Jenkins › Jenkins dev

Does UrlChangeTrigger plugin works with HTTPS?

Classic

List

Threaded

8 messages Options

Markus Heinisch

Does UrlChangeTrigger plugin works with HTTPS?

Hi,

I'm new to Hudson and please apologize if this is a faq.

I want to trigger a new build whenever the content of the URL
https://mycompany.com/svn/myproject/ changes. I have installed the
url-change-trigger - ver.1.0 and configured the project.
After a while I can see some exceptions on the console (WindowsXP),
please see below.

My questions are:
Does the plugin work with HTTPS?
Is it a problem of the SVN installation?
Is there a best practice to trigger a new build when the project has
been commited in subversion?
Thanx in advance,
Markus

Exception stack trace:
----------------------
Caused by: sun.security.validator.ValidatorException: PKIX path building
failed: sun.security.provider.certpath.SunCertP
athBuilderException: unable to find valid certification path to
requested target
at
sun.security.validator.PKIXValidator.doBuild(PKIXValidator.java:221)
at
sun.security.validator.PKIXValidator.engineValidate(PKIXValidator.java:1
45)
at sun.security.validator.Validator.validate(Validator.java:203)
at
com.sun.net.ssl.internal.ssl.X509TrustManagerImpl.checkServerTrusted(X50
9TrustManagerImpl.java:172)
at
com.sun.net.ssl.internal.ssl.JsseX509TrustManager.checkServerTrusted(SSL
ContextImpl.java:320)
at
com.sun.net.ssl.internal.ssl.ClientHandshaker.serverCertificate(ClientHa
ndshaker.java:840)
... 17 more
Caused by: sun.security.provider.certpath.SunCertPathBuilderException:
unable to find valid certification path to reques
ted target
at
sun.security.provider.certpath.SunCertPathBuilder.engineBuild(SunCertPat
hBuilder.java:236)
at
java.security.cert.CertPathBuilder.build(CertPathBuilder.java:194)
at
sun.security.validator.PKIXValidator.doBuild(PKIXValidator.java:216)
... 22 more
java.lang.RuntimeException: javax.net.ssl.SSLHandshakeException:
sun.security.validator.ValidatorException: PKIX path bu
ilding failed:
sun.security.provider.certpath.SunCertPathBuilderException: unable to
find valid certification path to re
quested target
at
com.redfin.hudson.UrlChangeTrigger.run(UrlChangeTrigger.java:92)
at hudson.triggers.Trigger.checkTriggers(Trigger.java:193)
at hudson.triggers.Trigger$Cron.doRun(Trigger.java:143)
at hudson.triggers.SafeTimerTask.run(SafeTimerTask.java:18)
at java.util.TimerThread.mainLoop(Timer.java:512)
at java.util.TimerThread.run(Timer.java:462)

---------------------------------------------------------------------
To unsubscribe, e-mail: [hidden email]
For additional commands, e-mail: [hidden email]

David Seymore

Re: Does UrlChangeTrigger plugin works with HTTPS?

Any reason to not use the SVN source code configuration and setup the polling interval to your favorite timing? Any more details you can provide about your setup?

On Tue, Jun 3, 2008 at 9:16 AM, Markus Heinisch <[hidden email]> wrote:

Hi,

I'm new to Hudson and please apologize if this is a faq.

I want to trigger a new build whenever the content of the URL
https://mycompany.com/svn/myproject/ changes. I have installed the
url-change-trigger - ver.1.0 and configured the project.
After a while I can see some exceptions on the console (WindowsXP),
please see below.

