Certificate contains unsupported critical extensions

Hi,
I have a Java client talking to the Active Directory and SunOne directory servers.
During SSL Handshake with a directory server, when there is no trusted cert for a domain, Java client reads the cert using the code below and stores in locally for the next SSL handshake. It worked fine so far except in one use case: Local truststore has cert for the sunone domain and while trying to download the cert for active directory (2003), it throws java.security.cert.CertificateException: Certificate contains unsupported critical extensions: [2.5.29.17].
Any one has any idea? SSL log is attached hoping that it helps you in understanding the problem I am facing.
*******start of code************
// Create the client socket
SSLSocketFactory factory = sc.getSocketFactory();
SSLSocket socket = (SSLSocket) factory.createSocket(hostname, port);
// Connect to the server
socket.startHandshake();
// Retrieve the server's certificate chain
serverCerts = socket.getSession().getPeerCertificates();
// Close the socket
socket.close();
**********end of code*****************
*******start of ssl log*************
%% No cached client session
*** ClientHello, TLSv1
RandomCookie: GMT: 1159239929 bytes = { 122, 126, 26, 117, 92, 175, 14, 179, 16, 90, 157, 205, 247, 203, 21, 150, 73, 209, 254, 162, 253, 9, 46, 106, 50, 27, 243, 157 }
Session ID: {}
Cipher Suites: [SSL_RSA_WITH_RC4_128_MD5, SSL_RSA_WITH_RC4_128_SHA, TLS_RSA_WITH_AES_128_CBC_SHA, TLS_DHE_RSA_WITH_AES_128_CBC_SHA, TLS_DHE_DSS_WITH_AES_128_CBC_SHA, SSL_RSA_WITH_3DES_EDE_CBC_SHA, SSL_DHE_RSA_WITH_3DES_EDE_CBC_SHA, SSL_DHE_DSS_WITH_3DES_EDE_CBC_SHA, SSL_RSA_WITH_DES_CBC_SHA, SSL_DHE_RSA_WITH_DES_CBC_SHA, SSL_DHE_DSS_WITH_DES_CBC_SHA, SSL_RSA_EXPORT_WITH_RC4_40_MD5, SSL_RSA_EXPORT_WITH_DES40_CBC_SHA, SSL_DHE_RSA_EXPORT_WITH_DES40_CBC_SHA, SSL_DHE_DSS_EXPORT_WITH_DES40_CBC_SHA]
Compression Methods: { 0 }
http8080-Processor23, WRITE: TLSv1 Handshake, length = 73
http8080-Processor23, WRITE: SSLv2 client hello message, length = 98
http8080-Processor23, READ: TLSv1 Handshake, length = 4683
*** ServerHello, TLSv1
RandomCookie: GMT: 1159240018 bytes = { 91, 122, 42, 201, 86, 128, 38, 183, 178, 9, 246, 8, 226, 181, 143, 154, 240, 240, 107, 190, 128, 152, 197, 36, 192, 252, 19, 66 }
Session ID: {122, 31, 0, 0, 219, 171, 252, 70, 129, 81, 97, 77, 51, 238, 3, 134, 211, 198, 14, 195, 67, 129, 197, 28, 132, 178, 169, 67, 197, 78, 160, 35}
Cipher Suite: SSL_RSA_WITH_RC4_128_MD5
Compression Method: 0
%% Created: [Session-1, SSL_RSA_WITH_RC4_128_MD5]
** SSL_RSA_WITH_RC4_128_MD5
*** Certificate chain
chain [0] = [
Version: V3
Subject:
Signature Algorithm: SHA1withRSA, OID = 1.2.840.113549.1.1.5
Key: SunJSSE RSA public key:
public exponent:
010001
modulus:
c84bb78e 9b42d168 c9e889bc 1301d3db 36db1590 37078b37 1c8519dc 32ea4226
a77a6611 2734c101 14f2ced8 a2cc615a 0056905c e0c91c4f c0dcb1de 81863389
da393198 f49957f7 2d4bc5d4 7a8daca8 ffaafe38 88669c82 a07cd9d8 398e9865
7b5eed6f 0ef8a3b2 c64e79db 2282cb95 6f779ced 81b0a960 2ff96c84 c0150b83
Validity: [From: Tue Jul 05 14:00:14 EDT 2005,
               To: Thu Jul 05 14:10:14 EDT 2007]
Issuer: CN=TeakRootCA, DC=teak, DC=eng
SerialNumber: [    115061b5 00000000 000b]
Certificate Extensions: 9
[1]: ObjectId: 1.3.6.1.4.1.311.21.10 Criticality=false
Extension unknown: DER encoded OCTET string =
0000: 04 28 30 26 30 0A 06 08 2B 06 01 05 05 07 03 02 .(0&0...+.......
0010: 30 0A 06 08 2B 06 01 05 05 07 03 01 30 0C 06 0A 0...+.......0...
0020: 2B 06 01 04 01 82 37 14 02 02 +.....7...
