Certificate exception (data isn't an object ID) - JRE 1.6.03 on IE

Morning all,
Working on a very weird problem here. The environment is as follows:
Multiple tomcat web servers on RedHat Enterprise 3 with a 1024 bit key cert
Windows client using IE and JRE 1.6.03
Symtom:
When hitting machine A, all is good. The applet served by machine A loads fine and the world is good
When hitting machine B, getting this exception:
java.security.cert.CertificateException: sun.security.pkcs.ParsingException: ObjectIdentifier() -- data isn't an object ID (tag = 48)
 at sun.security.provider.X509Factory.engineGenerateCertificates(Unknown Source)
 at java.security.cert.CertificateFactory.generateCertificates(Unknown Source)
 at com.sun.deploy.security.WIExplorerCertStore.generateCertificate(Unknown Source)
 at com.sun.deploy.security.WIExplorerCertStore.loadCertificates(Native Method)
 at com.sun.deploy.security.WIExplorerCertStore.load(Unknown Source)
 at com.sun.deploy.security.WIExplorerCertStore.load(Unknown Source)
 at com.sun.deploy.security.X509ExtendedDeployTrustManager.checkServerTrusted(Unknown Source)
 at com.sun.net.ssl.internal.ssl.ClientHandshaker.serverCertificate(Unknown Source)
 at com.sun.net.ssl.internal.ssl.ClientHandshaker.processMessage(Unknown Source)
 at com.sun.net.ssl.internal.ssl.Handshaker.processLoop(Unknown Source)
 at com.sun.net.ssl.internal.ssl.Handshaker.process_record(Unknown Source)
 at com.sun.net.ssl.internal.ssl.SSLSocketImpl.readRecord(Unknown Source)
 at com.sun.net.ssl.internal.ssl.SSLSocketImpl.performInitialHandshake(Unknown Source)
 at com.sun.net.ssl.internal.ssl.SSLSocketImpl.startHandshake(Unknown Source)
 at com.sun.net.ssl.internal.ssl.SSLSocketImpl.startHandshake(Unknown Source)
 at sun.net.www.protocol.https.HttpsClient.afterConnect(Unknown Source)
 at sun.net.www.protocol.https.AbstractDelegateHttpsURLConnection.connect(Unknown Source)
 at sun.net.www.protocol.http.HttpURLConnection.getInputStream(Unknown Source)
 at sun.net.www.protocol.https.HttpsURLConnectionImpl.getInputStream(Unknown Source)
 at com.sun.deploy.net.HttpUtils.followRedirects(Unknown Source)
 at com.sun.deploy.net.BasicHttpRequest.doRequest(Unknown Source)
 at com.sun.deploy.net.BasicHttpRequest.doGetRequestEX(Unknown Source)
 at com.sun.deploy.net.DownloadEngine.isUpdateAvailable(Unknown Source)
 at com.sun.deploy.cache.DeployCacheHandler.get(Unknown Source)
 at sun.net.www.protocol.http.HttpURLConnection.plainConnect(Unknown Source)
 at sun.net.www.protocol.https.AbstractDelegateHttpsURLConnection.connect(Unknown Source)
 at sun.net.www.protocol.http.HttpURLConnection.getInputStream(Unknown Source)
 at java.net.HttpURLConnection.getResponseCode(Unknown Source)
 at sun.net.www.protocol.https.HttpsURLConnectionImpl.getResponseCode(Unknown Source)
 at sun.applet.AppletClassLoader.getBytes(Unknown Source)
 at sun.applet.AppletClassLoader.access$100(Unknown Source)
 at sun.applet.AppletClassLoader$1.run(Unknown Source)
 at java.security.AccessController.doPrivileged(Native Method)
 at sun.applet.AppletClassLoader.findClass(Unknown Source)
 at java.lang.ClassLoader.loadClass(Unknown Source)
 at sun.applet.AppletClassLoader.loadClass(Unknown Source)
 at java.lang.ClassLoader.loadClass(Unknown Source)
 at sun.applet.AppletClassLoader.loadCode(Unknown Source)
 at sun.applet.AppletPanel.createApplet(Unknown Source)
 at sun.plugin.AppletViewer.createApplet(Unknown Source)
 at sun.applet.AppletPanel.runLoader(Unknown Source)
 at sun.applet.AppletPanel.run(Unknown Source)
 at java.lang.Thread.run(Unknown Source)
Caused by: sun.security.pkcs.ParsingException: ObjectIdentifier() -- data isn't an object ID (tag = 48)
 at sun.security.pkcs.PKCS7.parse(Unknown Source)
 at sun.security.pkcs.PKCS7.<init>(Unknown Source)
 at sun.security.provider.X509Factory.parseX509orPKCS7Cert(Unknown Source)
 ... 43 more
Now I googled this but almost every hit was to do with java 1.4 and not being able to handle a 4096 bit key. In this case, neither of those is true.
The other interesting thing is other users are able to hit the server and load the applet no problem. So it's not something server side.
Originally, the client was using java 1.5 until I upgraded it to 1.6 on the offchance it would address the problem. Alas, not.
Any insights much appreciated.

