequest.perform(UserRequest.java:48)

最低0.47元/天解锁文章