kohsuke

+ /srv/releases/azure-sync.sh
--2016-11-15 19:48:46--  https://raw.githubusercontent.com/jenkins-infra/azure/master/scripts/release-blob-sync
Resolving raw.githubusercontent.com (raw.githubusercontent.com)... 151.101.32.133
Connecting to raw.githubusercontent.com (raw.githubusercontent.com)|151.101.32.133|:443... connected.
HTTP request sent, awaiting response... 200 OK
Length: 2279 (2.2K) [text/plain]
Saving to: ‘release-blob-sync’

     0K ..                                                    100% 57.4M=0s

kohsuke

% openssl x509 -in cucumber.crt -text 
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16760861739832129757 (0xe89a8af3142138dd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, ST=Arizona, L=Scottsdale, O=GoDaddy.com, Inc., OU=http://certs.godaddy.com/repository/, CN=Go Daddy Secure Certificate Authority - G2
        Validity
            Not Before: Nov 10 23:47:00 2016 GMT
            Not After : Feb  9 03:41:22 2018 GMT

kohsuke

-----BEGIN PGP PUBLIC KEY BLOCK-----
Version: GnuPG v1

mQGiBEmFQG0RBACXScOxb6BTV6rQE/tcJopAEWsdvmE0jNIRWjDDzB7HovX6Anrq
n7+Vq4spAReSFbBVaYiiOx2cGDymj2dyx2i9NAI/9/cQXJOU+RPdDzHVlO1Edksp
5rKn0cGPWY5sLxRf8s/tO5oyKgwCVgTaB5a8gBHaoGms3nNC4YYf+lqlpwCgjbti
3u1iMIx6Rs+dG0+xw1oi5FUD/2tLJMx7vCUQHhPRupeYFPoD8vWpcbGb5nHfHi4U
8/x4qZspAIwvXtGw0UBHildGpqe9onp22Syadn/7JgMWhHoFw5Ke/rTMlxREL7pa
TiXuagD2G84tjJ66oJP1FigslJzrnG61y85V7THL61OFqDg6IOP4onbsdqHby4VD
zZj9A/9uQxIn5250AGLNpARStAcNPJNJbHOQuv0iF3vnG8uO7/oscB0TYb8/juxr

kohsuke

I'm the maintainer of the Jenkins debian package repository at http://pkg.jenkins.io/debian/

My repository is listed in https://wiki.debian.org/Teams/Apt/Sha1Removal and so I'm trying to fix it. And I have a question.

According to the said Wiki page, "Repositories with DSA keys need to be migrated to RSA first", but as far as I can tell, this is not strictly speaking necessary. I was able to generate a SHA256 signature like this, using my existing DSA/1024 key:

Command line:
    $ gpg --detach-sign --armor --digest-algo sha256 < Release 

Generated signature:

kohsuke

android.emulator(platform:'android-23') {
  android.enableFlightMode()
  sh './gradlew ...'
}

android.emulator(platform:'android-6.0', resolution:'800x600', locale:'en_GB', async:true) {
  sh './gradlew someLengthyTask'
  android.waitForBoot()
  android.installApk '**/*.apk'
  sh './run-tests-on-emulator'

kohsuke

// src/main/java/acme/RetryStep.java
ppackage acme;

class RetryStep extends GroovyStep {
    private int times;

    @DataBoundConstructor
    public RetryStep(int times) {
        this.times = times;
    }

kohsuke

 curl --verbose https://maven.glassfish.org/
*   Trying 54.236.196.233...
* Connected to maven.glassfish.org (54.236.196.233) port 443 (#0)
* found 173 certificates in /etc/ssl/certs/ca-certificates.crt
* found 704 certificates in /etc/ssl/certs
* ALPN, offering http/1.1
* SSL connection using TLS1.2 / ECDHE_RSA_AES_128_GCM_SHA256
* 	 server certificate verification OK
* 	 server certificate status verification SKIPPED
* SSL: certificate subject name (maven.java.net) does not match target host name 'maven.glassfish.org'

kohsuke

#!/usr/bin/env groovy
/*
    Generate index from short/full class name to the javadoc page, in the form of .htaccess.
    This serves http://hudson-ci.org/javadoc/byShortName/

    Push it as scp .htaccess hudson-ci.org:~/www/jenkins-ci.org/javadoc/byShortName
 */
index = new TreeMap();
base = new File("./target/site/apidocs");
base.eachFileRecurse { File f ->

kohsuke

public class Foo {
    public static class A {
        public int i = 1;
    }

    public static class B extends A {
        public int i = 2;
    }

    public static void main(String[] args) {

kohsuke

{
   // this message shows up in UI
   status 'Making stuff right now'
   sh 'make'
   ...
}