GIT with Jenkins failed with error "self signed certificate in certificate chain"

Question

I am trying to configure GIT with Jenkins( source Code Management section). As soon I enter repository URL , Error pops up and stating:

Failed to connect to repository : Command "C:\Program Files\Git\bin\git.exe ls-remote -h https://xxx.xxxxx.xxxxx.xxxxxx.xxx/stash/scm/project/project.git HEAD" returned status code 128:
stdout: 
stderr: fatal: unable to access 'https://xxx.xxxxx.xxxxx.xxxxxx.xxx/stash/scm/project/project.git/': SSL certificate problem: self signed certificate in certificate chain

Please guide/help how I can I skip this security Check with Jenkins (git plugin) or How self signed certificate can be installed in system to work with Jenkins on windows 7.

Jenkins Version : 2.92
GIt Plugin : version 3.6.4
Git client plugin : 2.6.0

score 2 · Answer 1 · edited Aug 29 '19 at 07:17

Thanks for information, I found the solution. Its a feature of plugin that asks for security check, hence for that

See the steps below.

1)Connect to the website using SSL (https://whatever)

2)go to the Three Dots Menu -> More Tools -> Developer Tools, then click on the Security Tab. This will give you a Security Overview with a View certificate button.

3)Click on the View certificate button -> Details

A modal window will open. It has two panes. The top one shows the trust hierarchy of the site's certificate (the last one listed), the intermediate certificate(s), and the root certificate (the topmost one). The second, larger pane, shows the details of one of the certificates. There may be zero or more intermediate certificates. Note that the root certificate has a gold-bordered icon. The others have a blue border.

To Export:

4)First click on the certificate's icon in the trust hierarchy. The certificate will be shown in the main part of the modal.

5)Click on the root certificate's large icon in the main part of the modal.

6.Select the "Base64 encoded" option and then export to a .cer file on your local file system

7.Now configure Git to use the downloaded .cer file using the Git config command git config --global http.sslCAInfo C:/Users/E074236/certificate.cer

git-client pluguin from jenkins may ask for credentials.

Nice feedback, more complete than my answer. +1 – VonC Dec 01 '17 at 12:26 — VonC, Dec 01 '17 at 12:26

score 0 · Answer 2 · answered Dec 01 '17 at 06:01

0

If this is working with your own account (before trying to setup Jenkins), check your git config -l.
Look for value like:

http.sslCAInfo (to specify the CA or the self-signed certificate)
http.sslVerify (to skip the check entirely)

And double-check with which account your Jenkins is running: System account or user account.

answered Dec 01 '17 at 06:01

VonC

1,262,500
529
4,410
5,250

http.sslcainfo=C:/Program Files/Git/mingw64/ssl/certs/ca-bundle.crt – Vikas Kumar Choudhary Dec 01 '17 at 08:33
Its working with local git account and jenkins is running with user account http.sslcainfo=C:/Program Files/Git/mingw64/ssl/certs/ca-bundle.crt http.sslverify=false , – Vikas Kumar Choudhary Dec 01 '17 at 08:39
@VikasKumarChoudhary Double-check that with a dummy job including one step: git config -l – VonC Dec 01 '17 at 08:40
If I made http.SSlVerify false then same problem occurs with my local git account as well. – Vikas Kumar Choudhary Dec 01 '17 at 08:46
@VikasKumarChoudhary Any change you can (for testing) uimport that certificate into the JDK used by Jenkins? (as in https://stackoverflow.com/a/4777186/6309) – VonC Dec 01 '17 at 09:03

GIT with Jenkins failed with error "self signed certificate in certificate chain"

2 Answers2