jenkins插件安装失败，报PKIX path building failed

[qq_40097892]

Preparation
Checking internet connectivity
Checking update center connectivity
Success
Trilead API
Failure -
sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
at sun.security.provider.certpath.SunCertPathBuilder.build(SunCertPathBuilder.java:145)
at sun.security.provider.certpath.SunCertPathBuilder.engineBuild(SunCertPathBuilder.java:131)
at java.security.cert.CertPathBuilder.build(CertPathBuilder.java:280)
at sun.security.validator.PKIXValidator.doBuild(PKIXValidator.java:382)
Caused: sun.security.validator.ValidatorException: PKIX path building failed
at sun.security.validator.PKIXValidator.doBuild(PKIXValidator.java:387)
at sun.security.validator.PKIXValidator.engineValidate(PKIXValidator.java:292)
at sun.security.validator.Validator.validate(Validator.java:260)
at sun.security.ssl.X509TrustManagerImpl.validate(X509TrustManagerImpl.java:324)
at sun.security.ssl.X509TrustManagerImpl.checkTrusted(X509TrustManagerImpl.java:229)
at sun.security.ssl.X509TrustManagerImpl.checkServerTrusted(X509TrustManagerImpl.java:124)
at sun.security.ssl.ClientHandshaker.serverCertificate(ClientHandshaker.java:1351)
Caused: javax.net.ssl.SSLHandshakeException
at sun.security.ssl.Alerts.getSSLException(Alerts.java:192)
at sun.security.ssl.SSLSocketImpl.fatal(SSLSocketImpl.java:1917)
at sun.security.ssl.Handshaker.fatalSE(Handshaker.java:301)
at sun.security.ssl.Handshaker.fatalSE(Handshaker.java:295)
at sun.security.ssl.ClientHandshaker.serverCertificate(ClientHandshaker.java:1369)
at sun.security.ssl.ClientHandshaker.processMessage(ClientHandshaker.java:156)
at sun.security.ssl.Handshaker.processLoop(Handshaker.java:925)
at sun.security.ssl.Handshaker.process_record(Handshaker.java:860)
at sun.security.ssl.SSLSocketImpl.readRecord(SSLSocketImpl.java:1043)
at sun.security.ssl.SSLSocketImpl.performInitialHandshake(SSLSocketImpl.java:1343)
at sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1371)
at sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1355)
at sun.net.www.protocol.https.HttpsClient.afterConnect(HttpsClient.java:563)
at sun.net.www.protocol.https.AbstractDelegateHttpsURLConnection.connect(AbstractDelegateHttpsURLConnection.java:185)
at sun.net.www.protocol.http.HttpURLConnection.getInputStream0(HttpURLConnection.java:1511)
at sun.net.www.protocol.http.HttpURLConnection.getInputStream(HttpURLConnection.java:1439)
at sun.net.www.protocol.http.HttpURLConnection.getHeaderField(HttpURLConnection.java:2929)
at java.net.URLConnection.getHeaderFieldLong(URLConnection.java:629)
at java.net.URLConnection.getContentLengthLong(URLConnection.java:501)
at java.net.URLConnection.getContentLength(URLConnection.java:485)
at sun.net.www.protocol.https.HttpsURLConnectionImpl.getContentLength(HttpsURLConnectionImpl.java:398)
at hudson.model.UpdateCenter$UpdateCenterConfiguration.download(UpdateCenter.java:1264)
Caused: javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed:


在网上搜了很多，有的说是换个源，但是换过了还是不行。有的说是需要获取证书然后加入到jdk里边，也试过了，还是不行？希望经历过该问题的前辈介绍一下经验，十分感谢

[qq_40097892]

部署方式是tomcat8.5+jdk1.8.0_11+jenkins2.270，不知道版本配置有没有问题，希望可以帮助大佬们分析问题

[weixin_47436831]

我也是这个问题弄了好几天也也没有解决掉，请问楼主解决了吗

[qq_40097892]

Manage Jenkins->Manage Plugins->Advanced https://mirrors.tuna.tsinghua.edu.cn/jenkins/updates/update-center.json sed -i 's/http:\/\/www.google.com/https:\/\/www.baidu.com/g' default.json sed -i 's/http:\/\/updates.jenkins-ci.org\/download/https:\/\/mirrors.tuna.tsinghua.edu.cn\/jenkins/g' default.json systemctl restart jenkins.service #重启Jenkins服务

[qq_40097892]

查看jenkins日志，如果还是报访问源需要证书的问题，就再生成一个证书放到jdk中去

[qq_40097892]

引用 5 楼 告小辞 的回复:

[quote=引用 3 楼 qq_40097892 的回复:]Manage Jenkins->Manage Plugins->Advanced https://mirrors.tuna.tsinghua.edu.cn/jenkins/updates/update-center.json sed -i 's/http:\/\/www.google.com/https:\/\/www.baidu.com/g' default.json sed -i 's/http:\/\/updates.jenkins-ci.org\/download/https:\/\/mirrors.tuna.tsinghua.edu.cn\/jenkins/g' default.json systemctl restart jenkins.service #重启Jenkins服务

sed -i 这两行命令在哪里用？[/quote] 一般情况下是这个 /var/lib/jenkins/updates/default.json

[告小辞]

引用 3 楼 qq_40097892 的回复:

Manage Jenkins->Manage Plugins->Advanced https://mirrors.tuna.tsinghua.edu.cn/jenkins/updates/update-center.json sed -i 's/http:\/\/www.google.com/https:\/\/www.baidu.com/g' default.json sed -i 's/http:\/\/updates.jenkins-ci.org\/download/https:\/\/mirrors.tuna.tsinghua.edu.cn\/jenkins/g' default.json systemctl restart jenkins.service #重启Jenkins服务

sed -i 这两行命令在哪里用？

[流墨馨]

解决了吗