From jira at ovirt-jira.atlassian.net Thu Oct 12 11:13:54 2017 Content-Type: multipart/mixed; boundary="===============7635259440372400034==" MIME-Version: 1.0 From: Evgheni Dereveanchin (oVirt JIRA) To: infra at ovirt.org Subject: [JIRA] (OVIRT-1692) GetBadges notification broken Date: Thu, 12 Oct 2017 11:08:32 +0000 Message-ID: In-Reply-To: JIRA.33218.1507806511000@Atlassian.JIRA --===============7635259440372400034== Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: quoted-printable This is a multi-part message in MIME format... ------------=3D_1507806512-18874-365 Content-Type: text/plain; charset=3DUTF-8 Content-Transfer-Encoding: 7bit Evgheni Dereveanchin created OVIRT-1692: ------------------------------------------- Summary: GetBadges notification broken Key: OVIRT-1692 URL: https://ovirt-jira.atlassian.net/browse/OVIRT-1692 Project: oVirt - virtualization made easy Issue Type: Bug Components: oVirt CI Reporter: Evgheni Dereveanchin Assignee: infra Priority: High getbadges.io changed their certificate yesterday. This is causing webhook t= o fail as Java does not trust this cert: 10:14:15 Failed to notify endpoint with url 'https://ovirt-ovirt-engine.get= badges.io/api/app/webhook/66f43bb2-6b98-4aab-8d1a-7acca6704dab' - javax.net= .ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX= path building failed: sun.security.provider.certpath.SunCertPathBuilderExc= eption: unable to find valid certification path to requested target Jenkins was updated yesterday as well so Java is the latest version. We may= need to disable this webhook in order not to confuse users with irrelevant= stack traces Sample jobs: http://jenkins.ovirt.org/job/jenkins_master_check-patch-el7-x86_64/2798/con= sole http://jenkins.ovirt.org/job/jenkins_master_check-patch-fcraw-x86_64/12/con= sole Both of them failed for other reasons, but the stack trace at the end is mi= sleading and confusing. More info on the certificate: Issued To Common Name (CN) *.getbadges.io Organizational Unit (OU) Domain Control Validated Issued By Common Name (CN) AlphaSSL CA - SHA256 - G2 Organization (O) GlobalSign nv-sa Organizational Unit (OU) Validity Period Issued On Wednesday, October 11, 2017 at 2:31:02 PM Expires On Friday, October 12, 2018 at 2:31:02 PM Fingerprints SHA-256 Fingerprint C4 06 EB 35 C4 CF CB FB 6E 0B CF 2D E3 39 5E E8 94 03 2= F 7C 5D E6 8A B6 F7 EE C6 1E 05 89 C8 7D SHA-1 Fingerprint DF 87 99 7E 0A E7 98 21 D4 13 9A 49 BE 86 1C 87 6B A0 BA = 5B -- This message was sent by Atlassian Jira (v1001.0.0-SNAPSHOT#100065) ------------=3D_1507806512-18874-365 Content-Type: text/html; charset=3D"UTF-8" Content-Disposition: inline Content-Transfer-Encoding: 7bit

Evgheni Dereveanchin created OVIRT-1692:

   Summary: GetBadges notification broken
       Key: OVIRT-1692
       URL: https://ovirt-jira.atlassian.net/browse/OVIRT-1692
   Project: oVirt - virtualization made easy
Issue Type: Bug
Components: oVirt CI
  Reporter: Evgheni Dereveanchin
  Assignee: infra
  Priority: High

getbadges.io changed their certificate yesterday. This is causing webhoo= k to fail as Java does not trust this cert:

10:14:15 Failed to notify endpoint with url 'https://ovirt-ovirt-engine.getbadges.io/api/app/webhook/66f43bb2-6b98-4a= ab-8d1a-7acca6704dab' – javax.net.ssl.SSLHandshakeException: sun.= security.validator.ValidatorException: PKIX path building failed: sun.secur= ity.provider.certpath.SunCertPathBuilderException: unable to find valid cer= tification path to requested target

Jenkins was updated yesterday as well so Java is the latest version. We = may need to disable this webhook in order not to confuse users with irrelev= ant stack traces

Sample jobs: http://jenkins.ovirt.org/job/jenkins_maste= r_check-patch-el7-x86_64/2798/console http://jenkins.o= virt.org/job/jenkins_master_check-patch-fcraw-x86_64/12/console Both of= them failed for other reasons, but the stack trace at the end is misleadin= g and confusing.

