From 5a1535ac4b35da227ef337c70cc1a0d162394cd9 Mon Sep 17 00:00:00 2001 From: wenyongda Date: Fri, 17 Apr 2026 13:56:08 +0800 Subject: [PATCH] =?UTF-8?q?docs:=20=E6=B7=BB=E5=8A=A0=E8=A7=A3=E5=86=B3Jen?= =?UTF-8?q?kins=E6=97=A0=E6=B3=95=E6=8B=89=E5=8F=96TLS=201.0=20SVN?= =?UTF-8?q?=E9=A1=B9=E7=9B=AE=E7=9A=84=E6=96=B9=E6=B3=95?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit 在文档中添加如何通过修改Java安全配置解决Jenkins无法拉取使用TLS 1.0协议的老旧SVN项目的问题,包括具体配置修改步骤和重启Jenkins的指令 --- source/_posts/Linux软件安装.md | 30 ++++++++++++++++++++++++++++++ 1 file changed, 30 insertions(+) diff --git a/source/_posts/Linux软件安装.md b/source/_posts/Linux软件安装.md index de61e11..1c6f144 100644 --- a/source/_posts/Linux软件安装.md +++ b/source/_posts/Linux软件安装.md @@ -994,6 +994,36 @@ Environment="JAVA_OPTS=-Djava.awt.headless=true -Duser.language=C.UTF-8" systemctl daemon-reload ``` +### 解决 Jenkins 无法拉取 TLS 1.0 的老旧 SVN 项目 + +Java JDK 禁用了 TLS 1.0 协议,需修改 `java.security` 配置文件开启。 + +找到启动 Jenkins 的 Java JDK 目录下的 `conf/security/java.security` 文件: + +```shell +vim /etc/java-17-openjdk/conf/security/java.security +``` + +找到 `jdk.tls.disabledAlgorithms` 配置项,删除 `TLSv1`、`TLSv1.1`、`3DES_EDE_CBC`: + +```shell +# 原配置: +jdk.tls.disabledAlgorithms=SSLv3, TLSv1, TLSv1.1, DTLSv1.0, RC4, DES, \ + MD5withRSA, DH keySize < 1024, EC keySize < 224, 3DES_EDE_CBC, anon, NULL, \ + ECDH + +# 修改为: +jdk.tls.disabledAlgorithms=SSLv3, DTLSv1.0, RC4, DES, \ + MD5withRSA, DH keySize < 1024, EC keySize < 224, anon, NULL, \ + ECDH +``` + +保存后重启 Jenkins: + +```shell +systemctl restart jenkins +``` + ### 升级 升级前备份配置文件: