A title is not enough information for others to help you. Please provide more details.
“How to report an issue” provides a good overview of the type of information that needs to be provided.
I had included a lot of information which wasn’t included in my original post – apparently because it didn’t format it as preformatted text.
I will try again:
> sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
> at java.base/sun.security.provider.certpath.SunCertPathBuilder.build(SunCertPathBuilder.java:148)
> at java.base/sun.security.provider.certpath.SunCertPathBuilder.engineBuild(SunCertPathBuilder.java:129)
> at java.base/java.security.cert.CertPathBuilder.build(CertPathBuilder.java:297)
> at java.base/sun.security.validator.PKIXValidator.doBuild(PKIXValidator.java:383)
> Caused: sun.security.validator.ValidatorException: PKIX path building failed
> at java.base/sun.security.validator.PKIXValidator.doBuild(PKIXValidator.java:388)
> at java.base/sun.security.validator.PKIXValidator.engineValidate(PKIXValidator.java:271)
> at java.base/sun.security.validator.Validator.validate(Validator.java:256)
> at java.base/sun.security.ssl.X509TrustManagerImpl.checkTrusted(X509TrustManagerImpl.java:230)
> at java.base/sun.security.ssl.X509TrustManagerImpl.checkServerTrusted(X509TrustManagerImpl.java:132)
> at java.base/sun.security.ssl.CertificateMessage$T12CertificateConsumer.checkServerCerts(CertificateMessage.java:631)
> Caused: javax.net.ssl.SSLHandshakeException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
> at java.base/sun.security.ssl.Alert.createSSLException(Alert.java:130)
> at java.base/sun.security.ssl.TransportContext.fatal(TransportContext.java:383)
> at java.base/sun.security.ssl.TransportContext.fatal(TransportContext.java:326)
> at java.base/sun.security.ssl.TransportContext.fatal(TransportContext.java:321)
> at java.base/sun.security.ssl.CertificateMessage$T12CertificateConsumer.checkServerCerts(CertificateMessage.java:647)
> at java.base/sun.security.ssl.CertificateMessage$T12CertificateConsumer.onCertificate(CertificateMessage.java:467)
> at java.base/sun.security.ssl.CertificateMessage$T12CertificateConsumer.consume(CertificateMessage.java:363)
> at java.base/sun.security.ssl.SSLHandshake.consume(SSLHandshake.java:393)
> at java.base/sun.security.ssl.HandshakeContext.dispatch(HandshakeContext.java:476)
> at java.base/sun.security.ssl.HandshakeContext.dispatch(HandshakeContext.java:447)
> at java.base/sun.security.ssl.TransportContext.dispatch(TransportContext.java:206)
> at java.base/sun.security.ssl.SSLTransport.decode(SSLTransport.java:172)
> at java.base/sun.security.ssl.SSLSocketImpl.decode(SSLSocketImpl.java:1506)
> at java.base/sun.security.ssl.SSLSocketImpl.readHandshakeRecord(SSLSocketImpl.java:1421)
> at java.base/sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:455)
> at java.base/sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:426)