More info on the certificate: Issued To Common Name (CN) *.getbadges.io = Organizational Unit (OU) Domain Control Validated

Issued By Common Name (CN) AlphaSSL CA – SHA256 – G2 Organiz= ation (O) GlobalSign nv-sa Organizational Unit (OU) <Not Part Of Certifi= cate>

Validity Period Issued On Wednesday, October 11, 2017 at 2:31:02 PM Expi= res On Friday, October 12, 2018 at 2:31:02 PM

Fingerprints SHA-256 Fingerprint C4 06 EB 35 C4 CF CB FB 6E 0B CF 2D E3 = 39 5E E8 94 03 2F 7C 5D E6 8A B6 F7 EE C6 1E 05 89 C8 7D SHA-1 Fingerprint = DF 87 99 7E 0A E7 98 21 D4 13 9A 49 BE 86 1C 87 6B A0 BA 5B

— This message was sent by Atlassian Jira (v1001.0.0-SNAPSHOT#1000= 65)

3D"" ------------=3D_1507806512-18874-365-- --===============7635259440372400034== Content-Type: multipart/alternative MIME-Version: 1.0 Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="attachment.bin" VGhpcyBpcyBhIG11bHRpLXBhcnQgbWVzc2FnZSBpbiBNSU1FIGZvcm1hdC4uLgoKLS0tLS0tLS0t LS0tPV8xNTA3ODA2NTEyLTE4ODc0LTM2NQpDb250ZW50LVR5cGU6IHRleHQvcGxhaW47IGNoYXJz ZXQ9VVRGLTgKQ29udGVudC1UcmFuc2Zlci1FbmNvZGluZzogN2JpdAoKRXZnaGVuaSBEZXJldmVh bmNoaW4gY3JlYXRlZCBPVklSVC0xNjkyOgotLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tCgogICAgICAgICAgICAgU3VtbWFyeTogR2V0QmFkZ2VzIG5vdGlmaWNhdGlv biBicm9rZW4KICAgICAgICAgICAgICAgICBLZXk6IE9WSVJULTE2OTIKICAgICAgICAgICAgICAg ICBVUkw6IGh0dHBzOi8vb3ZpcnQtamlyYS5hdGxhc3NpYW4ubmV0L2Jyb3dzZS9PVklSVC0xNjky CiAgICAgICAgICAgICBQcm9qZWN0OiBvVmlydCAtIHZpcnR1YWxpemF0aW9uIG1hZGUgZWFzeQog ICAgICAgICAgSXNzdWUgVHlwZTogQnVnCiAgICAgICAgICBDb21wb25lbnRzOiBvVmlydCBDSQog ICAgICAgICAgICBSZXBvcnRlcjogRXZnaGVuaSBEZXJldmVhbmNoaW4KICAgICAgICAgICAgQXNz aWduZWU6IGluZnJhCiAgICAgICAgICAgIFByaW9yaXR5OiBIaWdoCgoKZ2V0YmFkZ2VzLmlvIGNo YW5nZWQgdGhlaXIgY2VydGlmaWNhdGUgeWVzdGVyZGF5LiBUaGlzIGlzIGNhdXNpbmcgd2ViaG9v ayB0byBmYWlsIGFzIEphdmEgZG9lcyBub3QgdHJ1c3QgdGhpcyBjZXJ0OgoKMTA6MTQ6MTUgRmFp bGVkIHRvIG5vdGlmeSBlbmRwb2ludCB3aXRoIHVybCAnaHR0cHM6Ly9vdmlydC1vdmlydC1lbmdp bmUuZ2V0YmFkZ2VzLmlvL2FwaS9hcHAvd2ViaG9vay82NmY0M2JiMi02Yjk4LTRhYWItOGQxYS03 