[2]: ObjectId: 2.5.29.17 Criticality=true
SubjectAlternativeName [
[DNSName: mountain.teak.eng]]
[3]: ObjectId: 2.5.29.35 Criticality=false
AuthorityKeyIdentifier [
KeyIdentifier [
0000: A2 31 E9 24 21 A8 BC 4C 7E DE 42 17 0A A6 F8 50 .1.$!..L..B....P
0010: 3E 0F B1 76 >..v
[4]: ObjectId: 2.5.29.14 Criticality=false
SubjectKeyIdentifier [
KeyIdentifier [
0000: DE 46 72 03 14 59 88 6B 6A 50 AF 8D 36 DF 7E 8F .Fr..Y.kjP..6...
0010: BE EC B2 B0 ....
[5]: ObjectId: 1.3.6.1.5.5.7.1.1 Criticality=false
Extension unknown: DER encoded OCTET string =
0000: 04 81 FE 30 81 FB 30 81 A6 06 08 2B 06 01 05 05 ...0..0....+....
0010: 07 30 02 86 81 99 6C 64 61 70 3A 2F 2F 2F 43 4E .0....ldap:///CN
0020: 3D 54 65 61 6B 52 6F 6F 74 43 41 2C 43 4E 3D 41 =TeakRootCA,CN=A
0030: 49 41 2C 43 4E 3D 50 75 62 6C 69 63 25 32 30 4B IA,CN=Public%20K
0040: 65 79 25 32 30 53 65 72 76 69 63 65 73 2C 43 4E ey%20Services,CN
0050: 3D 53 65 72 76 69 63 65 73 2C 43 4E 3D 43 6F 6E =Services,CN=Con
0060: 66 69 67 75 72 61 74 69 6F 6E 2C 44 43 3D 74 65 figuration,DC=te
0070: 61 6B 2C 44 43 3D 65 6E 67 3F 63 41 43 65 72 74 ak,DC=eng?cACert
0080: 69 66 69 63 61 74 65 3F 62 61 73 65 3F 6F 62 6A ificate?base?obj
0090: 65 63 74 43 6C 61 73 73 3D 63 65 72 74 69 66 69 ectClass=certifi
00A0: 63 61 74 69 6F 6E 41 75 74 68 6F 72 69 74 79 30 cationAuthority0
00B0: 50 06 08 2B 06 01 05 05 07 30 02 86 44 68 74 74 P..+.....0..Dhtt
00C0: 70 3A 2F 2F 6D 6F 75 6E 74 61 69 6E 2E 74 65 61 p://mountain.tea
00D0: 6B 2E 65 6E 67 2F 43 65 72 74 45 6E 72 6F 6C 6C k.eng/CertEnroll
00E0: 2F 6D 6F 75 6E 74 61 69 6E 2E 74 65 61 6B 2E 65 /mountain.teak.e
00F0: 6E 67 5F 54 65 61 6B 52 6F 6F 74 43 41 2E 63 72 ng_TeakRootCA.cr
0100: 74 t
[6]: ObjectId: 2.5.29.37 Criticality=false
ExtendedKeyUsages [
[1.3.6.1.5.5.7.3.2, 1.3.6.1.5.5.7.3.1, 1.3.6.1.4.1.311.20.2.2]]
[7]: ObjectId: 2.5.29.31 Criticality=false
CRLDistributionPoints [
[DistributionPoint:
[URIName: ldap:///CN=TeakRootCA,CN=mountain,CN=CDP,CN=Public%20Key%20Services,CN=Services,CN=Configuration,DC=teak,DC=eng?certificateRevocationList?base?objectClass=cRLDistributionPoint, URIName: http://mountain.teak.eng/CertEnroll/TeakRootCA.crl]
[8]: ObjectId: 2.5.29.15 Criticality=false
KeyUsage [
DigitalSignature
Key_Encipherment
[9]: ObjectId: 1.3.6.1.4.1.311.21.7 Criticality=false
Extension unknown: DER encoded OCTET string =
0000: 04 2B 30 29 06 21 2B 06 01 04 01 82 37 15 08 84 .+0).!+.....7...
0010: 9B D5 29 87 9F A9 39 83 D5 8B 04 85 98 9D 3E 83 ..)...9.......>.
0020: CC DD 12 81 3E 01 1C 02 01 6E 02 01 01 ....>....n...
Algorithm: [SHA1withRSA]
Signature:
0000: 56 0A 7A E6 CF B2 E1 26 19 56 97 D8 9A CE DF 91 V.z....&.V......
0010: A2 8C 9B 1F 5F DB DB 8C 2B 53 AF 30 B3 E3 67 58 ...._...+S.0..gX
0020: 28 3F 79 D4 E9 CD F8 36 94 D2 72 1A 4F FE 29 E1 (?y....6..r.O.).
0030: 65 B8 97 F6 50 22 1D DD D9 36 C3 07 EB 38 FC 7F e...P"...6...8..
0040: 25 D6 64 F1 A9 9A F9 7D 2C 6A 55 A4 11 52 2B 1A %.d.....,jU..R+.
0050: BC 42 04 77 34 52 BD 12 EC 26 F2 7F AA 25 E6 18 .B.w4R...&...%..
0060: 36 13 31 E4 F1 F3 48 88 98 E8 AE 34 AB D2 27 CF 6.1...H....4..'.
0070: 00 FD FA 39 D6 85 AE 85 26 F9 11 8A AB A2 16 BB ...9....&.......
0080: 7A F9 E3 83 35 E8 7E D7 27 8D 77 20 EC C7 57 51 z...5...'.w ..WQ
0090: F1 4B AA 66 4B 8D 4D 5F 37 EE F2 ED 52 71 5E 29 .K.fK.M_7...Rq^)
00A0: EF 9D E2 1F 7E 67 2F 05 0F FE EE 23 AC 5A 5C 49 .....g/....#.Z\I
00B0: 3B DE B3 ED 58 6E 29 D2 C1 F0 43 35 10 04 86 3A ;...Xn)...C5...:
00C0: 72 05 AA 60 D1 72 33 9E 60 17 72 0E BF 56 F4 80 r..`.r3.`.r..V..
00D0: 4D 4B 1A 72 A1 C2 EF 0F 22 9E 0B 54 94 E2 B4 14 MK.r...."..T....
