Jenkins Pipeline fails with "CertificateExpiredException"

Solution Verified - Updated -

Issue

  • When using a BuildConfig with jenkinsPipelineStrategy, running the build fails with the following error message:

    com.openshift.restclient.OpenShiftException: Unable to initialize client
        at com.openshift.restclient.ClientBuilder.build(ClientBuilder.java:250)
        at com.openshift.jenkins.plugins.pipeline.model.IOpenShiftPlugin.getClient(IOpenShiftPlugin.java:164)
        at com.openshift.jenkins.plugins.pipeline.model.IOpenShiftPlugin.getClient(IOpenShiftPlugin.java:150)
        at com.openshift.jenkins.plugins.pipeline.model.IOpenShiftDeployer.coreLogic(IOpenShiftDeployer.java:45)
        at com.openshift.jenkins.plugins.pipeline.model.IOpenShiftPlugin.doItCore(IOpenShiftPlugin.java:359)
        at com.openshift.jenkins.plugins.pipeline.dsl.OpenShiftDeployerExecution.run(OpenShiftDeployerExecution.java:45)
        at com.openshift.jenkins.plugins.pipeline.dsl.OpenShiftDeployerExecution.run(OpenShiftDeployerExecution.java:17)
        at org.jenkinsci.plugins.workflow.steps.AbstractSynchronousNonBlockingStepExecution$1$1.call(AbstractSynchronousNonBlockingStepExecution.java:47)
        at hudson.security.ACL.impersonate(ACL.java:367)
        at org.jenkinsci.plugins.workflow.steps.AbstractSynchronousNonBlockingStepExecution$1.run(AbstractSynchronousNonBlockingStepExecution.java:44)
        at java.base/java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:515)
        at java.base/java.util.concurrent.FutureTask.run(FutureTask.java:264)
        at java.base/java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1128)
        at java.base/java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:628)
        at java.base/java.lang.Thread.run(Thread.java:834)
    Caused by: java.security.cert.CertificateExpiredException: NotAfter: Wed Mar 15 12:40:46 UTC 2021
        at java.base/sun.security.x509.CertificateValidity.valid(CertificateValidity.java:277)
        at java.base/sun.security.x509.X509CertImpl.checkValidity(X509CertImpl.java:675)
        at java.base/sun.security.x509.X509CertImpl.checkValidity(X509CertImpl.java:648)
        at com.openshift.restclient.ClientBuilder.initTrustManagerFactory(ClientBuilder.java:284)
        at com.openshift.restclient.ClientBuilder.build(ClientBuilder.java:199)
        ... 14 more
    
  • Java applications in or outside the OpenShift Container Platform cluster fail with a CertificateExpiredException when trying to communicate with the cluster API.

Environment

  • Red Hat OpenShift Container Platform (OCP) 3.11

Subscriber exclusive content

A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.

Current Customers and Partners

Log in for full access

Log In

New to Red Hat?

Learn more about Red Hat subscriptions

Using a Red Hat product through a public cloud?

How to access this content