My questions are:
Does the plugin work with HTTPS?
Is it a problem of the SVN installation?
Is there a best practice to trigger a new build when the project has
been commited in subversion?
Thanx in advance,
Markus

Exception stack trace:
----------------------
Caused by: sun.security.validator.ValidatorException: PKIX path building
failed: sun.security.provider.certpath.SunCertP
athBuilderException: unable to find valid certification path to
requested target
at
sun.security.validator.PKIXValidator.doBuild(PKIXValidator.java:221)
at
sun.security.validator.PKIXValidator.engineValidate(PKIXValidator.java:1
45)
at sun.security.validator.Validator.validate(Validator.java:203)
at
com.sun.net.ssl.internal.ssl.X509TrustManagerImpl.checkServerTrusted(X50
9TrustManagerImpl.java:172)
at
com.sun.net.ssl.internal.ssl.JsseX509TrustManager.checkServerTrusted(SSL
ContextImpl.java:320)
at
com.sun.net.ssl.internal.ssl.ClientHandshaker.serverCertificate(ClientHa
ndshaker.java:840)
... 17 more
Caused by: sun.security.provider.certpath.SunCertPathBuilderException:
unable to find valid certification path to reques
ted target
at
sun.security.provider.certpath.SunCertPathBuilder.engineBuild(SunCertPat
hBuilder.java:236)
at
java.security.cert.CertPathBuilder.build(CertPathBuilder.java:194)
at
sun.security.validator.PKIXValidator.doBuild(PKIXValidator.java:216)
... 22 more
java.lang.RuntimeException: javax.net.ssl.SSLHandshakeException:
sun.security.validator.ValidatorException: PKIX path bu
ilding failed:
sun.security.provider.certpath.SunCertPathBuilderException: unable to
find valid certification path to re
quested target
at
com.redfin.hudson.UrlChangeTrigger.run(UrlChangeTrigger.java:92)
at hudson.triggers.Trigger.checkTriggers(Trigger.java:193)
at hudson.triggers.Trigger$Cron.doRun(Trigger.java:143)
at hudson.triggers.SafeTimerTask.run(SafeTimerTask.java:18)
at java.util.TimerThread.mainLoop(Timer.java:512)
at java.util.TimerThread.run(Timer.java:462)

---------------------------------------------------------------------
To unsubscribe, e-mail: [hidden email]
For additional commands, e-mail: [hidden email]

--
David Seymore
[hidden email]

Markus Heinisch

Re: Re: Does UrlChangeTrigger plugin works with HTTPS?

Yes, I have two reasons (but I'm not sure if they really count):
1.) Frequent polling is kind of expensive operation to SVN. I want to setup a CI environment for a lot of projects (more than ten active projects) which shouldn't put much load on the SVN server.
2.) I think, from a CI perspective it is best practice to start a build as soon as the changes are commited.

But when is is best practice to poll subversion then I will configure my CI server as you recommend.

Unfortunaly, the administrator of the subversion installation is on vacation. So, I can't give you any more information about subversion except a footer from the project's web page: Powered by Subversion 1.3.2 (r19776)
I'm running Hudson Hudson ver. 1.219 from the WAR file (java -jar ..) on java version "1.5.0_06", Windows XP

Thanks, Markus

________________________________________
Von: David Seymore [mailto:[hidden email]]
Gesendet: Dienstag, 3. Juni 2008 15:29
An: [hidden email]
Betreff: Re: Does UrlChangeTrigger plugin works with HTTPS?

Any reason to not use the SVN source code configuration and setup the polling interval to your favorite timing? Any more details you can provide about your setup?
On Tue, Jun 3, 2008 at 9:16 AM, Markus Heinisch <[hidden email]> wrote:
Hi,

I'm new to Hudson and please apologize if this is a faq.

I want to trigger a new build whenever the content of the URL
https://mycompany.com/svn/myproject/ changes. I have installed the
url-change-trigger - ver.1.0 and configured the project.
After a while I can see some exceptions on the console (WindowsXP),
please see below.

