8:08 p.m.
This is a multi-part message in MIME format...
------------=_1507806512-18874-365
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 7bit
Evgheni Dereveanchin created OVIRT-1692:
-------------------------------------------
Summary: GetBadges notification broken
Key: OVIRT-1692
URL: https://ovirt-jira.atlassian.net/browse/OVIRT-1692
Project: oVirt - virtualization made easy
Issue Type: Bug
Components: oVirt CI
Reporter: Evgheni Dereveanchin
Assignee: infra
Priority: High
getbadges.io changed their certificate yesterday. This is causing webhook to fail as Java
does not trust this cert:
10:14:15 Failed to notify endpoint with url
'https://ovirt-ovirt-engine.getbadges.io/api/app/webhook/66f43bb2-6b98-4aab-8d1a-7acca6704dab'
- javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX
path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable
to find valid certification path to requested target
Jenkins was updated yesterday as well so Java is the latest version. We may need to
disable this webhook in order not to confuse users with irrelevant stack traces
Sample jobs:
http://jenkins.ovirt.org/job/jenkins_master_check-patch-el7-x86_64/2798/c...
http://jenkins.ovirt.org/job/jenkins_master_check-patch-fcraw-x86_64/12/c...
Both of them failed for other reasons, but the stack trace at the end is misleading and
confusing.
More info on the certificate:
Issued To
Common Name (CN) *.getbadges.io
Organizational Unit (OU) Domain Control Validated
Issued By
Common Name (CN) AlphaSSL CA - SHA256 - G2
Organization (O) GlobalSign nv-sa
Organizational Unit (OU) <Not Part Of Certificate>
Validity Period
Issued On Wednesday, October 11, 2017 at 2:31:02 PM
Expires On Friday, October 12, 2018 at 2:31:02 PM
Fingerprints
SHA-256 Fingerprint C4 06 EB 35 C4 CF CB FB 6E 0B CF 2D E3 39 5E E8 94 03 2F 7C 5D E6 8A
B6 F7 EE C6 1E 05 89 C8 7D
SHA-1 Fingerprint DF 87 99 7E 0A E7 98 21 D4 13 9A 49 BE 86 1C 87 6B A0 BA 5B
--
This message was sent by Atlassian Jira
(v1001.0.0-SNAPSHOT#100065)
------------=_1507806512-18874-365
Content-Type: text/html; charset="UTF-8"
Content-Disposition: inline
Content-Transfer-Encoding: 7bit
<html><body>
<h3>Evgheni Dereveanchin created OVIRT-1692:</h3>
<pre> Summary: GetBadges notification broken
Key: OVIRT-1692
URL: https://ovirt-jira.atlassian.net/browse/OVIRT-1692
Project: oVirt - virtualization made easy
Issue Type: Bug
Components: oVirt CI
Reporter: Evgheni Dereveanchin
Assignee: infra
Priority: High</pre>
<p>getbadges.io changed their certificate yesterday. This is causing webhook to fail
as Java does not trust this cert:</p>
<p>10:14:15 Failed to notify endpoint with url '<a
href="https://ovirt-ovirt-engine.getbadges.io/api/app/webhook/66f43bb2-6b98-4aab-8d1a-7acca6704dab">https://ovirt-ovirt-engine.getbadges.io/api/app/webhook/66f43bb2-6b98-4aab-8d1a-7acca6704dab</a>'
– javax.net.ssl.SSLHandshakeException:
sun.security.validator.ValidatorException: PKIX path building failed:
sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid
certification path to requested target</p>
<p>Jenkins was updated yesterday as well so Java is the latest version. We may need
to disable this webhook in order not to confuse users with irrelevant stack
traces</p>
<p>Sample jobs: <a
href="http://jenkins.ovirt.org/job/jenkins_master_check-patch-el7-x8...
<a
href="http://jenkins.ovirt.org/job/jenkins_master_check-patch-fcraw-...
Both of them failed for other reasons, but the stack trace at the end is misleading and
confusing.</p>
<p>More info on the certificate: Issued To Common Name (CN) *.getbadges.io
Organizational Unit (OU) Domain Control Validated</p>
<p>Issued By Common Name (CN) AlphaSSL CA – SHA256 – G2
Organization (O) GlobalSign nv-sa Organizational Unit (OU) <Not Part Of
Certificate></p>
<p>Validity Period Issued On Wednesday, October 11, 2017 at 2:31:02 PM Expires
On Friday, October 12, 2018 at 2:31:02 PM</p>
<p>Fingerprints SHA-256 Fingerprint C4 06 EB 35 C4 CF CB FB 6E 0B CF 2D E3 39 5E E8
94 03 2F 7C 5D E6 8A B6 F7 EE C6 1E 05 89 C8 7D SHA-1 Fingerprint DF 87 99 7E 0A E7 98 21
D4 13 9A 49 BE 86 1C 87 6B A0 BA 5B</p>
<p>— This message was sent by Atlassian Jira
(v1001.0.0-SNAPSHOT#100065)</p>
<img
src="https://u4043402.ct.sendgrid.net/wf/open?upn=i5TMWGV99amJbNxJpS...
alt="" width="1" height="1" border="0"
style="height:1px !important;width:1px !important;border-width:0
!important;margin-top:0 !important;margin-bottom:0 !important;margin-right:0
!important;margin-left:0 !important;padding-top:0 !important;padding-bottom:0
!important;padding-right:0 !important;padding-left:0 !important;"/>
</body></html>
------------=_1507806512-18874-365--