YWNjYTY3MDRkYWInIC0gamF2YXgubmV0LnNzbC5TU0xIYW5kc2hha2VFeGNlcHRpb246IHN1bi5z ZWN1cml0eS52YWxpZGF0b3IuVmFsaWRhdG9yRXhjZXB0aW9uOiBQS0lYIHBhdGggYnVpbGRpbmcg ZmFpbGVkOiBzdW4uc2VjdXJpdHkucHJvdmlkZXIuY2VydHBhdGguU3VuQ2VydFBhdGhCdWlsZGVy RXhjZXB0aW9uOiB1bmFibGUgdG8gZmluZCB2YWxpZCBjZXJ0aWZpY2F0aW9uIHBhdGggdG8gcmVx dWVzdGVkIHRhcmdldAoKSmVua2lucyB3YXMgdXBkYXRlZCB5ZXN0ZXJkYXkgYXMgd2VsbCBzbyBK YXZhIGlzIHRoZSBsYXRlc3QgdmVyc2lvbi4gV2UgbWF5IG5lZWQgdG8gZGlzYWJsZSB0aGlzIHdl Ymhvb2sgaW4gb3JkZXIgbm90IHRvIGNvbmZ1c2UgdXNlcnMgd2l0aCBpcnJlbGV2YW50IHN0YWNr IHRyYWNlcwoKU2FtcGxlIGpvYnM6Cmh0dHA6Ly9qZW5raW5zLm92aXJ0Lm9yZy9qb2IvamVua2lu c19tYXN0ZXJfY2hlY2stcGF0Y2gtZWw3LXg4Nl82NC8yNzk4L2NvbnNvbGUKaHR0cDovL2plbmtp bnMub3ZpcnQub3JnL2pvYi9qZW5raW5zX21hc3Rlcl9jaGVjay1wYXRjaC1mY3Jhdy14ODZfNjQv MTIvY29uc29sZQpCb3RoIG9mIHRoZW0gZmFpbGVkIGZvciBvdGhlciByZWFzb25zLCBidXQgdGhl IHN0YWNrIHRyYWNlIGF0IHRoZSBlbmQgaXMgbWlzbGVhZGluZyBhbmQgY29uZnVzaW5nLgoKTW9y ZSBpbmZvIG9uIHRoZSBjZXJ0aWZpY2F0ZToKSXNzdWVkIFRvCkNvbW1vbiBOYW1lIChDTikJKi5n ZXRiYWRnZXMuaW8KT3JnYW5pemF0aW9uYWwgVW5pdCAoT1UpCURvbWFpbiBDb250cm9sIFZhbGlk YXRlZAoKSXNzdWVkIEJ5CkNvbW1vbiBOYW1lIChDTikJQWxwaGFTU0wgQ0EgLSBTSEEyNTYgLSBH MgpPcmdhbml6YXRpb24gKE8pCUdsb2JhbFNpZ24gbnYtc2EKT3JnYW5pemF0aW9uYWwgVW5pdCAo T1UpCTxOb3QgUGFydCBPZiBDZXJ0aWZpY2F0ZT4KClZhbGlkaXR5IFBlcmlvZApJc3N1ZWQgT24J V2VkbmVzZGF5LCBPY3RvYmVyIDExLCAyMDE3IGF0IDI6MzE6MDIgUE0KRXhwaXJlcyBPbglGcmlk YXksIE9jdG9iZXIgMTIsIDIwMTggYXQgMjozMTowMiBQTQoKRmluZ2VycHJpbnRzClNIQS0yNTYg RmluZ2VycHJpbnQJQzQgMDYgRUIgMzUgQzQgQ0YgQ0IgRkIgNkUgMEIgQ0YgMkQgRTMgMzkgNUUg RTggOTQgMDMgMkYgN0MgNUQgRTYgOEEgQjYgRjcgRUUgQzYgMUUgMDUgODkgQzggN0QKU0hBLTEg RmluZ2VycHJpbnQJREYgODcgOTkgN0UgMEEgRTcgOTggMjEgRDQgMTMgOUEgNDkgQkUgODYgMUMg ODcgNkIgQTAgQkEgNUIKCgoKLS0KVGhpcyBtZXNzYWdlIHdhcyBzZW50IGJ5IEF0bGFzc2lhbiBK aXJhCih2MTAwMS4wLjAtU05BUFNIT1QjMTAwMDY1KQoKLS0tLS0tLS0tLS0tPV8xNTA3ODA2NTEy LTE4ODc0LTM2NQpDb250ZW50LVR5cGU6IHRleHQvaHRtbDsgY2hhcnNldD0iVVRGLTgiCkNvbnRl bnQtRGlzcG9zaXRpb246IGlubGluZQpDb250ZW50LVRyYW5zZmVyLUVuY29kaW5nOiA3Yml0Cgo8 