00E0: 6A C7 FC 78 C6 34 DC 5D 87 B6 5D 6E 65 C0 AF 88 j..x.4.]..]ne...
00F0: AD 4E FF 87 A0 58 E5 CF EB 95 63 8C E3 31 AC 31 .N...X....c..1.1
http8080-Processor23, SEND TLSv1 ALERT: fatal, description = certificate_unknown
http8080-Processor23, WRITE: TLSv1 Alert, length = 2
http8080-Processor23, called closeSocket()
http8080-Processor23, handling exception: javax.net.ssl.SSLHandshakeException: java.security.cert.CertificateException: Certificate contains unsupported critical extensions: [2.5.29.17]
%% No cached client session
*** ClientHello, TLSv1
RandomCookie: GMT: 1159239929 bytes = { 67, 120, 60, 26, 138, 189, 179, 207, 211, 140, 175, 81, 93, 103, 239, 224, 27, 242, 230, 30, 153, 169, 223, 186, 180, 132, 121, 153 }
Session ID: {}
Cipher Suites: [SSL_RSA_WITH_RC4_128_MD5, SSL_RSA_WITH_RC4_128_SHA, TLS_RSA_WITH_AES_128_CBC_SHA, TLS_DHE_RSA_WITH_AES_128_CBC_SHA, TLS_DHE_DSS_WITH_AES_128_CBC_SHA, SSL_RSA_WITH_3DES_EDE_CBC_SHA, SSL_DHE_RSA_WITH_3DES_EDE_CBC_SHA, SSL_DHE_DSS_WITH_3DES_EDE_CBC_SHA, SSL_RSA_WITH_DES_CBC_SHA, SSL_DHE_RSA_WITH_DES_CBC_SHA, SSL_DHE_DSS_WITH_DES_CBC_SHA, SSL_RSA_EXPORT_WITH_RC4_40_MD5, SSL_RSA_EXPORT_WITH_DES40_CBC_SHA, SSL_DHE_RSA_EXPORT_WITH_DES40_CBC_SHA, SSL_DHE_DSS_EXPORT_WITH_DES40_CBC_SHA]
Compression Methods: { 0 }
http8080-Processor23, WRITE: TLSv1 Handshake, length = 73
http8080-Processor23, WRITE: SSLv2 client hello message, length = 98
http8080-Processor23, READ: TLSv1 Handshake, length = 4683
*** ServerHello, TLSv1
RandomCookie: GMT: 1159240018 bytes = { 174, 227, 68, 111, 147, 74, 23, 145, 16, 135, 129, 19, 196, 50, 38, 91, 30, 196, 73, 6, 223, 41, 254, 91, 147, 164, 245, 224 }
Session ID: {143, 5, 0, 0, 136, 218, 100, 129, 162, 241, 9, 237, 84, 103, 211, 163, 64, 248, 235, 253, 222, 214, 65, 49, 20, 1, 1, 138, 30, 86, 30, 116}
Cipher Suite: SSL_RSA_WITH_RC4_128_MD5
Compression Method: 0
%% Created: [Session-2, SSL_RSA_WITH_RC4_128_MD5]
** SSL_RSA_WITH_RC4_128_MD5
*** Certificate chain
chain [0] = [
Version: V3
Subject:
Signature Algorithm: SHA1withRSA, OID = 1.2.840.113549.1.1.5
Key: SunJSSE RSA public key:
public exponent:
010001
modulus:
c84bb78e 9b42d168 c9e889bc 1301d3db 36db1590 37078b37 1c8519dc 32ea4226
a77a6611 2734c101 14f2ced8 a2cc615a 0056905c e0c91c4f c0dcb1de 81863389
da393198 f49957f7 2d4bc5d4 7a8daca8 ffaafe38 88669c82 a07cd9d8 398e9865
7b5eed6f 0ef8a3b2 c64e79db 2282cb95 6f779ced 81b0a960 2ff96c84 c0150b83
Validity: [From: Tue Jul 05 14:00:14 EDT 2005,
               To: Thu Jul 05 14:10:14 EDT 2007]
Issuer: CN=TeakRootCA, DC=teak, DC=eng
SerialNumber: [    115061b5 00000000 000b]
Certificate Extensions: 9
[1]: ObjectId: 1.3.6.1.4.1.311.21.10 Criticality=false
Extension unknown: DER encoded OCTET string =
0000: 04 28 30 26 30 0A 06 08 2B 06 01 05 05 07 03 02 .(0&0...+.......
0010: 30 0A 06 08 2B 06 01 05 05 07 03 01 30 0C 06 0A 0...+.......0...
0020: 2B 06 01 04 01 82 37 14 02 02 +.....7...
[2]: ObjectId: 2.5.29.17 Criticality=true
SubjectAlternativeName [
[DNSName: mountain.teak.eng]]
[3]: ObjectId: 2.5.29.35 Criticality=false
AuthorityKeyIdentifier [
KeyIdentifier [
0000: A2 31 E9 24 21 A8 BC 4C 7E DE 42 17 0A A6 F8 50 .1.$!..L..B....P
0010: 3E 0F B1 76 >..v
[4]: ObjectId: 2.5.29.14 Criticality=false
SubjectKeyIdentifier [
KeyIdentifier [
0000: DE 46 72 03 14 59 88 6B 6A 50 AF 8D 36 DF 7E 8F .Fr..Y.kjP..6...
0010: BE EC B2 B0 ....
[5]: ObjectId: 1.3.6.1.5.5.7.1.1 Criticality=false
Extension unknown: DER encoded OCTET string =
0000: 04 81 FE 30 81 FB 30 81 A6 06 08 2B 06 01 05 05 ...0..0....+....
