Jenkins奴隶代理启动失败

Question

使用"从服务器上的浏览器启动代理"选项从从属计算机启动从属代理时,它会失败.它为slave-agent.jnlp打开一个窗口,当用Java Web Start Launcher打开时,它会弹出启动应用程序,然后另一个弹出窗口显示"Failed to Validate Certificate"消息.

错误的细节是:

java.security.cert.CertificateException:
java.security.cert.CertPathValidatorException:
java.security.InvalidKeyException: Wrong key usage
    at com.sun.deploy.security.TrustDecider.isAllPermissionGranted(Unknown Source)
    at com.sun.javaws.security.AppPolicy.grantUnrestrictedAccess(Unknown Source)
    at com.sun.javaws.LaunchDownload.checkSignedResourcesHelper(Unknown Source)
    at com.sun.javaws.LaunchDownload.checkSignedResources(Unknown Source)
    at com.sun.javaws.Launcher.prepareResources(Unknown Source)
    at com.sun.javaws.Launcher.prepareAllResources(Unknown Source)
    at com.sun.javaws.Launcher.prepareToLaunch(Unknown Source)
    at com.sun.javaws.Launcher.prepareToLaunch(Unknown Source)
    at com.sun.javaws.Launcher.launch(Unknown Source)
    at com.sun.javaws.Main.launchApp(Unknown Source)
    at com.sun.javaws.Main.continueInSecureThread(Unknown Source)
    at com.sun.javaws.Main$1.run(Unknown Source)
    at java.lang.Thread.run(Unknown Source)
Caused by: java.security.cert.CertPathValidatorException:
 java.security.InvalidKeyException: Wrong key usage
    at sun.security.provider.certpath.OCSPResponse.verifyResponse(Unknown Source)
    at sun.security.provider.certpath.OCSPResponse.<init>(Unknown Source)
    at sun.security.provider.certpath.OCSP.check(Unknown Source)
    at sun.security.provider.certpath.OCSP.check(Unknown Source)
    at com.sun.deploy.security.TrustDecider.doOCSPEEValidation(Unknown Source)
    ... 13 more
Caused by: java.security.InvalidKeyException: Wrong key usage
    at java.security.Signature.initVerify(Unknown Source)
    ... 18 more

而当我运行"if the slave is headless:"选项时,它会打开一个命令提示符并显示连接到主服务器的消息.从站还在仪表板上显示在线.

主机在我的本地机器上,我通过VPN连接到远程机器(Windows XP).我想将此远程用作从属服务器作为Windows服务,而不是通过命令提示符运行.我怎样才能做到这一点？

Answer 1

安装Jenkins从服务器作为服务后,转到从属服务器上配置的"远程根目录",jenkins-slave.xml在文本编辑器中打开文件,添加-noCertificateCheck到<arguments>标记的末尾,然后重新启动服务.这应该摆脱证书异常.