We have Jenkins running on a Windows machine behind a company proxy. I am getting a strange behavior/error when using diffrent kind of users and try to update plugins. The jenkins update site has a proxy exception. So i don´t need a proxy verification for updating plugins and jenkins. We have tested this and it is working.
What is working is when we run the Service as an normal user we also have to specify the proxy server and port. We can specify a User and password or without an user add http://updates.jenkins.io/ to the No Proxy Host list.
If Jenkins is running as local System we get following error:
sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target at java.base/sun.security.provider.certpath.SunCertPathBuilder.build(SunCertPathBuilder.java:141) at java.base/sun.security.provider.certpath.SunCertPathBuilder.engineBuild(SunCertPathBuilder.java:126) at java.base/java.security.cert.CertPathBuilder.build(CertPathBuilder.java:297) at java.base/sun.security.validator.PKIXValidator.doBuild(PKIXValidator.java:434) ...
Our IT has so called functional user which we want to use for running the jenkins Services. When we run the Jenkins service with a functional user we get the same error as above. It does not matter if we set the proxy or not.
I have looked this error up on stackoverflow and tried most of the solution proposed here without any success. For obvious security reasons I didn't want to disable the certificate check.
So my question is what is the difference between functional user and normal user which creates this error when updating plugins. What could help me else, would be a possible investigation direction. What can I do to get more information about my problem.