> at java.base/sun.net.www.protocol.https.HttpsClient.afterConnect(HttpsClient.java:586)
> at java.base/sun.net.www.protocol.https.AbstractDelegateHttpsURLConnection.connect(AbstractDelegateHttpsURLConnection.java:187)
> at java.base/sun.net.www.protocol.http.HttpURLConnection.followRedirect0(HttpURLConnection.java:2924)
> at java.base/sun.net.www.protocol.http.HttpURLConnection.followRedirect(HttpURLConnection.java:2833)
> at java.base/sun.net.www.protocol.http.HttpURLConnection.getInputStream0(HttpURLConnection.java:1944)
> at java.base/sun.net.www.protocol.http.HttpURLConnection.getInputStream(HttpURLConnection.java:1614)
> at java.base/sun.net.www.protocol.https.HttpsURLConnectionImpl.getInputStream(HttpsURLConnectionImpl.java:223)
> at hudson.model.UpdateCenter$UpdateCenterConfiguration.download(UpdateCenter.java:1362)
> Caused: java.io.IOException: Failed to load https://updates.jenkins.io/download/plugins/slave-setup/147.vcd1728908670/slave-setup.hpi to /opt/jenkins/mj-dashboard/jenkins_runtime/plugins/slave-setup.jpi.tmp
> at hudson.model.UpdateCenter$UpdateCenterConfiguration.download(UpdateCenter.java:1377)
> Caused: java.io.IOException: Failed to download from https://updates.jenkins.io/download/plugins/slave-setup/147.vcd1728908670/slave-setup.hpi → https://ftp-chi.osuosl.org/pub/jenkins/plugins/slave-setup/147.vcd1728908670/slave-setup.hpi
> at hudson.model.UpdateCenter$UpdateCenterConfiguration.download(UpdateCenter.java:1404)
> at hudson.model.UpdateCenter$DownloadJob.\_run(UpdateCenter.java:2053)
> at hudson.model.UpdateCenter$InstallationJob.\_run(UpdateCenter.java:2381)
> at hudson.model.UpdateCenter$DownloadJob.run(UpdateCenter.java:2027)
> at java.base/java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:572)
> at java.base/java.util.concurrent.FutureTask.run(FutureTask.java:317)
> at hudson.remoting.AtmostOneThreadExecutor$Worker.run(AtmostOneThreadExecutor.java:121)
> at java.base/java.lang.Thread.run(Thread.java:1583)
Jenkins setup:
Jenkins: 2.577
OS: Linux - 4.18.0-553.126.1.el8_10.x86_64
Java: 21.0.5 - Oracle Corporation (Java HotSpot(TM) 64-Bit Server VM)
Parameterized-Remote-Trigger:3.2.2
PrioritySorter:936.937.v5581d0b_2ccb_a_
active-directory:2.967.vf4e254546a_b_3
ant:520.vd082ecfb_16a_9
antisamy-markup-formatter:173.v680e3a_b_69ff3
apache-httpcomponents-client-4-api:4.5.14-269.vfa_2321039a_83
apache-httpcomponents-client-5-api:5.6.4-204.vfa_29df89ffcf
artifact-promotion:0.5.2
artifactory:4.0.8
asm-api:9.10.1-216.va_9256d3b_844b_
audit-trail:456.v39d2fd1ed556
authentication-tokens:1.144.v5ff4a_5ec5c33
authorize-project:531.vf8761dfd75d2
badge:3.605.v7a_3387b_97a_b_6
blame-upstream-commiters:1.2
blueocean:1.27.25
blueocean-autofavorite:1.2.5
blueocean-bitbucket-pipeline:1.27.26
blueocean-commons:1.27.26
blueocean-config:1.27.26
blueocean-core-js:1.27.26
blueocean-dashboard:1.27.26
blueocean-display-url:2.4.4
blueocean-events:1.27.26
blueocean-git-pipeline:1.27.26