In my case this issue has been resloved using the Compatibility View Settings and add the page. It's one of the problem to use IE 8 :S

Similar Messages

How to script the add certificate exception in Firefox 32.0.2 ?

Hi,
I meet some issues with the Firefox certificates management. Here is my context:
- Firefox v32.0.2 on Windows 7 32 bits
- a self-signed certificate created with OpenSSL 32 bits
- Firefox and self-signed certificate have been deployed on 11000 workstations with some automated process (scripts).
The self-signed certificate is used to securize data flows with https protocol between two WebServices and different applications. There is no security problem with Internet Explorer, Safari, Chrome.
I have already deployed and installed the self-signed certificate with an Microsoft Active Directory GPO (there is an addon GPO for FireFox) and it is OK
Issue:
When the application WebService calls Firefox, a message indicates to the users that the connection can't be certified and ask them to add an exception.
the WS URL is appeared and the users must click on "Confirm security exception" (the checkbox "Conserv this exception permanently" must be checked)
It is a bit "dangerous" to let the users with these different choices and this is not very friendly.
So, I want to create a script which automates all these manipulations and deploy this script with a GPO.
Is it possible ? How can I script this certificate exception and the different choices?
Thanks a lot by advance for your help
Best regards
Yanolezard

This is not the GPO approach but an alternative: [https://support.mozilla.org/en-US/questions/984237]
Other resources:
*[http://mbrownnyc.wordpress.com/2013/06/04/leverage-group-policy-to-manage-certificates-in-users-firefox-certificate-store/]
*There are also a number of admins that answer questions on their mailing list for the ESR (enterprise) version of Firefox. [https://www.mozilla.org/en-US/firefox/organizations/]

Date management on internal object master data

Hi gurus,
I need to use a set of dates on the internal object master data. On the date profile customizing there isn't anything that reflecting the management of the dates on products or internal object.
However, on the web UI (Internal Objects details screen) I found the field "Date Profile":
- component: PRDHS
- view: PRDHS/Header
- context node: PRODSETWTY
- attribute: STRUCT.TIMEPROF
This field is not active and I also searched for a set type that could allow me to activate it and to insert a date profile for my internal object without success.
I'm searching the way to activate this field on the internal object master data and to understand if it's possible to use the date profile on it.
Your help would be very appreciated.
Thank a lot.
Massimiliano.