0010: 07 30 02 86 81 99 6C 64 61 70 3A 2F 2F 2F 43 4E .0....ldap:///CN
0020: 3D 54 65 61 6B 52 6F 6F 74 43 41 2C 43 4E 3D 41 =TeakRootCA,CN=A
0030: 49 41 2C 43 4E 3D 50 75 62 6C 69 63 25 32 30 4B IA,CN=Public%20K
0040: 65 79 25 32 30 53 65 72 76 69 63 65 73 2C 43 4E ey%20Services,CN
0050: 3D 53 65 72 76 69 63 65 73 2C 43 4E 3D 43 6F 6E =Services,CN=Con
0060: 66 69 67 75 72 61 74 69 6F 6E 2C 44 43 3D 74 65 figuration,DC=te
0070: 61 6B 2C 44 43 3D 65 6E 67 3F 63 41 43 65 72 74 ak,DC=eng?cACert
0080: 69 66 69 63 61 74 65 3F 62 61 73 65 3F 6F 62 6A ificate?base?obj
0090: 65 63 74 43 6C 61 73 73 3D 63 65 72 74 69 66 69 ectClass=certifi
00A0: 63 61 74 69 6F 6E 41 75 74 68 6F 72 69 74 79 30 cationAuthority0
00B0: 50 06 08 2B 06 01 05 05 07 30 02 86 44 68 74 74 P..+.....0..Dhtt
00C0: 70 3A 2F 2F 6D 6F 75 6E 74 61 69 6E 2E 74 65 61 p://mountain.tea
00D0: 6B 2E 65 6E 67 2F 43 65 72 74 45 6E 72 6F 6C 6C k.eng/CertEnroll
00E0: 2F 6D 6F 75 6E 74 61 69 6E 2E 74 65 61 6B 2E 65 /mountain.teak.e
00F0: 6E 67 5F 54 65 61 6B 52 6F 6F 74 43 41 2E 63 72 ng_TeakRootCA.cr
0100: 74 t
[6]: ObjectId: 2.5.29.37 Criticality=false
ExtendedKeyUsages [
[1.3.6.1.5.5.7.3.2, 1.3.6.1.5.5.7.3.1, 1.3.6.1.4.1.311.20.2.2]]
[7]: ObjectId: 2.5.29.31 Criticality=false
CRLDistributionPoints [
[DistributionPoint:
[URIName: ldap:///CN=TeakRootCA,CN=mountain,CN=CDP,CN=Public%20Key%20Services,CN=Services,CN=Configuration,DC=teak,DC=eng?certificateRevocationList?base?objectClass=cRLDistributionPoint, URIName: http://mountain.teak.eng/CertEnroll/TeakRootCA.crl]
[8]: ObjectId: 2.5.29.15 Criticality=false
KeyUsage [
DigitalSignature
Key_Encipherment
[9]: ObjectId: 1.3.6.1.4.1.311.21.7 Criticality=false
Extension unknown: DER encoded OCTET string =
0000: 04 2B 30 29 06 21 2B 06 01 04 01 82 37 15 08 84 .+0).!+.....7...
0010: 9B D5 29 87 9F A9 39 83 D5 8B 04 85 98 9D 3E 83 ..)...9.......>.
0020: CC DD 12 81 3E 01 1C 02 01 6E 02 01 01 ....>....n...
Algorithm: [SHA1withRSA]
Signature:
0000: 56 0A 7A E6 CF B2 E1 26 19 56 97 D8 9A CE DF 91 V.z....&.V......
0010: A2 8C 9B 1F 5F DB DB 8C 2B 53 AF 30 B3 E3 67 58 ...._...+S.0..gX
0020: 28 3F 79 D4 E9 CD F8 36 94 D2 72 1A 4F FE 29 E1 (?y....6..r.O.).
0030: 65 B8 97 F6 50 22 1D DD D9 36 C3 07 EB 38 FC 7F e...P"...6...8..
0040: 25 D6 64 F1 A9 9A F9 7D 2C 6A 55 A4 11 52 2B 1A %.d.....,jU..R+.
0050: BC 42 04 77 34 52 BD 12 EC 26 F2 7F AA 25 E6 18 .B.w4R...&...%..
0060: 36 13 31 E4 F1 F3 48 88 98 E8 AE 34 AB D2 27 CF 6.1...H....4..'.
0070: 00 FD FA 39 D6 85 AE 85 26 F9 11 8A AB A2 16 BB ...9....&.......
0080: 7A F9 E3 83 35 E8 7E D7 27 8D 77 20 EC C7 57 51 z...5...'.w ..WQ
0090: F1 4B AA 66 4B 8D 4D 5F 37 EE F2 ED 52 71 5E 29 .K.fK.M_7...Rq^)
00A0: EF 9D E2 1F 7E 67 2F 05 0F FE EE 23 AC 5A 5C 49 .....g/....#.Z\I
00B0: 3B DE B3 ED 58 6E 29 D2 C1 F0 43 35 10 04 86 3A ;...Xn)...C5...:
00C0: 72 05 AA 60 D1 72 33 9E 60 17 72 0E BF 56 F4 80 r..`.r3.`.r..V..
00D0: 4D 4B 1A 72 A1 C2 EF 0F 22 9E 0B 54 94 E2 B4 14 MK.r...."..T....
00E0: 6A C7 FC 78 C6 34 DC 5D 87 B6 5D 6E 65 C0 AF 88 j..x.4.]..]ne...
00F0: AD 4E FF 87 A0 58 E5 CF EB 95 63 8C E3 31 AC 31 .N...X....c..1.1
http8080-Processor23, SEND TLSv1 ALERT: fatal, description = certificate_unknown
http8080-Processor23, WRITE: TLSv1 Alert, length = 2
http8080-Processor23, called closeSocket()
http8080-Processor23, handling exception: javax.net.ssl.SSLHandshakeException: java.security.cert.CertificateException: Certificate contains unsupported critical extensions: [2.5.29.17]
Finalizer, called close()
Finalizer, called closeInternal(true)
*************end of ssl log**********