blueocean-github-pipeline:1.27.26
blueocean-i18n:1.27.26
blueocean-jwt:1.27.26
blueocean-personalization:1.27.26
blueocean-pipeline-api-impl:1.27.26
blueocean-pipeline-editor:1.27.26
blueocean-pipeline-scm-api:1.27.26
blueocean-rest:1.27.26
blueocean-rest-impl:1.27.26
blueocean-web:1.27.26
bootstrap5-api:5.3.8-1048.va_c299057e35c
bouncycastle-api:2.30.1.84-291.v9f17b_21896e2
branch-api:2.1280.v0d4e5b_b_460ef
build-blocker-plugin:175.vc57a_d7dff5b_4
build-failure-analyzer:3.889.vda_d3b_30435fc
build-name-setter:2.5.1
build-symlink:1.1
build-timeout:1.41
build-token-root:365.v717f8685a_09e
build-user-vars-plugin:214.va_eed2ed849ca_
build-with-parameters:81.ve4a_9c2499d9a
buildresult-trigger:1.01
built-on-column:1.5
byte-buddy-api:1.18.11-247.v7217390533c4
caffeine-api:3.2.4-208.v7e2da_a_7db_82b_
categorized-view:220.vdc6a_fd005471
checks-api:415.vf022234a_931d
cli-commander:0.3
clone-workspace-scm:121.vf1f73b_d671ef
cloudbees-bitbucket-branch-source:937.3.7
cloudbees-folder:6.1106.v3a_d9a_6d2465e
command-launcher:134.v025a_5fcf9dea_
commons-collections4-api:4.5.0-8.va_d5448ef9011
commons-compress-api:1.28.0-87.v48a_8104cb_b_25
commons-lang3-api:3.20.0-109.ve43756e2d2b_4
commons-text-api:1.15.0-218.va_61573470393
computer-queue-plugin:54.v2ede89b_dd741
conditional-buildstep:1.5.0
config-file-provider:1013.v73c323e52b_1f
configurationslicing:712.v727fec97b_b_b_9
console-column-plugin:270.vda_2472462073
copyartifact:795.ve8e151429b_27
countjobs-viewstabbar:1.0.1
credentials:1511.v2e3cb_0008ef0
credentials-binding:728.v902a_273b_8947
cron_column:109.v389a_6f44731b_
cvs:502.v02d5a_0c6b_9a_3
cygpath:1.5
cygwin-process-killer:0.2
dashboard-view:2.558.v96b_901978e47
data-tables-api:2.3.8-1570.v1cb_1cd2a_0fb_c
database:309.vf39a_d78a_cb_e8
database-mysql:142.vc259713f0032
declarative-pipeline-migration-assistant:1.6.7
declarative-pipeline-migration-assistant-api:1.6.7
discard-old-build:1.08
display-upstream-changes:0.3.2
display-url-api:2.217.va_6b_de84cc74b_
docker-commons:477.v289085a_b_6896
docker-workflow:647.vf474049b_b_303
downstream-buildview:69.v16da_b_2c36f6c
dropdown-viewstabbar-plugin:1.7
durable-task:686.v80ff80875b_82
dynamic-search-view:0.4.0
echarts-api:6.1.0-1306.vcee1648c16a_4
eddsa-api:0.3.0.1-29.v67e9a_1c969b_b_
email-ext:2038.v7b_8817a_499d9
emoji-symbols-api:17.0-57.v8d44b_9a_b_d5ea_
envinject:2.941.v351a_20c0a_3ca_
envinject-api:1.241.vdd714803b_403
export-params:1.9
external-monitor-job:223.vb_fddcf42c9b_3
extra-columns:1.29
favorite:2.267.vb_90d08408081
flatpickr-api:4.6.13-32.v60a_51029c136
folder-properties:97.v0c61a_c452eb_b_
font-awesome-api:7.3.1-1013.v0835a_879ec6d
fstrigger:1.02
generic-webhook-trigger:2.4.2
gerrit-trigger:3.1993.vdb_00c7b_551a_5
git:5.10.1
git-client:6.6.1
git-server:137.ve0060b_432302
github:1.47.0
github-api:1.330-492.v3941a_032db_2a_
github-branch-source:1983.vfa_27ed961853
gradle:2.19.1252.v15196b_5a_6e10
groovy:537.v741a_5a_f1b_581
