Closed ricardojdsilva87 closed 3 years ago
We have encountered the exact same problem.
I have found the root issue will be very cool if you found a solution very soon
Also can't install Allure plugin, error:
ERROR: Signature verification failed in downloadable 'ru.yandex.qatools.allure.jenkins.tools.AllureCommandlineInstaller' (show details)
at hudson.util.FormValidation._errorWithMarkup(FormValidation.java:269) at hudson.util.FormValidation._error(FormValidation.java:201) at hudson.util.FormValidation.error(FormValidation.java:191) at jenkins.util.JSONSignatureValidator.verifySignature(JSONSignatureValidator.java:138) at hudson.model.DownloadService$Downloadable.updateNow(DownloadService.java:388) at jenkins.DailyCheck.execute(DailyCheck.java:84) at hudson.model.AsyncPeriodicWork.lambda$doRun$0(AsyncPeriodicWork.java:100) at java.lang.Thread.run(Thread.java:748)
Exact same error here. One workaround is to add -Dhudson.model.DownloadService.noSignatureCheck=true
to JAVA_OPTS
, but it is a workaround, the definitive solution must come from the plugin I think.
Exact same error here. One workaround is to add
-Dhudson.model.DownloadService.noSignatureCheck=true
toJAVA_OPTS
, but it is a workaround, the definitive solution must come from the plugin I think.
That's a security threat from my perspective. In fact, I wouldn't update any plugins except allure until this problem is resolved, as I might install/update something published by a bad actor.
For now it looks like that it is fixed from another side...
see issue on jenkins.io
Hello, I can confirm that the issue is now gone after reenabling the plugin installation. Haven't change a thing in my configuration. Will close the ticket. Thanks
Version report
Jenkins and plugins versions report:
Reproduction steps
Install Jenkins using an helm chart with the mentioned docker file and plugin version
Error appears on the logs but Jenkins startups
New plugin checks fails
Remove casc configs and plugin from install list
Jenkins startups correctly and new check for updates with no issues
Results
Expected result:
Having an issue with Jenkins checking for plugins updates due to an issue with the allure plugin certificate that expired on the 27th June 2021. After removing the plugin from the plugin version list and the configuration of the tool from the casc configuration the error disappeared. Version 2.28.1 of the plugin has the same result.
Jenkins startups with just that error on the console logs. Checking the UI we have the following error on the plugins page:![image](https://user-images.githubusercontent.com/12953702/123778626-31c5ba00-d8c9-11eb-938e-30c80dc962b9.png)
Actual result:
UPDATE:
Found that the error is triggered by Jenkins core code here It seems that the issue might come from some kind of generated file by Allure. Maybe this function triggers the generation of the faulty XML file? ru.yandex.qatools.allure.jenkins.tools.AllureCommandlineInstaller
Thanks