My questions are:
Does the plugin work with HTTPS?
Is it a problem of the SVN installation?
Is there a best practice to trigger a new build when the project has
been commited in subversion?
Thanx in advance,
Markus

Exception stack trace:
----------------------
Caused by: sun.security.validator.ValidatorException: PKIX path building
failed: sun.security.provider.certpath.SunCertP
athBuilderException: unable to find valid certification path to
requested target
at
sun.security.validator.PKIXValidator.doBuild(PKIXValidator.java:221)
at
sun.security.validator.PKIXValidator.engineValidate(PKIXValidator.java:1
45)
at sun.security.validator.Validator.validate(Validator.java:203)
at
com.sun.net.ssl.internal.ssl.X509TrustManagerImpl.checkServerTrusted(X50
9TrustManagerImpl.java:172)
at
com.sun.net.ssl.internal.ssl.JsseX509TrustManager.checkServerTrusted(SSL
ContextImpl.java:320)
at
com.sun.net.ssl.internal.ssl.ClientHandshaker.serverCertificate(ClientHa
ndshaker.java:840)
... 17 more
Caused by: sun.security.provider.certpath.SunCertPathBuilderException:
unable to find valid certification path to reques
ted target
at
sun.security.provider.certpath.SunCertPathBuilder.engineBuild(SunCertPat
hBuilder.java:236)
at
java.security.cert.CertPathBuilder.build(CertPathBuilder.java:194)
at
sun.security.validator.PKIXValidator.doBuild(PKIXValidator.java:216)
... 22 more
java.lang.RuntimeException: javax.net.ssl.SSLHandshakeException:
sun.security.validator.ValidatorException: PKIX path bu
ilding failed:
sun.security.provider.certpath.SunCertPathBuilderException: unable to
find valid certification path to re
quested target
at
com.redfin.hudson.UrlChangeTrigger.run(UrlChangeTrigger.java:92)
at hudson.triggers.Trigger.checkTriggers(Trigger.java:193)
at hudson.triggers.Trigger$Cron.doRun(Trigger.java:143)
at hudson.triggers.SafeTimerTask.run(SafeTimerTask.java:18)
at java.util.TimerThread.mainLoop(Timer.java:512)
at java.util.TimerThread.run(Timer.java:462)

---------------------------------------------------------------------
To unsubscribe, e-mail: [hidden email]
For additional commands, e-mail: [hidden email]

--
David Seymore
[hidden email]

---------------------------------------------------------------------
To unsubscribe, e-mail: [hidden email]
For additional commands, e-mail: [hidden email]

David Seymore

Re: Re: Does UrlChangeTrigger plugin works with HTTPS?

Hmmm.. ok. Another route, that may or may not be an option for you, is to have SVN tell hudson to build by using a SVN commit hook, you can just use the wget spider operation to call the build url for the project.

I haven't used the url trigger plugin at all before, so, I can't give you much help, sorry 'bout that... I've never seen SVN polling be that big of a problem, even at 1 minute intervals... i'm no SVN expert, but, its just checking if your rev number is < the checked out directory's.

Sorry i don't have any direct solution.

-Dave Seymore

On Tue, Jun 3, 2008 at 9:50 AM, Markus Heinisch <[hidden email]> wrote:

Yes, I have two reasons (but I'm not sure if they really count):
1.) Frequent polling is kind of expensive operation to SVN. I want to setup a CI environment for a lot of projects (more than ten active projects) which shouldn't put much load on the SVN server.
2.) I think, from a CI perspective it is best practice to start a build as soon as the changes are commited.

But when is is best practice to poll subversion then I will configure my CI server as you recommend.

Unfortunaly, the administrator of the subversion installation is on vacation. So, I can't give you any more information about subversion except a footer from the project's web page: Powered by Subversion 1.3.2 (r19776)
I'm running Hudson Hudson ver. 1.219 from the WAR file (java -jar ..) on java version "1.5.0_06", Windows XP

Thanks, Markus

________________________________________
Von: David Seymore [mailto:[hidden email]]
Gesendet: Dienstag, 3. Juni 2008 15:29
An: [hidden email]
Betreff: Re: Does UrlChangeTrigger plugin works with HTTPS?

