Ubuntu Jenkins OpenJDK the trustAnchors parameter must be non-empty

qq361301276

已于 2024-08-11 09:55:25 修改

阅读量1.4k

点赞数

分类专栏： Java Jenkins CI 文章标签： ubuntu java jenkens

于 2020-05-08 14:37:07 首次发布

本文链接：https://blog.csdn.net/qq361301276/article/details/105995840

版权

Java 同时被 3 个专栏收录

11 篇文章 1 订阅

订阅专栏

Jenkins

2 篇文章 0 订阅

订阅专栏

1 篇文章 0 订阅

订阅专栏

在Ubuntu系统中安装完OpenJDK 11并尝试部署Jenkins时，遇到启动错误提示：the trustAnchors parameter must be non-empty。常规解决方案如StackOverflow上的建议无效。解决此问题的简便方法是下载OpenJDK 11的jar包，提取lib/security/cacerts文件替换/etc/ssl/certs/java/cacerts，参考自askubuntu.com。

摘要由CSDN通过智能技术生成

在Ubuntu机器上用apt 装完OpenJDK 11后，按照Jenkins官方文档按照Jenkins，启动之后出现以下错误：

安装：

# 安装JDK11
add-apt-repository ppa:openjdk-r/ppa
apt install openjdk-11-jdk

#安装Jenkins
wget -q -O - https://pkg.jenkins.io/debian/jenkins.io.key | sudo apt-key add -
sudo sh -c 'echo deb http://pkg.jenkins.io/debian-stable binary/ > /etc/apt/sources.list.d/jenkins.list'
sudo apt-get update
sudo apt-get install jenkins

错误：

2020-05-08 04:31:09.838+0000 [id=48]    INFO    hudson.util.Retrier#start: The attempt #1 to do the action check updates server failed with an allowed exception:
java.security.InvalidAlgorithmParameterException: the trustAnchors parameter must be non-empty
        at java.base/java.security.cert.PKIXParameters.setTrustAnchors(PKIXParameters.java:200)
        at java.base/java.security.cert.PKIXParameters.<init>(PKIXParameters.java:120)
        at java.base/java.security.cert.PKIXBuilderParameters.<init>(PKIXBuilderParameters.java:104)
        at java.base/sun.security.validator.PKIXValidator.<init>(PKIXValidator.java:86)
Caused: java.lang.RuntimeException: Unexpected error
        at java.base/sun.security.validator.PKIXValidator.<init>(PKIXValidator.java:89)
        at java.base/sun.security.validator.Validator.getInstance(Validator.java:181)
        at java.base/sun.security.ssl.X509TrustManagerImpl.getValidator(X509TrustManagerImpl.java:300)
        at java.base/sun.security.ssl.X509TrustManagerImpl.checkTrustedInit(X509TrustManagerImpl.java:176)
        at java.base/sun.security.ssl.X509TrustManagerImpl.checkTrusted(X509TrustManagerImpl.java:189)
        at java.base/sun.security.ssl.X509TrustManagerImpl.checkServerTrusted(X509TrustManagerImpl.java:129)
        at java.base/sun.security.ssl.CertificateMessage$T12CertificateConsumer.checkServerCerts(CertificateMessage.java:625)
        at java.base/sun.security.ssl.CertificateMessage$T12CertificateConsumer.onCertificate(CertificateMessage.java:460)
        at java.base/sun.security.ssl.CertificateMessage$T12CertificateConsumer.consume(CertificateMessage.java:360)
        at java.base/sun.security.ssl.SSLHandshake.consume(SSLHandshake.java:392)
        at java.base/sun.security.ssl.HandshakeContext.dispatch(HandshakeContext.java:443)
        at java.base/sun.security.ssl.HandshakeContext.dispatch(HandshakeContext.java:421)
        at java.base/sun.security.ssl.TransportContext.dispatch(TransportContext.java:177)
        at java.base/sun.security.ssl.SSLTransport.decode(SSLTransport.java:164)
        at java.base/sun.security.ssl.SSLSocketImpl.decode(SSLSocketImpl.java:1152)
        at java.base/sun.security.ssl.SSLSocketImpl.readHandshakeRecord(SSLSocketImpl.java:1063)
        at java.base/sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:402)
Caused: javax.net.ssl.SSLException: Unexpected error: java.security.InvalidAlgorithmParameterException: the trustAnchors parameter must be non-empty
        at java.base/sun.security.ssl.Alert.createSSLException(Alert.java:133)
        at java.base/sun.security.ssl.TransportContext.fatal(TransportContext.java:320)
        at java.base/sun.security.ssl.TransportContext.fatal(TransportContext.java:263)
        at java.base/sun.security.ssl.TransportContext.fatal(TransportContext.java:258)
        at java.base/sun.security.ssl.SSLSocketImpl.handleException(SSLSocketImpl.java:1314)
        at java.base/sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:408)
        at java.base/sun.net.www.protocol.https.HttpsClient.afterConnect(HttpsClient.java:567)
        at java.base/sun.net.www.protocol.https.AbstractDelegateHttpsURLConnection.connect(AbstractDelegateHttpsURLConnection.java:185)
        at java.base/sun.net.www.protocol.http.HttpURLConnection.getInputStream0(HttpURLConnection.java:1587)
        at java.base/sun.net.www.protocol.http.HttpURLConnection.getInputStream(HttpURLConnection.java:1515)
        at java.base/sun.net.www.protocol.https.HttpsURLConnectionImpl.getInputStream(HttpsURLConnectionImpl.java:250)
        at hudson.model.DownloadService.loadJSON(DownloadService.java:114)
        at hudson.model.UpdateSite.updateDirectlyNow(UpdateSite.java:208)
        at hudson.model.UpdateSite.updateDirectlyNow(UpdateSite.java:203)
        at hudson.PluginManager.checkUpdatesServer(PluginManager.java:1765)
        at hudson.util.Retrier.start(Retrier.java:63)
        at hudson.PluginManager.doCheckUpdatesServer(PluginManager.java:1736)
        at jenkins.DailyCheck.execute(DailyCheck.java:93)
        at hudson.model.AsyncPeriodicWork.lambda$doRun$0(Async

解决方法：

网上很多的方法包括Stackoverflow上的高赞回答都无法解决，最简单的方法是从Java Platform, Standard Edition 11 ReferenceImplementations下载OpenJDK 11包，解压其中的lib/security/cacerts 替换 /etc/ssl/certs/java/cacerts 就OK 了。

参考：java - 17.10 openjdk and oracle jdk 8 and 9 the trustAnchors parameter must be non-empty - Ask Ubuntu