When verifying certificates, you're supposed to reject them when you don't understand a critical extension.
Why this certificate has the extension[SubjectAlternativeName] marked as critical, I don't know.

Similar Messages

  • [Solved] certificate contains unknown critical extension error firefox 5

    Secure connection failed
    An error occurred during a connection to an internal website
    Certificate contains unknown critical extension
    (Error code: sec_error_unknown_critical_extension)

    I imported the root chain for my internal CAs into FireFox and this fixed the problem.
    Tools->Options->Advanced->View Certificates->Import

  • When connecting to an internal website, I'm getting an error: "Certificate contain unknown critical extension." What does this mean?

    I am getting a connection failure when trying to connect to an internal web site:
    Secure Connection Failed
    An error occurred during a connection to <sitename>.
    Certificate contains unknown critical extension.
    (Error code: sec_error_unknown_critical_extension)
    Can you give me a general idea what the error is and why I would be getting this error?
    Thanks in advance...

    The instructions here might help
    http://support.apple.com/kb/TS3297

  • InfoPath 2013: InfoPath cannot load the view. The view may have been modified to contain unsupported HTML such as frames.

    Hello Folks,
    I'm facing a strange behavior of InfoPath 2013 while using with SharePoint Designer 2013 to customize the forms. Whenever i open any SharePoint form to customize it in InfoPath 2013, it gives me error "InfoPath cannot load the view. The view may have
    been modified to contain unsupported HTML such as frames."
    Just like all other folks, i also assumed that the forms are corrupted and i need to change the extension to *.cab and blah blah blah. But, when i noticed that the error is coming with new list forms, new workflow forms as well then i tried to research on
    the issue. Surprisingly, all forms are opening on my colleague's PC but not from my PC. We're using the same server, same SharePoint Production, same SharePoint Development and similar InfoPath. Infact, our system team has prepared both of us in a similar
    way. The only difference is OS, where he is using Win 8 and mine is Win 7 Pro.
    Therefore, from last 1 week, i've to swap my PC with my colleague if i've to customize or update any form in InfoPath 2013. This is quite bizarre. Can someone let me know what's wrong with this issue?
    Regards,
    Sohaib
    Sohaib Khan

    Hi Sohaib,
    I'd like to double confirm with you that the issue only occurs to your client machine. Please log on to another machine and see if the issue is related to your account.
    If the issue is only related to your machine, I'd recommend you clear InfoPath cache and repair Office program.
    Then go to InfoPath > Options > More Options > General > Internet Options > Add SharePoint sites to your trusted sites and disbale protected mode.
    http://blogs.msdn.com/b/michael_yeager/archive/2008/07/09/infopath-cache.aspx
    http://office.microsoft.com/en-in/infopath-help/repair-office-programs-HA010357402.aspx
    Regards,
    Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact
    [email protected] .
    Rebecca Tu
    TechNet Community Support

  • InfoPath cannot load the view. The view may have been modifed to contain unsupported HTML such as frames.

