Master is not able to connect Operations Center due to java.lang.SecurityException: Rejected: java.security.cert.Certificate

Issue

  • Master is not able to connect to the CloudBees Jenkins Operation Center
  • Logs show the following exception
2018-06-08 18:46:58.001+0000 [id=58]    SEVERE  c.c.o.c.p.OperationsCenterRootAction$DescriptorImpl#setAgentErrorStateCallback: Agent Connection Error: DescriptorImpl{state=CONNECTABLE, error=java.lang.SecurityException: Rejected: java.security.cert.Certificate$CertificateRep; see https://jenkins.io/redirect/class-filter/, transportEndpoint=cjp.test.example.com/XX.XXX.X.X:10000, operationsCenterUrl=https://cjp.test.example.com/, name='0-Test_Master', grantId='aa03db4b-4d66-410f-a95d-8de6f71e4be1', agentThread=Thread[Operations Center Connector #1,5,main], channel=null, slaveManager=null}
java.lang.SecurityException: Rejected: java.security.cert.Certificate$CertificateRep; see https://jenkins.io/redirect/class-filter/
    at hudson.remoting.ClassFilter.check(ClassFilter.java:76)
    at hudson.remoting.ObjectInputStreamEx.resolveClass(ObjectInputStreamEx.java:57)
    at java.io.ObjectInputStream.readNonProxyDesc(ObjectInputStream.java:1866)
    at java.io.ObjectInputStream.readClassDesc(ObjectInputStream.java:1749)

Environment

Resolution

The probable root cause is that Master is trying to use Multimaster protocol to connect Operations Center. That protocol is not recommended anymore, so switching to OperationsCenter2 protocol is the solution.

Go to Manage Jenkins > Configure Global Security, and under Agents, click on the Agent Protocols... button and ensure that OperationsCenter2 is checked and Multimaster not.

You need to apply this configuration change in Operations Centers and Master side and try to reconnect again the Master to the Operations Centers.

If after that you are not still able to connect the Master, ensure that the connectivity is done from the scratch, so follow below steps

  1. In Master, go to Manage Jenkins > Configure System and verify if Operations Center Connector section exists. If exists, then uncheck the Enable option and save the changes.
  2. In CJOC, delete the Master item, create a new one and push the new connection details.
Have more questions? Submit a request

0 Comments

Please sign in to leave a comment.