aHRtbD48Ym9keT4KPGgzPkV2Z2hlbmkgRGVyZXZlYW5jaGluIGNyZWF0ZWQgT1ZJUlQtMTY5Mjo8 L2gzPgo8cHJlPiAgIFN1bW1hcnk6IEdldEJhZGdlcyBub3RpZmljYXRpb24gYnJva2VuCiAgICAg ICBLZXk6IE9WSVJULTE2OTIKICAgICAgIFVSTDogaHR0cHM6Ly9vdmlydC1qaXJhLmF0bGFzc2lh bi5uZXQvYnJvd3NlL09WSVJULTE2OTIKICAgUHJvamVjdDogb1ZpcnQgLSB2aXJ0dWFsaXphdGlv biBtYWRlIGVhc3kKSXNzdWUgVHlwZTogQnVnCkNvbXBvbmVudHM6IG9WaXJ0IENJCiAgUmVwb3J0 ZXI6IEV2Z2hlbmkgRGVyZXZlYW5jaGluCiAgQXNzaWduZWU6IGluZnJhCiAgUHJpb3JpdHk6IEhp Z2g8L3ByZT4KPHA+Z2V0YmFkZ2VzLmlvIGNoYW5nZWQgdGhlaXIgY2VydGlmaWNhdGUgeWVzdGVy ZGF5LiBUaGlzIGlzIGNhdXNpbmcgd2ViaG9vayB0byBmYWlsIGFzIEphdmEgZG9lcyBub3QgdHJ1 c3QgdGhpcyBjZXJ0OjwvcD4KPHA+MTA6MTQ6MTUgRmFpbGVkIHRvIG5vdGlmeSBlbmRwb2ludCB3 aXRoIHVybCAnPGEgaHJlZj0iaHR0cHM6Ly9vdmlydC1vdmlydC1lbmdpbmUuZ2V0YmFkZ2VzLmlv L2FwaS9hcHAvd2ViaG9vay82NmY0M2JiMi02Yjk4LTRhYWItOGQxYS03YWNjYTY3MDRkYWIiPmh0 dHBzOi8vb3ZpcnQtb3ZpcnQtZW5naW5lLmdldGJhZGdlcy5pby9hcGkvYXBwL3dlYmhvb2svNjZm NDNiYjItNmI5OC00YWFiLThkMWEtN2FjY2E2NzA0ZGFiPC9hPicgJm5kYXNoOyBqYXZheC5uZXQu c3NsLlNTTEhhbmRzaGFrZUV4Y2VwdGlvbjogc3VuLnNlY3VyaXR5LnZhbGlkYXRvci5WYWxpZGF0 b3JFeGNlcHRpb246IFBLSVggcGF0aCBidWlsZGluZyBmYWlsZWQ6IHN1bi5zZWN1cml0eS5wcm92 aWRlci5jZXJ0cGF0aC5TdW5DZXJ0UGF0aEJ1aWxkZXJFeGNlcHRpb246IHVuYWJsZSB0byBmaW5k IHZhbGlkIGNlcnRpZmljYXRpb24gcGF0aCB0byByZXF1ZXN0ZWQgdGFyZ2V0PC9wPgo8cD5KZW5r aW5zIHdhcyB1cGRhdGVkIHllc3RlcmRheSBhcyB3ZWxsIHNvIEphdmEgaXMgdGhlIGxhdGVzdCB2 ZXJzaW9uLiBXZSBtYXkgbmVlZCB0byBkaXNhYmxlIHRoaXMgd2ViaG9vayBpbiBvcmRlciBub3Qg dG8gY29uZnVzZSB1c2VycyB3aXRoIGlycmVsZXZhbnQgc3RhY2sgdHJhY2VzPC9wPgo8cD5TYW1w bGUgam9iczogPGEgaHJlZj0iaHR0cDovL2plbmtpbnMub3ZpcnQub3JnL2pvYi9qZW5raW5zX21h c3Rlcl9jaGVjay1wYXRjaC1lbDcteDg2XzY0LzI3OTgvY29uc29sZSI+aHR0cDovL2plbmtpbnMu b3ZpcnQub3JnL2pvYi9qZW5raW5zX21hc3Rlcl9jaGVjay1wYXRjaC1lbDcteDg2XzY0LzI3OTgv Y29uc29sZTwvYT4gPGEgaHJlZj0iaHR0cDovL2plbmtpbnMub3ZpcnQub3JnL2pvYi9qZW5raW5z X21hc3Rlcl9jaGVjay1wYXRjaC1mY3Jhdy14ODZfNjQvMTIvY29uc29sZSI+aHR0cDovL2plbmtp bnMub3ZpcnQub3JnL2pvYi9qZW5raW5zX21hc3Rlcl9jaGVjay1wYXRjaC1mY3Jhdy14ODZfNjQv MTIvY29uc29sZTwvYT4gQm90aCBvZiB0aGVtIGZhaWxlZCBmb3Igb3RoZXIgcmVhc29ucywgYnV0 