diff --git a/core/src/main/java/hudson/tools/JDKInstaller.java b/core/src/main/java/hudson/tools/JDKInstaller.java
index cdca2a34f5aa4688aeaa830c400605649049d3c1..5f28d78aa4f94b3a311653b5ae24386faf7fdc1f 100644
--- a/core/src/main/java/hudson/tools/JDKInstaller.java
+++ b/core/src/main/java/hudson/tools/JDKInstaller.java
@@ -308,7 +308,9 @@ public class JDKInstaller extends ToolInstaller {
                 IOUtils.copy(new RetryableHttpStream(src) {
                     @Override
                     protected HttpURLConnection connect() throws IOException {
-                        return (HttpURLConnection) ProxyConfiguration.open(url);
+                        HttpURLConnection con = (HttpURLConnection) ProxyConfiguration.open(url);
+                        con.setReadTimeout(60*1000);    // don't block forever, but don't let the slow client fail with false positives either
+                        return con;
                     }
                 }, out);
             } finally {