# Failed to install plugins in jenkins

**URL:** <https://community.jenkins.io/t/failed-to-install-plugins-in-jenkins/12412>\
**Category:** Using Jenkins\
**Tags:** question\
**Created:** [February 12, 2024, 10:36am UTC](https://community.jenkins.io/t/failed-to-install-plugins-in-jenkins/12412 "2024-02-12T10:36:31Z")\
**Posts on this page:** 7\
**Page:** 1

<div class="post-metadata">

**Author:** ![Zaoyune](https://dub1.discourse-cdn.com/flex013/user_avatar/community.jenkins.io/zaoyune/32/7013_2.png) [@Zaoyune](https://community.jenkins.io/u/Zaoyune)\
**Post date:** [February 12, 2024, 10:36am UTC](https://community.jenkins.io/t/failed-to-install-plugins-in-jenkins/12412/1 "2024-02-12T10:36:31Z")

</div>

Hi everyone!

I installed the latest Jenkins version and i can not install any plugins, it fails everytime.  
Error logs :

```auto
Caused: java.io.IOException: Failed to load https://updates.jenkins.io/download/plugins/bouncycastle-api/2.30.1.77-225.v26ea_c9455fd9/bouncycastle-api.hpi to C:\Users\hassan.benharouga\.jenkins\plugins\bouncycastle-api.jpi.tmp
        at hudson.model.UpdateCenter$UpdateCenterConfiguration.download(UpdateCenter.java:1334)
Caused: java.io.IOException: Failed to download from https://updates.jenkins.io/download/plugins/bouncycastle-api/2.30.1.77-225.v26ea_c9455fd9/bouncycastle-api.hpi (redirected to: https://ftp.belnet.be/mirror/jenkins/plugins/bouncycastle-api/2.30.1.77-225.v26ea_c9455fd9/bouncycastle-api.hpi)
        at hudson.model.UpdateCenter$UpdateCenterConfiguration.download(UpdateCenter.java:1368)
        at hudson.model.UpdateCenter$DownloadJob._run(UpdateCenter.java:1925)
        at hudson.model.UpdateCenter$InstallationJob._run(UpdateCenter.java:2237)
        at hudson.model.UpdateCenter$DownloadJob.run(UpdateCenter.java:1899)
        at java.base/java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:539)
        at java.base/java.util.concurrent.FutureTask.run(FutureTask.java:264)
        at hudson.remoting.AtmostOneThreadExecutor$Worker.run(AtmostOneThreadExecutor.java:121)
        at java.base/java.lang.Thread.run(Thread.java:842)

```

 ![image](https://europe1.discourse-cdn.com/flex013/uploads/jenkins/original/2X/0/0332c791afbccceedd4cad9ecc133c6a0ebb94f7.png)

---

<div class="post-metadata">

**Author:** ![MarkEWaite](https://dub1.discourse-cdn.com/flex013/user_avatar/community.jenkins.io/markewaite/32/20_2.png) [@MarkEWaite](https://community.jenkins.io/u/MarkEWaite)\
**Post date:** [February 12, 2024, 12:42pm UTC](https://community.jenkins.io/t/failed-to-install-plugins-in-jenkins/12412/2 "2024-02-12T12:42:00Z")

</div>

The administrators at [https://ftp.belnet.be](https://ftp.belnet.be) have seen cases of repeated and non-stop downloads of the same set of files. That type of misuse is a waste of the bandwidth that they donate to the Jenkins project and to other open source projects. They’ve implemented a fail2ban rule that blocks IP addresses after a certain (large) number of repeated downloads within a time period.

I suspect that your IP address has been added to their deny list by fail2ban. You’ll need to identify why your IP address is repeatedly downloading the same files many times within a short period of time. Once you’ve identified the reason for repeated downloads of the same files within a short period of time, you’ll need to open an issue with the [Jenkins help desk](https://github.com/jenkins-infra/helpdesk/issues/new/choose) to ask for the help of the belnet administrators.

---

<div class="post-metadata">

**Author:** ![Zaoyune](https://dub1.discourse-cdn.com/flex013/user_avatar/community.jenkins.io/zaoyune/32/7013_2.png) [@Zaoyune](https://community.jenkins.io/u/Zaoyune)\
**Post date:** [February 15, 2024, 11:22am UTC](https://community.jenkins.io/t/failed-to-install-plugins-in-jenkins/12412/3 "2024-02-15T11:22:27Z")