    Hi,
    I'm running InfoPath 2013 Designer and I'm experiencing a very annoying bug. Whenever I try to open a Infopath file I get the error, "InfoPath cannot load the view. The view may have been modifed to contain unsupported HTML such as frames."
    Sometimes it opens without a problem but most the time I get this error message. The strange thing is that I can create a new form without any frames, save it and then when I go to open it have the same problem. I've tried reinstalling InfoPath but it didn't
    help.
    Please help!!!
    Thanks in Advance,
    Mark Elliott
    Windows 7 Home Premium 64 bit; Internet Explorer 11; Office 2013 Pro

    Has anybody figured this out? I have the same problem.  InfoPath 2013 will not open any files from one computer which all work from another computer with the same version of InfoPath so this basically rules out file corruption. (The files are in
    a network share).  Both computer have InfoPath 2013. If I reboot the computer in question it will sometimes work then goes back to the error. 
    The only difference between this computer an all the others is that this one has a bunch of Office 2010 updates since it has SharePoint 2010 designer installed, (not office).  I did try to uninstall the updates but the problem has not been resolved. 
    This is the second time this happens.  Last time I had to completely remove Office 2013 & SharePoint designer then used the Windows rollback feature and finally reinstall office 2013.  Everything worked great until I installed SharePoint 2010
    designer then after a few updates the problem resurfaced.
    This is really annoying, I cant believe its not happening to more people.
    Ben
    ** Update **
    The problem went away although I am not 100% sure why. I decided to provide additional information in case someone has the same issue.  I deleted the Digital Certificate that I had previously requested from our domain server. Now suddenly everything
    is working. Like I said before, I'm not sure if this was the cause/fix but if you are having the same problem perhaps you can try the same thing and provide some feedback to possibly help others.
    I would like to thanks anyone who spent time on this.
    **Update**
    The problem came back. At this point I suspect either an update or something with Visual Studios 2012. My forms are heavy on custom code so I must be doing something wrong. I doubt it was an update since it would be happening to more people
     Again, I am able to open the same file from another computer with the only difference being that the other PC does not have Visual Studio 2012

  • I am getting this error when I open Firefox after DLing Firefox 5 (never seen this in any other previous version): FATAL ERROR : The dynamic C library contained in the extension file could not be found.

    Hi there,
    I'm getting this error when opening Firefox 5:
    FATAL ERROR : The dynamic C library contained in the extension file could not be found.
    I've never seen this error before... First time it happened was immediately after DLing Firefox 5 yesterday. I haven't DLed or installed anything else recently.
    I see that you already have my system info. Any help is much appreciated!

    Just read in another post that there is a known 49 character limit on the file path for QuickTime movies..

  • "00004.MTS" contains unsupported media or has an invalid directory structure. Please choose a folder whose directory structure matches supported media. is message I'm getting i have a sony nex-vg10 my buddy use my cam came over log an transfer with no pro

    "00004.MTS" contains unsupported media or has an invalid directory structure. Please choose a folder whose directory structure matches supported media.
    when i try log transfer from a sony nex-vg10 but my buddy can do it with no problem on my cam an mac

    If you copy the recordings from AVCHD cameras, you must copy the entire storage device with its directory structure intact.
    I have even tried copying BACK files onto the camera and they do not show up in the transfer window under the last clip.
    There is no information for those clips in the AVCHD storage device's directory index files. That means there is no way for the computer to find them.
    Your last resort is most likely [ClipWrap|http://www.divergentmedia.com/clipwrap] now, unless you can get the storage device exactly back into the state it is supposed to be according to the index file.

  • When trying to deliver an iBook with videos I receive this error message: 'ERROR ITMS-9000: "Book contains unsupported video my book title.iBooks.OPS/assets.media/my video name.m4v.  Could not detect ftyp' at Book (MZItmspBookPackage)  Any suggestions?

    When I try to deliver an iBook to the iBookstore I receive the folllowing error message. ERROR ITMS-9000: "Book contains unsupported video my book title_.ibooks:/OPS/assets/media/My video title.m4v.  Could not detect ftyp." at Book (MZItmspBookPackage)
    I have no idea what this means and would be grateful for any help.

    KT,
    Thank you so much for your interest and response.  I think that I followed all the suggested 6 steps from the iBA user tip but to no avail.  Do you know anything about this comment by dmingo which is pasted below?
    'User dmingo says this about that:
    After audio tracks are placed in your book, you must 'Publish' the book from iBA (using the 'File/Publish...' menu) - that means re-entering all metadata from scratch - you can't simply import the .ibooks file into iTP. If you enter another audio clip at some time, you have to do it all again. '
    To me it seems to say the video clips need to be delivered separately and one at a time.
    I would be grateful for any advice

  • I get a "Secure Connection Failed" error with google stating "certificate contains the same serial number"

    When I click on a link for a google search, I get the "Secure Connection Failed" error in Firefox. It states, "Please contact the server administrator or email correspondent and give them the following information: Your certificate contains the same serial number as another certificate issued by the certificate authority."
    I have followed the instructions here:
    https://support.mozilla.org/en-US/kb/Certificate%20contains%20the%20same%20serial%20number%20as%20another%20certificate
    and looked at this article:
    https://support.mozilla.org/en-US/questions/1028103?esab=a&as=aaq
    I have uninstalled and reinstalled Firefox, deleted the entire profiles folder, and reset Firefox. I see that the older (orphaned) article points to my router. However, I have a new router and have updated its software. There is no button to add an exception (as noted in the article), so I can't just bypass it. This problem does not occur with IE, so I have a hard time believing it is my router.
    How do I troubleshoot this issue? I really don't want to change browsers.