Any reason to not use the SVN source code configuration and setup the polling interval to your favorite timing? Any more details you can provide about your setup?
On Tue, Jun 3, 2008 at 9:16 AM, Markus Heinisch <[hidden email]> wrote:
Hi,

I'm new to Hudson and please apologize if this is a faq.

I want to trigger a new build whenever the content of the URL
https://mycompany.com/svn/myproject/ changes. I have installed the
url-change-trigger - ver.1.0 and configured the project.
After a while I can see some exceptions on the console (WindowsXP),
please see below.

My questions are:
Does the plugin work with HTTPS?
Is it a problem of the SVN installation?
Is there a best practice to trigger a new build when the project has
been commited in subversion?
Thanx in advance,
Markus

Exception stack trace:
----------------------
Caused by: sun.security.validator.ValidatorException: PKIX path building
failed: sun.security.provider.certpath.SunCertP
athBuilderException: unable to find valid certification path to
requested target
at
sun.security.validator.PKIXValidator.doBuild(PKIXValidator.java:221)
at
sun.security.validator.PKIXValidator.engineValidate(PKIXValidator.java:1
45)
at sun.security.validator.Validator.validate(Validator.java:203)
at
com.sun.net.ssl.internal.ssl.X509TrustManagerImpl.checkServerTrusted(X50
9TrustManagerImpl.java:172)
at
com.sun.net.ssl.internal.ssl.JsseX509TrustManager.checkServerTrusted(SSL
ContextImpl.java:320)
at
com.sun.net.ssl.internal.ssl.ClientHandshaker.serverCertificate(ClientHa
ndshaker.java:840)
... 17 more
Caused by: sun.security.provider.certpath.SunCertPathBuilderException:
unable to find valid certification path to reques
ted target
at
sun.security.provider.certpath.SunCertPathBuilder.engineBuild(SunCertPat
hBuilder.java:236)
at
java.security.cert.CertPathBuilder.build(CertPathBuilder.java:194)
at
sun.security.validator.PKIXValidator.doBuild(PKIXValidator.java:216)
... 22 more
java.lang.RuntimeException: javax.net.ssl.SSLHandshakeException:
sun.security.validator.ValidatorException: PKIX path bu
ilding failed:
sun.security.provider.certpath.SunCertPathBuilderException: unable to
find valid certification path to re
quested target
at
com.redfin.hudson.UrlChangeTrigger.run(UrlChangeTrigger.java:92)
at hudson.triggers.Trigger.checkTriggers(Trigger.java:193)
at hudson.triggers.Trigger$Cron.doRun(Trigger.java:143)
at hudson.triggers.SafeTimerTask.run(SafeTimerTask.java:18)
at java.util.TimerThread.mainLoop(Timer.java:512)
at java.util.TimerThread.run(Timer.java:462)

---------------------------------------------------------------------
To unsubscribe, e-mail: [hidden email]
For additional commands, e-mail: [hidden email]

--
David Seymore
[hidden email]

---------------------------------------------------------------------
To unsubscribe, e-mail: [hidden email]
For additional commands, e-mail: [hidden email]

--
David Seymore
[hidden email]

Markus Heinisch

AW: Re: Re: Does UrlChangeTrigger plugin works with HTTPS?

Trivadis AG, Basel

A SVN hook executing a wget spider operation is maybe the perfect solution. I read about that operation in the Hudson documentation a few days ago. I Thanks for your hint,

Markus

------------------------------------------

Markus Heinisch
Senior Consultant

Trivadis GmbH
Lehrer-Wirth-Str. 4

D-81829 München
Germany

Tel.: +49-89-99275930

Fax : +49-89-99275959
Mobile: +49-162-2959616
[hidden email]
http://www.trivadis.com

Trivadis GmbH, Geschäftssitz Stuttgart, Geschäftsführer: Dr. Michael Schmidt, Urban Lankes
Amtsgericht Stuttgart, Handelsregister HRB 18089

Von: David Seymore [mailto:[hidden email]]
Gesendet: Dienstag, 3. Juni 2008 15:59
An: [hidden email]
Betreff: Re: Re: Does UrlChangeTrigger plugin works with HTTPS?