Hello,
There are no date profiles assigned to products in the CRM system, I believe the same is true for internal objects.
Generally, once a product has been added to an order then the dates from the order/APO system are what are taken into account.
I have checked into internal objects but the only date I can find reference to is a timestamp:
http://help.sap.com/saphelp_scm50/helpdata/en/f9/a67937b566ab49e10000009b38f842/frameset.htm
I have also checked on information on the attribute STRUCT.TIMEPROF but haven't found anything.
Thanks and regards,
Ita

The "add exception" block isn't active

The "add exception" block isn't active in the "I understand the risks." section of Untrusted Connection. I had to use IE to access my wireless router? Any suggestions?
I'm running Firefox 17.0.1 under Win 8.
Keith Brewer

hey keith, does the following article help?: [[Certificate contains the same serial number as another certificate]]

Firefox 27 in new profile will not store security certificate exception

I created a new profile in order to transfer settings to a new PC. Under the new profile I cannot permanently store Security Certificate exceptions although I can do so in the default profile. I can create a one off exception in the new profile. Is there a fix?

What I meant is which websites require you 990you to add an exception.
Check the date and time in the clock on your computer: (double) click the clock icon on the Windows Taskbar.
Check out why the site is untrusted (click "Technical Details to expand that section) and if this is caused by a missing intermediate certificate then see if you can install this intermediate certificate from another source.
You can retrieve the certificate and check details like who issued certificates and expiration dates of certificates.
*Click the link at the bottom of the error page: "I Understand the Risks"
Let Firefox retrieve the certificate: "Add Exception" -> "Get Certificate".
*Click the "View..." button and inspect the certificate and check who is the issuer of the certificate.
You can see more Details like intermediate certificates that are used in the Details pane.
If "I Understand the Risks" is missing then this page may be opened in an (i)frame and in that case try the right-click context menu and use "This Frame: Open Frame in New Tab".
Note that some firewalls monitor (secure) connections and that programs like Sendori or FiddlerRoot can intercept connections and send their own certificate instead of the website's certificate.

Exception: cx_fp_runtime_usage when creating pdf object

Hi, experts,
i found out that every time we call the method create_pdf_object to get an reference of a pdf object, there always a exception occurs, any way to get ride of it?
somehow , the pdfobj work even the exception occurs.
l_fp = cl_fp=>get_reference( ).
TRY.
 l_pdfobj = l_fp->create_pdf_object( connection = 'ADS' ).
 l_pdfobj->execute( ).
 CATCH cx_fp_runtime_internal
 cx_fp_runtime_system
 cx_fp_runtime_usage INTO l_fpex.
endtry.

Hi ,
I am getting this exception too!
CALL METHOD cl_gui_frontend_services=>file_open_dialog
 CHANGING
 file_table = lt_file_table
 rc = lv_rc
USER_ACTION =
FILE_ENCODING =
 EXCEPTIONS
 file_open_dialog_failed = 1
 cntl_error = 2
 error_no_gui = 3
 not_supported_by_gui = 4
 OTHERS = 5.
 READ TABLE lt_file_table
 INTO lv_filename
 INDEX 1.
 cl_gui_frontend_services=>gui_upload(
 EXPORTING
 filename = lv_filename
 filetype = 'BIN' "Binary
 IMPORTING
 filelength = lv_filelength
 CHANGING
 data_tab = lt_rawtab
 EXCEPTIONS
 file_open_error = 1
 file_read_error = 2
 no_batch = 3
 gui_refuse_filetransfer = 4
 invalid_type = 5
 no_authority = 6
 unknown_error = 7
 bad_data_format = 8
 header_not_allowed = 9
 separator_not_allowed = 10
 header_too_long = 11
 unknown_dp_error = 12
 access_denied = 13
 dp_out_of_memory = 14
 disk_full = 15
 dp_timeout = 16
 not_supported_by_gui = 17
 error_no_gui = 18
 OTHERS = 19 ).
Get FP reference
 DATA: lo_fp TYPE REF TO if_fp VALUE IS INITIAL.
 lo_fp = cl_fp=>get_reference( ).
For handling exceptions
 DATA: lo_fpex TYPE REF TO cx_fp_runtime VALUE IS INITIAL.
 TRY.
Create PDF Object using destination 'ADS' (<-- this is how it is
defined in SM59)
 DATA: lo_pdfobj TYPE REF TO if_fp_pdf_object VALUE IS INITIAL.
 lo_pdfobj = lo_fp->create_pdf_object( connection = 'ADS' ).
FIELD-SYMBOLS: <ls_rawtab> LIKE LINE OF lt_rawtab.
Move to XSTRING
LOOP AT lt_rawtab ASSIGNING <ls_rawtab>.
CONCATENATE pdf_data <ls_rawtab>-data INTO pdf_data IN BYTE MODE.
ENDLOOP.
Set document
 lo_pdfobj->set_document(
 EXPORTING
 pdffile = lv_filename
 pdfdata = PDF_DATA
Tell PDF object to extract data
 lo_pdfobj->set_task_extractdata(
 EXPORTING
 xsltdata = pdf_data
Execute the call to ADS
 lo_pdfobj->execute( ).
 CATCH cx_fp_runtime_system.
 ENDTRY.
Any idea what could be wrong? The ADS connection, when tested with report seems to work fine!
Regards,
Poonam

