"unable to find valid certification path to requested target"

I am using a custom cacert chain jks at $JENKINS_HOM/jre/lib/security/cacerts. I am setting the following two system properties when I start Jenkins:
-DJava.net.ssl.trustStore=$JAVA_HOME/jre/lib/security/cacerts
-DJava.net.ssl.trustStorePassword=[PASSWORD]
(Note: I specify an explicit path for the cacerts in the trustStore system property)

I am able to list the certificates in the bundle using the keytool utility. There is a password on the bundle. I know the issuer for the updates server is in the jks, but at initialization time the Jenkins is unable to access the updates server due to the above error. Am I missing something?

As far as I know, Java properties are case sensitive. I think you want -Djava.net....

1 Like

also $JENKINS_HOME is probably different than $JAVA_HOME