On Tue, Jun 3, 2008 at 9:50 AM, Markus Heinisch <[hidden email]> wrote:

Any reason to not use the SVN source code configuration and setup the polling interval to your favorite timing? Any more details you can provide about your setup?
On Tue, Jun 3, 2008 at 9:16 AM, Markus Heinisch <[hidden email]> wrote:
Hi,

I'm new to Hudson and please apologize if this is a faq.

I want to trigger a new build whenever the content of the URL
https://mycompany.com/svn/myproject/ changes. I have installed the
url-change-trigger - ver.1.0 and configured the project.
After a while I can see some exceptions on the console (WindowsXP),
please see below.

My questions are:
Does the plugin work with HTTPS?
Is it a problem of the SVN installation?
Is there a best practice to trigger a new build when the project has
been commited in subversion?
Thanx in advance,
Markus

Exception stack trace:
----------------------
Caused by: sun.security.validator.ValidatorException: PKIX path building
failed: sun.security.provider.certpath.SunCertP
athBuilderException: unable to find valid certification path to
requested target
at
sun.security.validator.PKIXValidator.doBuild(PKIXValidator.java:221)
at
sun.security.validator.PKIXValidator.engineValidate(PKIXValidator.java:1
45)
at sun.security.validator.Validator.validate(Validator.java:203)
at
com.sun.net.ssl.internal.ssl.X509TrustManagerImpl.checkServerTrusted(X50
9TrustManagerImpl.java:172)
at
com.sun.net.ssl.internal.ssl.JsseX509TrustManager.checkServerTrusted(SSL
ContextImpl.java:320)
at
com.sun.net.ssl.internal.ssl.ClientHandshaker.serverCertificate(ClientHa
ndshaker.java:840)
... 17 more
Caused by: sun.security.provider.certpath.SunCertPathBuilderException:
unable to find valid certification path to reques
ted target
at
sun.security.provider.certpath.SunCertPathBuilder.engineBuild(SunCertPat
hBuilder.java:236)
at
java.security.cert.CertPathBuilder.build(CertPathBuilder.java:194)
at
sun.security.validator.PKIXValidator.doBuild(PKIXValidator.java:216)
... 22 more
java.lang.RuntimeException: javax.net.ssl.SSLHandshakeException:
sun.security.validator.ValidatorException: PKIX path bu
ilding failed:
sun.security.provider.certpath.SunCertPathBuilderException: unable to
find valid certification path to re
quested target
at
com.redfin.hudson.UrlChangeTrigger.run(UrlChangeTrigger.java:92)
at hudson.triggers.Trigger.checkTriggers(Trigger.java:193)
at hudson.triggers.Trigger$Cron.doRun(Trigger.java:143)
at hudson.triggers.SafeTimerTask.run(SafeTimerTask.java:18)
at java.util.TimerThread.mainLoop(Timer.java:512)
at java.util.TimerThread.run(Timer.java:462)

---------------------------------------------------------------------
To unsubscribe, e-mail: [hidden email]
For additional commands, e-mail: [hidden email]

--
David Seymore
[hidden email]

---------------------------------------------------------------------
To unsubscribe, e-mail: [hidden email]
For additional commands, e-mail: [hidden email]

--
David Seymore
[hidden email]

Kohsuke Kawaguchi

Re: Does UrlChangeTrigger plugin works with HTTPS?

Administrator

In reply to this post by Markus Heinisch

IIRC, this is an infamous error message that essentially says "The
certificate doesn't have the known CA root" ---- the equivalent of
Firefox's security warning dialog.

Most likely cause of it is when you generate the server certificate
yourself, but sometimes JDK's list of root certificates seems to be
smaller than those of major browsers, and you can get this for a valid
server, too.

