Connect to Jenkins Server Using Self Signed Certificate about docker-agent HOT 5 CLOSED

i had a similar problem trying to use a letsencrypt certificate for my jenkins master, and i wasn't able to get the noCertificateCheck to work even when modifying the jenkins-slave script, so I downloaded the .der format "Let’s Encrypt Authority X3 (IdenTrust cross-signed)" certificate from https://letsencrypt.org/certificates/ and added it to the openjdk keystore. You can do something similar in your dockerfile with your self signed certificate:

USER root
ADD lets-encrypt.der .
RUN keytool -importcert -alias local-CA \
  -keystore /usr/lib/jvm/java-1.8.0-openjdk-amd64/jre/lib/security/cacerts \
  -file lets-encrypt.der \
  -storepass changeit
USER jenkins

ENTRYPOINT ["jenkins-slave"]

Note that you probably have your self signed cert in pem format, and java needs it in der format, so something like openssl x509 -outform der -in certificate.pem -out certificate.der may come in handy

from docker-agent.

https://github.com/jenkinsci/docker-jnlp-slave/releases/tag/3.35-5 likely resolves it by adding support of headless connection and explicit env vars for certificates & Co. Please reopen the issue if it does not flly resolve the issue

I don't understand. How does that solves the issue? How to set a custom certificate?

from docker-agent.

https://github.com/jenkinsci/docker-jnlp-slave/releases/tag/3.35-5 likely resolves it by adding support of headless connection and explicit env vars for certificates & Co. Please reopen the issue if it does not flly resolve the issue

from docker-agent.

I guess that is more a question for the EC2 container service plug-in, you can ask in the jenkins users mailing list

from docker-agent.

@diffalot tried it and it works, thanks

from docker-agent.