How to decipher info on certificate exception

I'm using Firefox 8 on Windows 7 Professional 64-bit.
I was browsing qriocity.com and was presented with a notification that the credentials didn't match (something to that effect). I chose the option to add an exception, thinking that I can easily find and remove the exception. After much googling, I found that the likely way to do this is to got to Tools->Options->Advanced-Encryption->ViewCertificates. The only tabs that are not empty are the Servers and Authorities tabs. In the Servers tab, I found an entry under "Comodo CA Limited" that looked related to the qriocity site:
Certificate Name: *.support.sonyentertainmentnetwork.com
Server: qriocity-en-us.custhelp.com:443
Without any other information, I would decide to delete this entry. However, I was wondering if these are in fact certificate *exceptions* that I am looking at. As well, knowing *when* the exception was added would eliminate any doubt that it is the exception I added just now. Is there a way to show the date added? Such a field doesn't seem to exist when I click on "View...".
On a separate but related matter, I was also looking for something relevant in the Authorities tab. Are these all authorities that I added, possibly implicitly and unknowningly? Is there a way (and is it wise) to reduce this list to what it would be for a virgin installation of Firefox?

Hello, cor-el,
I looked in cert_override.txt to see if contains the date of added exceptions. The file is dated approximately in the time I was looking at the Server tab entries (and I did in fact delete the relevant looking entry). However it is empty with the exception of the following comment-looking lines:
# PSM Certificate Override Settings file
# This is a generated file! Do not edit.
The file remained empty even when I exited Firefox. However, when I restarted Firefox and checked the Server tab, and it is certainly not empty. There are 10 entries under "The USERTRUST Network".
So I was wondering if cert_override.txt is suppose to be a complete copy of all of the contents of the Server tab?
Furthermore, is there a way to determine when the Server tab entries were added?

How to delete exception dates in iCal

Friends:
I would like to get rid of all exception dates in my iCal library. (So my BlackBerry doesn't reject the sync.)
Is there a quick way to do this?
If not, can I go into the 100 or so records like:
~/Library/Calendars/045F6892-6441-40D2-A6C1-EEB67CF13E96.calendar/Events
and, using text edit, delete the line(s) in each that say:
EXDATE;VALUE=DATE:20080906
Thanks amigos,
Migs

Thats a good tip Reggie.
For anyone else reading this post, keep in mind that if you see "duplicates" with the MobileMe calendar it may mean you are seeing two separate copies of the same calendar. Before spending time deleting individual events read this article: http://support.apple.com/kb/TS3505

