在Jenkins中,如何手动检查插件更新的签名?

更新:同时,过期证书似乎已续订:

https://updates.jenkins-ci.org/updates/hudson.tools.JDKInstaller.json.html

Certificate:
    Data:
        Version: 1 (0x0)
        Serial Number: 3735928570 (0xdeadbefa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, ST=California, L=San Jose, O=Jenkins Project, CN=Kohsuke Kawaguchi/emailAddress=kk@kohsuke.org
        Validity
            Not Before: Nov 19 21:21:39 2018 GMT
            Not After : Nov 19 21:21:39 2019 GMT
        Subject: C=US, ST=California, O=Jenkins Project, CN=Community Update Center
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)

所以对我来说这个问题似乎解决了。

您是否尝试过: Why is there Failed Signature Check when using update server?

通过添加以下Java选项来抑制签名验证检查

-Dhudson.model.DownloadService.noSignatureCheck=true

或

修改JDK安全策略以通过替换来接受不安全的加密算法 jdk.certpath.disabledAlgorithms=MD2, RSA keySize lt;1024与 jdk.certpath.disabledAlgorithms=md2,rsa密钥大小 &文件$jre_home/lib/securityjava.security中的lt;512