    Here is a screen shot of the error.

  • Help! "Contains unsupported media or has an invalid directory structure"

    I have FCP 7 and I'm trying to Log and Transfer HD video recorded on a Canon 5D. I keep getting "contains unsupported media or has an invalid directory structure."
    Any idea's?

    Okay... I'm still getting the same message.
    This is what I'm seeing...

  • Issue generating a subordinate certificate - The certification authority's certificate contains invalid data

    Other recipients:
    Hi Guys, I have a root CA and a sub CA. I want to generate another Sub CA certificate from my current sub CA however when I try to do so either via web or csr file I get the below error: The certification authority's certificate contains
    invalid da
    <input role="presentation" style="width:1px;height:1px;opacity:0;" tabindex="-1" type="text" />
    Hi Guys,
    I have a root CA and a sub CA both windows 2008 R2 ent. I want to generate another Sub CA certificate from my current sub CA however when I try to do so either via web or csr file I get the below error:
    The certification authority's certificate contains invalid data. 0x80094005 (-2146877435). Denied by policy module.
    I have confirmed that the basic constraint attribute for my current subca is none so I should be able to generate a certificate for a new subca.
    Any assistance is greatly appreciated.
    Thanks.

    Hi,
    According to your description, you want to build a new CA which is under an existing sub CA (one of your two working sub CAs) to issue certificates to other devices, am I right?
    Based on my research, to achieve this, we need to install another
    Subordinate Certification Authority. During the installation process, this new sub CA will generate a certificate request to its parent CA.
    “The subordinate CA cannot be used until it has been issued a root CA certificate and this certificate has been used to complete the installation of the subordinate CA”, I quoted this
    sentence from the article I posted in my last reply.
    Therefore, in your case, the process flow should be like:
    Install a new sub CA.
    Generate a certificate request to its parent CA during installation.
    The parent CA approves this request.
    Installation of the subordinate CA has completed.
    The new sub CA issues new certificates to other devices.
    Please feel free to let me know if this method is not working.
    Best Regards,
    Amy Wang

  • Get_ldapmessage_controls failed: 12 (Unavailable critical extension) (op=Ab

    I'm running iPlanet Directory Server 5.1 SP3. I have a W2K consumer and a HPUNIX 11.0 supplier/hub. I keep getting this message in the W2K instance's error's log. Replication is not in sync.
    In the Supplier hub's errors log I"m getting the following error:
    [13/Jun/2005:02:21:15 -0400] - synchronize(repl_bind error)
    [13/Jun/2005:10:57:27 -0400] - Error: repl_bind: slapd_SSL_client_bind_s failed: Can't contact LDAP server (81) err 0
    Could someone please point me in the right direction on this? BTW, I work for an enormous corporation that moves real slow, so please don't come back to me with, "well, have you thought about upgrading to SP4 or SunOne 5.2?" I swear if I hear that again I'm going to go insane.
    I have no say on what we run around here. I'm only an administrator in training.
    Thanks.

    Sorry, this is the full error I'm getting on the W2K box.
    get_ldapmessage_controls failed: 12 (Unavailable critical extension) (op=Abandon)

  • The server does not support the requested critical extension (0x8007202c)

    Hello guys,
    The sympton is the same as the one in "The
    server does not support the requested critical extension." Exception.
    I got the error in calling IDirectorySearch::GetNextRow. As I observe, the error is trigger when retrieving the another page of records. The LDAP path to connect is "GC://<FQDN_of_GC>". The search filter is (&(|(objectClass=group)(objectClass=msExchDynamicDistributionList))(mailnickname=*)).
    There are about 100 thousands of group objects in the forest. So the answer in that thread does not help.
    Any thoughts?
    Thanks.
    [email protected]

    Hi Michael,
    Thanks for your remind of the server is Windows 2008 R2. 
    After deep research on this topic, there were a couple of possible causes. One was based on asking AD to do sorting on the results of the query. Our calls to AD do not do any sorting at all. The other I came to was a couple of pages that may help alleviate
    the problem of groups in large AD environments. It has to deal with the temporary table size that Active Directory uses, with the tunable parameter MaxTempTableSize.
    The articles as below are for your reference:
    http://social.technet.microsoft.com/Forums/en-US/exchangesvradmin/thread/95bfb95f-4e43-4dd8-ac3a-0c89d2cf528e
    http://support.microsoft.com/kb/315071
    http://msdn.microsoft.com/en-us/library/ms677927(VS.85).aspx
    Besides, if the above is not the cause of our issue, there may be something wrong in the C# code. Since I just an AD engineer and not familiar with the C# code, I suggest you should involve one C# code engineer to work with us about this issue. After doing
    many research, please add the class of the object when searching. For example, “DirectorySearcher ds = new DirectorySearcher(de, filter,class)”. I’m not sure if it’s correct, just a suggestion.
    Hope to hear good news from you soon. Happy X'MAS day!
    Best regards,
    Bryan