IHRoZSBzdGFjayB0cmFjZSBhdCB0aGUgZW5kIGlzIG1pc2xlYWRpbmcgYW5kIGNvbmZ1c2luZy48 L3A+CjxwPk1vcmUgaW5mbyBvbiB0aGUgY2VydGlmaWNhdGU6IElzc3VlZCBUbyBDb21tb24gTmFt ZSAoQ04pCSouZ2V0YmFkZ2VzLmlvIE9yZ2FuaXphdGlvbmFsIFVuaXQgKE9VKQlEb21haW4gQ29u dHJvbCBWYWxpZGF0ZWQ8L3A+CjxwPklzc3VlZCBCeSBDb21tb24gTmFtZSAoQ04pCUFscGhhU1NM IENBICZuZGFzaDsgU0hBMjU2ICZuZGFzaDsgRzIgT3JnYW5pemF0aW9uIChPKQlHbG9iYWxTaWdu IG52LXNhIE9yZ2FuaXphdGlvbmFsIFVuaXQgKE9VKQkmbHQ7Tm90IFBhcnQgT2YgQ2VydGlmaWNh dGUmZ3Q7PC9wPgo8cD5WYWxpZGl0eSBQZXJpb2QgSXNzdWVkIE9uCVdlZG5lc2RheSwgT2N0b2Jl ciAxMSwgMjAxNyBhdCAyOjMxOjAyIFBNIEV4cGlyZXMgT24JRnJpZGF5LCBPY3RvYmVyIDEyLCAy MDE4IGF0IDI6MzE6MDIgUE08L3A+CjxwPkZpbmdlcnByaW50cyBTSEEtMjU2IEZpbmdlcnByaW50 CUM0IDA2IEVCIDM1IEM0IENGIENCIEZCIDZFIDBCIENGIDJEIEUzIDM5IDVFIEU4IDk0IDAzIDJG IDdDIDVEIEU2IDhBIEI2IEY3IEVFIEM2IDFFIDA1IDg5IEM4IDdEIFNIQS0xIEZpbmdlcnByaW50 CURGIDg3IDk5IDdFIDBBIEU3IDk4IDIxIEQ0IDEzIDlBIDQ5IEJFIDg2IDFDIDg3IDZCIEEwIEJB IDVCPC9wPgo8cD4mbWRhc2g7IFRoaXMgbWVzc2FnZSB3YXMgc2VudCBieSBBdGxhc3NpYW4gSmly YSAodjEwMDEuMC4wLVNOQVBTSE9UIzEwMDA2NSk8L3A+Cgo8aW1nIHNyYz0iaHR0cHM6Ly91NDA0 MzQwMi5jdC5zZW5kZ3JpZC5uZXQvd2Yvb3Blbj91cG49aTVUTVdHVjk5YW1KYk54SnBTcDItMkJD bXBZTHl6WVMzcjFROTM5VDJzZ3owUmpMVWFZU2I1LTJGeXMtMkY1MldxUHM4VjFubzkzVlNyblN6 RmRhc2ZDWURaQ0N0Q2I5M01sTEctMkJxeHVzVU1yZ1R1TDRSRFZYc05nOWhjLTJCSU9lMFNxRHBQ NXhMNktiYmxUbGZ3TmlaeW5SRlpKcXk2Vm0xMzItMkJEazNtYS0yQnBDeno2eGQycGtBVFR0ODNS NG43UVd3eWJ5UHMtMkY4Ui0yQnFxQ05mcUFJT2dvZFdTLTJGUXhkLTJCNXZHWnJWSkE3S3NLMlRa OXlEWk0tM0QiIGFsdD0iIiB3aWR0aD0iMSIgaGVpZ2h0PSIxIiBib3JkZXI9IjAiIHN0eWxlPSJo ZWlnaHQ6MXB4ICFpbXBvcnRhbnQ7d2lkdGg6MXB4ICFpbXBvcnRhbnQ7Ym9yZGVyLXdpZHRoOjAg IWltcG9ydGFudDttYXJnaW4tdG9wOjAgIWltcG9ydGFudDttYXJnaW4tYm90dG9tOjAgIWltcG9y dGFudDttYXJnaW4tcmlnaHQ6MCAhaW1wb3J0YW50O21hcmdpbi1sZWZ0OjAgIWltcG9ydGFudDtw YWRkaW5nLXRvcDowICFpbXBvcnRhbnQ7cGFkZGluZy1ib3R0b206MCAhaW1wb3J0YW50O3BhZGRp bmctcmlnaHQ6MCAhaW1wb3J0YW50O3BhZGRpbmctbGVmdDowICFpbXBvcnRhbnQ7Ii8+CjwvYm9k eT48L2h0bWw+CgotLS0tLS0tLS0tLS09XzE1MDc4MDY1MTItMTg4NzQtMzY1LS0K --===============7635259440372400034==--