Error while activating data loaded into DataStore Object in BI 7.0

Hi Guys,
I am facing the following problem :
When I load data into a Datastore Object, all the records get loaded but the job fails during activation of the data.
Below is the job log :
Activation is running: Data target 0RPM_DS07, from 77 to 77
Overlapping check with archived data areas for InfoProvider 0RPM_DS07
Check not necessary, as no data has been archived for 0RPM_DS07
Data to be activated successfully checked against archiving objects
SQL-END: 14.06.2007 12:33:25 00:00:00
SQL Error: ORA-20000: Insufficient privileges
Parallel processes (for Activation); 000003
Timeout for parallel process (for Activation): 000300
Package size (for Activation): 020000
Task handling (for Activation): Backgr Process
Server group (for Activation): No Server Group Configured
All data fields updated in mode "overwrite"
Resource error. No batch process available. Process terminated
Time limit exceeded. No return of the split processes
Resource error. No batch process available. Process terminated
Request you to kindly help me resolve this issue.
I am runnning the infopackage manually. Should I run it by a process chain??
If I run by process chain, I get the following error in 1st step:
You do not have authorization for InfoSource 0RPM_ITEM_FIN_PLANNING.
Awaiting your replies,
Thanks,
punkuj...

Hi,
I think this problem remains unanswered.
The issue behind this problem is, during parellel activation the child jobs acknowledge the parent job about status. If the child job takes long time to read data from active data table, then it times out and fails.
Check the primary index on Active data table and it should be missing in your case. See the se11 index or db02 missing indexes. That is the reason that causes time out. Rebuild the primary index by asking your basis folks and repeat the activation. It should succeed.
Thanks,
Sri.

How to handle data in a request object

I want to know the best way to handle data received from sql query to display on a jsp page and for page navigation. If I store data in a request object then the data is lost after displaying first page. When user hits Next link to view more data I need to do another query to database which I want to avoid. I display only 20 rows at a time. So if my query returns 100 rows I display 5 pages. I need to retain data when user hits next to view other pages. What is the best way to handle this?
- Raj

By caching your resultset. There are caching custom tags that perform this function. Check out http://www.servletsuite.com/jsp.htm.

Data federator in business objects

Hi,
What is the use of data federator in business objects.
Regards,
G

HI,
The only option in this case is to 1) use Business Objects' Data Federator to bring XYZ data and BW (new) data together, 2) creating a relational universe, and 3) creating Crystal / WEBI reports using the relational universe; see Picture 1.
>> You can also combine the data by using a MultiProvider in BW which is access the data in BW and the data in the legacy system and an additional alternative is to move all the data into BW.
After 20 years goes by, and we no longer need to report on data housed in XYZ anymore, the environment will be turned off.
1) When this happens, wouldn't we want to remove Data Federator and the relational universe from the scenario ?
>> That depends on the approach you took
Ingo

How to get Date Format from Local Object.

Hi All,
I am new to Web Channel.
I need to know Date format From date of locale.
suppose there is a date "01/25/2010" date in date field I want to get string "mm/dd/yyyy". Actually I have to pass date format to backend when I call RFC.
Is there any way to get Date format from "Locale" object. I should get date format for local object
I get local object from "UserSessionData" object but how to get Date format from it.
I am not looking for Date value. I am looking for current local date format ("mm/dd/yyyy or dd/mm/yyyy or mon/dd/yyyy) whatever local date format. I could not find example which show how to get date format from "Locale" object.
Any help will be appreciated with rewards.
Regards.
Web Channel

Hi,
You can get it from "User" or "Shop" business object.
Try to get User or Shop Business Object as shown below.
BusinessObjectManager bom = (BusinessObjectManager) userSessionData.getBOM(BusinessObjectManager.ISACORE_BOM);
User user = bom.getUser();
char decimalNotation = user.getDecimalPointFormat().getGroupingSeparator();
If you are seeing "1,234.00" then above code will return "."
I hope this information help you to resolve your issue.
eCommerce Developer.

I purchased an iPad mini on October 10th. I want to return it and get the new ipad mini retina when it comes out. How do I do that if the new ipad mini release date isn't until "later in November", which is beyond the 14 days from my purchase date?