  • "AVCHD" contains unsupported media or had an invalid directory structure

    "AVCHD" contains unsupported media or had an invalid directory structure
    I brought this error message upon myself... and am looking for a way to recover the files and access them in Final Cut Express. I have successfully processed video in the past.... so it's operator error.
    How did I mess it up? By treating my video files the same way as I treat my jpg files.... Creating a new folder for each day's shooting, and simply moving the files into the folder.
    I preserved the CLIPINF and STREAM files.. but discard the the rest of the files.
    I tried recreating the file structure but that hasn't seemed to work. I'll buy a new card, reformat it, and use that as a template for file structure, but that will take a few days.
    So .. I have put the files into the following file structure, but that doesn't seem to work because I have tossed the other supporting files when I "cleaned up" my 8GB Flash Card.
    AVCHD
    BDMV
    CLIPINF
    00051.CPI
    00052.CPI
    00060.CPI
    STREAM
    00051.MTS
    00052.MTS
    00060.MTS
    Have tried to recreate the file structure, but of course the contents of other files are incorrect
    AVCHD
    BDMV
    CLIPINF
    INDEX.BDM
    MOVIEOBJ.BDM
    PLAYLIST
    STREAN
    AVF_INFO
    AVIN0001.BNP
    AVIN0001.INP
    AVIN0001.INT
    So... my questions are simple:
    1: Can I recreate the data and reindex the files from the STREAM and CLIPINF files?
    2: If I can, how do I do it?
    3: If I completely destroyed the integrity of my video... let me know that too.. I'll have lost 9 months of work... but it will keep me from screwing up the video on my next trip!
    Thanks
    Ira Serkes
    [email protected]

    This may or may not apply, but I recently had this problem as well and found a solution that fixed the camcorder back to its original settings, though it only works if 1) the camera worked with Log and Transfer at some point and 2) you are paranoid like me and saved your raw mts files.
    Though I had been using the camera for about a month using Log & Transfer perfectly well I used the Finder to delete all the files, which I thought would be faster than using Delete All in the camcorder. When I turned the recording on the camera said it needed to reformat its Image Database, so I punched Yes. Then after I recorded the L&T window said invalid directory structure.
    What I eventually did was drag the entire contents of the hard disk off into their own folder (with the date and the camera name) and then pulled an old copy I'd made of working movie files back onto the hard drive. Then I used the camcorder's Delete All function, and then dragged all the contents of the folders with my new footage into the corresponding folders of the camera's hard disk. I was once again able to use the L&T function (even with the old semi-corrupt data), and also any new footage I record is A-OK, even after the camera has asked me if it can (once again) reprogram the Image Database.
    I can't explain it, but possibly there are hidden files connected to the files we can see (possibly viewable in the Terminal if you speak Linux) and when the camera comes from the factory they make it good and when the camera tries to do it on its own it doesn't work so well. In short, maybe the camera is a little unstable.

  • I am the developer of a Mozilla Firefox Plugin, I would like to get some contact from your support to get the permission or any certificate for my actual extension.

    Hello, I've developed a firefox extension, I would like to know what should I need to do to get any certificate or acceptance to be a full legit extension, my website provides this plugin to watch online movies and tv shows, and uses this plugin to replaces adblocks from different websites, just like AdBlocker but not removing them, just replacing them. Similar functionality as MegaKey.
    This functionality is clearly detailed in our Terms & Conditions.

    If you want to try, you likely need to wait thru the weekend...
    Phone support | Orders, returns exchanges
    http://helpx.adobe.com/x-productkb/global/phone-support-orders.html
    Chat support - For the link below click the Still Need Help? option in the blue area at the bottom and choose the chat option...
    Get chat help with orders, refunds, and exchanges (non-CC)
    http://helpx.adobe.com/x-productkb/global/service-b.html ( http://adobe.ly/1d3k3a5 )

Maybe you are looking for

  • Cannot send email from my mobileme on iphone 3g

    Suddenly coudn't access my mobileme email account. So I changed my password; and since I couldn't send email from my iphone 3G I can send/receive emails from icloud webpage or Thunderbird. Any clues?

  • Every time I open Firefox I need to update all my extensions because Firefox won't recognize that they've all already been updated previously.

    == Issue == I have another kind of problem with Firefox == Description == This problem only occurs the first time I open Firefox after turning on the computer, but it occurs EVERY time I turn on the computer. Every time I turn on the computer and ope

  • Family sharing & two Apple IDs

    I have two AppleIDs - one for my iCloud (email etc) and a second for all Store purchases. I share the Store AppleID with my kids' iPads so that we can share purchases as per this recommendation ( Using your Apple ID for Apple services ). And that has

  • UCF_AcroForm error

    Hi, we have a custom WD4J app which uses an Adobe Interactive Form.  We are using Adobe reader 9.  Suddenly I started getting this error when trying to access the interactive form: "Server error: UCF_AcroForm Could not send message" The form is being

  • Advanced Search / Keyword Question

    Is it possible to do an advanced search to include images which contain a certain keyword but also ignore another ? I want to create a smart album of images which contain the keywords "a" and "b", but leave out those images that might also contain "c