Could it be your case?

If so, we can think about how to fix this next.

Markus Heinisch wrote:

> Hi,
>
> I'm new to Hudson and please apologize if this is a faq.
>
> I want to trigger a new build whenever the content of the URL
> https://mycompany.com/svn/myproject/ changes. I have installed the
> url-change-trigger - ver.1.0 and configured the project.
> After a while I can see some exceptions on the console (WindowsXP),
> please see below.
>
> My questions are:
> Does the plugin work with HTTPS?
> Is it a problem of the SVN installation?
> Is there a best practice to trigger a new build when the project has
> been commited in subversion?
> Thanx in advance,
> Markus
>
> Exception stack trace:
> ----------------------
> Caused by: sun.security.validator.ValidatorException: PKIX path building
> failed: sun.security.provider.certpath.SunCertP
> athBuilderException: unable to find valid certification path to
> requested target
> at
> sun.security.validator.PKIXValidator.doBuild(PKIXValidator.java:221)
> at
> sun.security.validator.PKIXValidator.engineValidate(PKIXValidator.java:1
> 45)
> at sun.security.validator.Validator.validate(Validator.java:203)
> at
> com.sun.net.ssl.internal.ssl.X509TrustManagerImpl.checkServerTrusted(X50
> 9TrustManagerImpl.java:172)
> at
> com.sun.net.ssl.internal.ssl.JsseX509TrustManager.checkServerTrusted(SSL
> ContextImpl.java:320)
> at
> com.sun.net.ssl.internal.ssl.ClientHandshaker.serverCertificate(ClientHa
> ndshaker.java:840)
> ... 17 more
> Caused by: sun.security.provider.certpath.SunCertPathBuilderException:
> unable to find valid certification path to reques
> ted target
> at
> sun.security.provider.certpath.SunCertPathBuilder.engineBuild(SunCertPat
> hBuilder.java:236)
> at
> java.security.cert.CertPathBuilder.build(CertPathBuilder.java:194)
> at
> sun.security.validator.PKIXValidator.doBuild(PKIXValidator.java:216)
> ... 22 more
> java.lang.RuntimeException: javax.net.ssl.SSLHandshakeException:
> sun.security.validator.ValidatorException: PKIX path bu
> ilding failed:
> sun.security.provider.certpath.SunCertPathBuilderException: unable to
> find valid certification path to re
> quested target
> at
> com.redfin.hudson.UrlChangeTrigger.run(UrlChangeTrigger.java:92)
> at hudson.triggers.Trigger.checkTriggers(Trigger.java:193)
> at hudson.triggers.Trigger$Cron.doRun(Trigger.java:143)
> at hudson.triggers.SafeTimerTask.run(SafeTimerTask.java:18)
> at java.util.TimerThread.mainLoop(Timer.java:512)
> at java.util.TimerThread.run(Timer.java:462)
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: [hidden email]
> For additional commands, e-mail: [hidden email]
>
>

--
Kohsuke Kawaguchi
Sun Microsystems [hidden email]

smime.p7s (4K) Download Attachment

redhotter

Re: Does UrlChangeTrigger plugin works with HTTPS?

Hi Kohsuke,

So my server is using a self signed certificate. How can I include it so the Jenkins/plugin recognizes it?

Thanks!

Gregory Boissinot

Re: Does UrlChangeTrigger plugin works with HTTPS?

URL Change Trigger doesn't support HTTPS.
You could switch to URLTrigger Plugin.

On Fri, Oct 5, 2012 at 3:00 AM, kaizers <[hidden email]> wrote:

Hi Kohsuke,

So my server is using a self signed certificate. How can I include it so the
Jenkins/plugin recognizes it?

Thanks!

--
View this message in context: http://jenkins.361315.n4.nabble.com/Does-UrlChangeTrigger-plugin-works-with-HTTPS-tp389238p4642270.html
Sent from the Jenkins dev mailing list archive at Nabble.com.