</div>

```auto
sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
	at java.base/sun.security.provider.certpath.SunCertPathBuilder.build(SunCertPathBuilder.java:148)
	at java.base/sun.security.provider.certpath.SunCertPathBuilder.engineBuild(SunCertPathBuilder.java:129)
	at java.base/java.security.cert.CertPathBuilder.build(CertPathBuilder.java:297)
	at java.base/sun.security.validator.PKIXValidator.doBuild(PKIXValidator.java:434)
Caused: sun.security.validator.ValidatorException: PKIX path building failed
	at java.base/sun.security.validator.PKIXValidator.doBuild(PKIXValidator.java:439)
	at java.base/sun.security.validator.PKIXValidator.engineValidate(PKIXValidator.java:306)
	at java.base/sun.security.validator.Validator.validate(Validator.java:264)
	at java.base/sun.security.ssl.X509TrustManagerImpl.checkTrusted(X509TrustManagerImpl.java:231)
	at java.base/sun.security.ssl.X509TrustManagerImpl.checkServerTrusted(X509TrustManagerImpl.java:132)
	at java.base/sun.security.ssl.CertificateMessage$T13CertificateConsumer.checkServerCerts(CertificateMessage.java:1335)
Caused: javax.net.ssl.SSLHandshakeException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
	at java.base/sun.security.ssl.Alert.createSSLException(Alert.java:131)
	at java.base/sun.security.ssl.TransportContext.fatal(TransportContext.java:378)
	at java.base/sun.security.ssl.TransportContext.fatal(TransportContext.java:321)
	at java.base/sun.security.ssl.TransportContext.fatal(TransportContext.java:316)
	at java.base/sun.security.ssl.CertificateMessage$T13CertificateConsumer.checkServerCerts(CertificateMessage.java:1351)
	at java.base/sun.security.ssl.CertificateMessage$T13CertificateConsumer.onConsumeCertificate(CertificateMessage.java:1226)
	at java.base/sun.security.ssl.CertificateMessage$T13CertificateConsumer.consume(CertificateMessage.java:1169)
	at java.base/sun.security.ssl.SSLHandshake.consume(SSLHandshake.java:396)
	at java.base/sun.security.ssl.HandshakeContext.dispatch(HandshakeContext.java:480)
	at java.base/sun.security.ssl.HandshakeContext.dispatch(HandshakeContext.java:458)
	at java.base/sun.security.ssl.TransportContext.dispatch(TransportContext.java:201)
	at java.base/sun.security.ssl.SSLTransport.decode(SSLTransport.java:172)
	at java.base/sun.security.ssl.SSLSocketImpl.decode(SSLSocketImpl.java:1506)
	at java.base/sun.security.ssl.SSLSocketImpl.readHandshakeRecord(SSLSocketImpl.java:1421)
	at java.base/sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:455)
	at java.base/sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:426)
	at java.base/sun.net.www.protocol.https.HttpsClient.afterConnect(HttpsClient.java:589)
	at 

```

The problem is linked to SSL certification, i tried to add the certification of [https://updates.jenkins.io/current/update-center.json](https://updates.jenkins.io/current/update-center.json) in my java cacerts, but it’s still not working im kinda lost, by the way im not using a proxy.

---

<div class="post-metadata">

**Author:** ![MarkEWaite](https://dub1.discourse-cdn.com/flex013/user_avatar/community.jenkins.io/markewaite/32/20_2.png) [@MarkEWaite](https://community.jenkins.io/u/MarkEWaite)\
**Post date:** [February 15, 2024, 1:01pm UTC](https://community.jenkins.io/t/failed-to-install-plugins-in-jenkins/12412/4 "2024-02-15T13:01:11Z")

</div>

> [@Zaoyune](#):
>
> `sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target`

We’ve seen that message when users had an invasive network device between their computer and [updates.jenkins.io](http://updates.jenkins.io) . For example, something that intercepts all network traffic in order to inspect it. You might check for that.

We’ve seen that message when users were running a very, very old Java version (as far as I recall, older than any Java version currently supported by the Jenkins project). If you’re not running the current release of Java 21 (21.0.2), Java 17 (17.0.10), or Java 11 (11.0.22) then you should update to a current version of Java. If you’re running a Java version older than Java 11, then you should update to a currently supported version of Java.

---

<div class="post-metadata">

**Author:** ![akku1227](https://dub1.discourse-cdn.com/flex013/user_avatar/community.jenkins.io/akku1227/32/8287_2.png) [@akku1227](https://community.jenkins.io/u/akku1227)\
**Post date:** [May 18, 2024, 2:42pm UTC](https://community.jenkins.io/t/failed-to-install-plugins-in-jenkins/12412/5 "2024-05-18T14:42:56Z")

</div>

![image](https://europe1.discourse-cdn.com/flex013/uploads/jenkins/original/2X/d/d9da34ba660aede3110b509cb4a8a62cd752bf20.png)  
I installed latest version on java 21 but it still showing error

---

<div class="post-metadata">

**Author:** ![mawinter69](https://dub1.discourse-cdn.com/flex013/user_avatar/community.jenkins.io/mawinter69/32/1625_2.png) [@mawinter69](https://community.jenkins.io/u/mawinter69)\
**Post date:** [May 18, 2024, 2:55pm UTC](https://community.jenkins.io/t/failed-to-install-plugins-in-jenkins/12412/6 "2024-05-18T14:55:24Z")

</div>

When Jenkins downloads plugins it redirects you to the nearest mirror. And this mirror seems to be not accessible from your Jenkins as you run into a timeout.

---

<div class="post-metadata">

**Author:** ![poddingue](https://dub1.discourse-cdn.com/flex013/user_avatar/community.jenkins.io/poddingue/32/985_2.png) [@poddingue](https://community.jenkins.io/u/poddingue)\
**Post date:** [May 20, 2024, 11:57am UTC](https://community.jenkins.io/t/failed-to-install-plugins-in-jenkins/12412/7 "2024-05-20T11:57:50Z")

</div>

Is there a proxy between you an the belnet mirror?