groovy-postbuild:303.v5fe3da_6233f0
gson-api:2.14.0-201.v8eefe5515533
h2-api:11.1.4.199-36.vb_ee07e965744
handy-uri-templates-2-api:2.1.8-38.vcea_5d521d5f3
hidden-parameter:546.vdeec4ce8b_26f
htmlpublisher:428
hudson-wsclean-plugin:1.0.8
instance-identity:203.v15e81a_1b_7a_38
ionicons-api:94.vcc3065403257
jackson-annotations2-api:2.22-19.v10a_a_582ea_26e
jackson2-api:2.22.1-443.vc91f592333c4
jackson3-api:3.2.1-92.vd25c2e23c180
jakarta-activation-api:2.1.4-1
jakarta-mail-api:2.1.5-1
jakarta-xml-bind-api:4.0.9-19.v2b_a_5b_44d9a_1c
javadoc:354.vee1a_660b_4990
javax-activation-api:1.2.0-8
javax-mail-api:1.6.2-11
jaxb:2.3.9-143.v5979df3304e6
jdk-tool:83.v417146707a_3d
jenkins-design-language:1.27.26
jersey2-api:2.48-180.ve47b_264f849b_
jjwt-api:0.13.0-141.vd58b_a_9592b_6c
job-dsl:3732.v9a_c49a_61a_313
job-import-plugin:143.145.v48f9a_a_6ff384
job-node-stalker:1.0.5
job-parameter-summary:0.5
job-poll-action-plugin:1.0
job-restrictions:242.v6edda_c9e4ca_f
jobConfigHistory:1367.vc8fa_b_15101dc
jobdelete-builder:1.0
jobrequeue:1.1
jobtype-column:1.3
joda-time-api:2.14.3-200.v65623733c99f
jquery:1.12.4-3
jquery3-api:3.7.1-687.v68d468e40b_30
jsch:0.2.16-95.v3eecb_55fa_b_78
json-api:20260719-223.va_81f828cdb_58
json-path-api:3.0.0-218.vcd4dd1355de2
jsoup:1.23.1-103.v4fde9422cc6f
junit:1418.v67a_81935603c
ldap:807.809.vd3a_4e5e4ec98
leastload:71.vb_585f7a_dc4f5
lockable-resources:1539.v4db_b_fc1cc115
log-parser:3.0.5
logging:1.0.0
mailer:534.v1b_36f5864073
mapdb-api:1.0.9-44.va_1e1310c9118
matrix-auth:3.3
matrix-project:905.vcc6831e8760a_
maven-plugin:3.27
mercurial:1323.ve69d2a_db_8a_b_d
metrics:4.2.37-494.v06f9a_939d33a_
mina-sshd-api-common:2.19.0-192.v2b_a_7b_2c1dc71
mina-sshd-api-core:2.19.0-192.v2b_a_7b_2c1dc71
monitoring:2.8.0
multiline-tabbar-plugin:1.1
mysql-api:9.6.0-83.v04c82b_70c653
nested-view:241.v178f0b_a_cd76a_
network-monitor:1.1
nodelabelparameter:851.vd94e5048d321
nodenamecolumn:1.2
oauth-credentials:0.666.v3e42c3561266
okhttp-api:5.3.2-200.vedb_720a_cf1f8
opentelemetry-api:1.54.1.102.v276c93ee966d
oss-symbols-api:465.v25d9fdc88c26
p4:1.17.2
pam-auth:1.12
parameter-pool:1.0.3
parameter-separator:334.v1fc0e534c71d
parameterized-scheduler:379.v95c73f233a_df
parameterized-trigger:893.va_383a_9b_a_4c11
patch-parameter:1.2
persistent-parameter:1.3
pipeline-build-step:599.v4b_67ea_11b_152
pipeline-github-lib:65.v203688e7727e
pipeline-graph-analysis:254.v0f63a_a_447dca_
pipeline-groovy-lib:798.v5cc688825312
pipeline-input-step:560.v56198a_642157
pipeline-maven:1760.v9a_a_e6dcb_0444
pipeline-maven-api:1760.v9a_a_e6dcb_0444
pipeline-milestone-step:152.v6e22b_8cfc66c
pipeline-model-api:2.2291.v2934911987b_6
pipeline-model-definition:2.2291.v2934911987b_6
pipeline-model-extensions:2.2291.v2934911987b_6
pipeline-multibranch-defaults:2.1
pipeline-rest-api:2.41
pipeline-stage-step:345.va_96187909426
pipeline-stage-tags-metadata:2.2291.v2934911987b_6
pipeline-stage-view:2.41
