Self signed certificate expired

Cloudogu EcoSystem
1

Today Jenkins stopped working as the self signed certificate created during the cloudogu setup expired.

Jenkins shows the following error Message:

Started by user AAA
 > git rev-parse --resolve-git-dir /var/lib/jenkins/caches/git-2da8dc8ed25e955a4d0e464292e31f7e/.git # timeout=10
Setting origin to https://10.189.0.5/scm/repo/XXX/YYY
 > git config remote.origin.url https://10.189.0.5/scm/repo/XXX/YYY # timeout=10
Fetching origin...
Fetching upstream changes from origin
 > git --version # timeout=10
 > git --version # 'git version 2.34.2'
 > git config --get remote.origin.url # timeout=10
using GIT_ASKPASS to set credentials 
 > git fetch --tags --force --progress -- origin +refs/heads/*:refs/remotes/origin/* # timeout=10
hudson.plugins.git.GitException: Command "git fetch --tags --force --progress -- origin +refs/heads/*:refs/remotes/origin/*" returned status code 128:
stdout: 
stderr: fatal: unable to access 'https://10.189.0.5/scm/repo/XXX/YYY/': SSL certificate problem: certificate has expired

	at org.jenkinsci.plugins.gitclient.CliGitAPIImpl.launchCommandIn(CliGitAPIImpl.java:2675)
	at org.jenkinsci.plugins.gitclient.CliGitAPIImpl.launchCommandWithCredentials(CliGitAPIImpl.java:2099)
	at org.jenkinsci.plugins.gitclient.CliGitAPIImpl.access$500(CliGitAPIImpl.java:85)
	at org.jenkinsci.plugins.gitclient.CliGitAPIImpl$1.execute(CliGitAPIImpl.java:619)
	at jenkins.plugins.git.AbstractGitSCMSource.doRetrieve(AbstractGitSCMSource.java:392)
	at jenkins.plugins.git.AbstractGitSCMSource.doRetrieve(AbstractGitSCMSource.java:330)
	at jenkins.plugins.git.AbstractGitSCMSource.retrieve(AbstractGitSCMSource.java:418)
	at jenkins.scm.api.SCMSource.fetch(SCMSource.java:582)
	at org.jenkinsci.plugins.workflow.multibranch.SCMBinder.create(SCMBinder.java:101)
	at org.jenkinsci.plugins.workflow.job.WorkflowRun.run(WorkflowRun.java:311)
	at hudson.model.ResourceController.execute(ResourceController.java:101)
	at hudson.model.Executor.run(Executor.java:442)
Finished: FAILURE

How can i renew the certificate?

2

Hi Martinr,
thanks for your question. To renew your certificate, you can just execute the script /usr/local/bin/ssl_ces.sh. This creates a new self signed certificate and writes it to the etcd.
After that, you must restart all dogus for the change to apply.
Let me know if this solves your issue.

Kind regards, Simon

3

Hi Simon, this resolved my problem, thank you very much!

1 Like