I purchased an iPad mini on October 10th. I want to return it and get the new ipad mini retina when it comes out. I am currently still within the 14 day return/exchange window but how can I exchange it if the new ipad mini release date isn't until "later in November", which would be beyond the 14 days from my purchase date? If apple announces a new version of a product you just purchased but won't actually release it for more than 14 days, how can you possibly exchange the one you just bought? Is my only option to return the one I bought on the 10th (so return by 10/24) and then not have an iPad until the new one is available for purchase? Or would it make any sense to return the one I bought, get a new one, which would presumably have another 14 day return window, and then exchange THAT one for the new ipad mini w/ retina when it comes out (hopefully within that second 14 day window)?

Call the apple store you got it from and ask them. Sometimes in the past they've extended the 'no questions asked return' but only Apple can tell you for sure.

Error on activation of data records from ODS object

hi,
Kindly help with my BW Problem, the error occured on the
activation of ODS. The error says "Request
REQU_43MNOPW29W4F5M037J7OAFP52 in ODS ZPUR_O01 must have QM
status green before it is activated" and "Activation of data
records from ODS object ZPUR_O01 terminated"
I tried to check the data in the ODS Object by choosing
<LS>Administrator Workbench > data targets > context menu on ODS
Object ZPUR_O01 but the status are green and when i tried to
activate it the logs says "ODS object ZPUR_O01 was built
incorrectly. Cannot update request
REQU_43MODQ3GF69X17B71ZKQMN85I(20,154)
ODS object ZPUR_O01 was built incorrectly. Cannot update request
REQU_43MQ8A8F0L1US5COQTUUWX3BA(20,155)
ODS object ZPUR_O01 was built incorrectly. Cannot update request
REQU_43MQ8OQQTY21YQ37RMA1WMO06(20,156)
Data to be activated successfully checked against archiving
objects
Activation of data records from ODS object ZPUR_O01 terminated"
Please help me with this problem.

Hi Jay
U need to update these requests to ODS
REQU_43MODQ3GF69X17B71ZKQMN85I(20,154)
REQU_43MQ8A8F0L1US5COQTUUWX3BA(20,155)
REQU_43MQ8OQQTY21YQ37RMA1WMO06(20,156)
1) delete the current request
2)Reconstruct the requests above three request
3)and then Load the current reqest (REQU_43MNOPW29W4F5M037J7OAFP52)
Then only u will be able to activate the ODS....
This is an serialization issue...
hope it helps
regrds
AK
assign points if usefull

Blackberry 10 the data isn't compatible with the version of the device software that you are currently running

Hi,
my update to 10.3.1.1565 messed the handwriting input up on my phone. so I tried to downgrade to 10.2.1, upon doing so all my files were wiped, however I thought I was being smart by doing a complete backup this morning while running 10.3.1.1565 prior to attempting the os downgrade to 10.2.1 using BlackBerry Link,
Anyway I had to restore my device back to 10.3.1.1565 and now when I attempt to do a restore using the .bbb ( backup ) which I created earlier on today i.e getting the following error message:
blackberry 10 the data isn't compatible with the version of the device software that you are currently running
the software versions on my phone now and the software version when I did my backup are exactly the same 10.3.1.1565. I'm able to restore my user files and apps ect, as it offers to do a partial restore,., but my contacts, and remember files are now gone. I NEED THESE. how do I get these back..
please help..
Thanks,
GeoYeo - Free Local classifieds - Built for Blackberry 10, if you like it please Rate It and Share it!
Solved!
Go to Solution.

Hi,
I figured it out. so I figured I would post. Apparently BlackBerry pulled the 10.3.1.1565 update. anway not sure what happened butI ended up usng Shenshi and grabbing an update from a different carrier, upon doing so I am now able to do a complete restore using my old BBB file,
GeoYeo - Free Local classifieds - Built for Blackberry 10, if you like it please Rate It and Share it!

Certificate exception (data isn't an object ID) - JRE 1.6.03 on IE

Similar Messages

Maybe you are looking for