pipeline-utility-steps:3.810.va_7672d206740
plain-credentials:199.v9f8e1f741799
plugin-usage-plugin:418.v308c3c863d25
plugin-util-api:7.1341.v039f146993d9
pollscm:1.9
postbuildscript:3.4.1-695.vf6b_0b_8053979
prism-api:1.30.0-741.v034eb_0b_0a_a_fa_
project-stats-plugin:23.v47fee1f77b_84
pubsub-light:1.19
purge-build-queue-plugin:125.v09ee2147746f
purge-job-history:74.vf21030329dda_
rebuild:338.va_0a_b_50e29397
repo:1.17.0
resource-disposer:0.25
run-condition:276.v97298f3a_cd51
saferestart:102.v4dc1b_9636a_ee
schedule-build:696.v0a_b_ec7334c89
scm-api:728.vc30dcf7a_0df5
scoring-load-balancer:233.267.v0fd8d1f1a_7cf
script-security:1412.v7737b_3405f86
scriptler:463.v0a_1f378da_06f
scripttrigger:0.31
shelve-project-plugin:3.3196.v0052de37a_8d3
show-build-parameters:1.0
slave-setup:147.vcd1728908670
snakeyaml-api:2.5-149.v72471e9c6371
snakeyaml-engine-api:3.1.1-12.v4320c7d6f89c
sse-gateway:1.29
ssh-agent:418.v59904cc02b_71
ssh-credentials:372.va_250881b_08cd
ssh-slaves:3.1097.v868116049892
ssh-steps:2.0.92.vb_a_0583935f9b_
sshd:3.384.vc89b_5e138cf9
status-view:1.0
structs:362.va_b_695ef4fdf9
subversion:1303.vcfd9679fb_c12
svn-workspace-cleaner:1.1
systemloadaverage-monitor:1.2
throttle-concurrents:625.vc8b_e469e9a_b_c
timestamper:1.30
token-macro:477.vd4f0dc3cb_cf1
tracking-git:1.0
tracking-svn:1.1
trilead-api:2.284.v1974ea_324382
uptime:1.0
variant:70.va_d9f17f859e0
versioncolumn:400.v3c5c3004f31d
view-job-filters:408.vb_ca_5e798e5b_5
woodstox-core-api:7.2.2-10.vcb_629759b_2c2
workflow-aggregator:608.v67378e9d3db_1
workflow-api:1413.v2ff1a_5e720fa_
workflow-basic-steps:1098.v808b_fd7f8cf4
workflow-cps:4362.v9b_991749898e
workflow-durable-task-step:1479.v56e587f413a_7
workflow-job:1590.v49101d088542
workflow-multibranch:841.vec5b_9e1806ec
workflow-scm-step:466.va_d69e602552b_
workflow-step-api:724.v538c2362b_dfb_
workflow-support:1015.v785e5a_b_b_8b_22
ws-cleanup:0.49
xml-job-to-job-dsl:0.1.13
xtrigger-api:1.2
Caused: javax.net.ssl.SSLHandshakeException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
Usually means you’re missing the cert in your jvm truststore that is the root cert that was used to sign the jenkins update site. But as you wrote that is seem to work after multiple retries this is an indicator that something in-between is not working. When accessing the Jenkins update site you get redirected to the closest location. Maybe you get different sites each time and some are not accessible (blocked by firewall?) and then a cert is presented that doesn’t fit (just guessing here).
In general I would not assume a problem on Jenkins side as that would cause problems to a lot more people which I think is not the case.
I checked my log file and all the failures correspond to these 2 URLs
https://ftp-chi.osuosl.org
https://ftp-nyc.osuosl.org
Those two sites have valid SSL certificates. Maybe there is something between your computer and those sites that is damaging the data in transit?