Deploy Trusted Cert with the deployment J2SE Runtime Environment 5.0
I want to deploy J2SE Runtime Environment 5.0 Update 2.msi using active directory. I have tested my deployment and all is good, now I want to know how to deploy a trusted cert with the the deployment of J2SE Runtime Environment 5.0 Update 2.msi. I am using active directory for the deployment. I do not know much about Java or cert, but want my users not to have to grant permission to the only cert we have on ouir web page the first time they hit the page.
Is there a way to pre-answer the Grant always box for the cert we have. I hope I have asked the question correctly. Thank in advance.
Hello, I've inserted the following content
#Thu Sep 15 11:36:07 CEST 2005
deployment.system.security.trusted.certs=C\:\\temp\\SSL_applet\\client.com
deployment.system.security.trusted.jssecerts=C\:\\temp\\SSL_applet\\client.com
deployment.system.security.trusted.cacerts=C\:\\temp\\SSL_applet\\client.com
deployment.system.security.trusted.jssecacerts=C\:\\temp\\SSL_applet\\client.com
deployment.system.security.trusted.clientcerts=C\:\\temp\\SSL_applet\\client.com
to the file:
C:\Documents and Settings\UserName\Application Data\Sun\Java\Deployment\deployment.config
When a signed applet is opened I get:
security: Loading Root CA certificates from C:\PROGRA~1\Java\JRE15~1.0_0\lib\security\cacerts
security: Loaded Root CA certificates from C:\PROGRA~1\Java\JRE15~1.0_0\lib\security\cacerts
security: Loading Deployment certificates from C:\temp\SSL_applet\client.com
java.io.IOException: Keystore was tampered with, or password was incorrect
at sun.security.provider.JavaKeyStore.engineLoad(Unknown Source)
at java.security.KeyStore.load(Unknown Source)
at com.sun.deploy.security.DeploySigningCertStore$1.run(Unknown Source)
at java.security.AccessController.doPrivileged(Native Method)
at com.sun.deploy.security.DeploySigningCertStore.load(Unknown Source)
at com.sun.deploy.security.DeploySigningCertStore.load(Unknown Source)
at com.sun.deploy.security.TrustDecider.isAllPermissionGranted(Unknown Source)
at com.sun.deploy.security.TrustDecider.isAllPermissionGranted(Unknown Source)
at sun.plugin.security.PluginClassLoader.getPermissions(Unknown Source)
at java.security.SecureClassLoader.getProtectionDomain(Unknown Source)
at java.security.SecureClassLoader.defineClass(Unknown Source)
at java.net.URLClassLoader.defineClass(Unknown Source)
at java.net.URLClassLoader.access$100(Unknown Source)
at java.net.URLClassLoader$1.run(Unknown Source)
at java.security.AccessController.doPrivileged(Native Method)
at java.net.URLClassLoader.findClass(Unknown Source)
at sun.applet.AppletClassLoader.findClass(Unknown Source)
at java.lang.ClassLoader.loadClass(Unknown Source)
at sun.applet.AppletClassLoader.loadClass(Unknown Source)
at java.lang.ClassLoader.loadClass(Unknown Source)
at sun.applet.AppletClassLoader.loadCode(Unknown Source)
at sun.applet.AppletPanel.createApplet(Unknown Source)
at sun.plugin.AppletViewer.createApplet(Unknown Source)
at sun.applet.AppletPanel.runLoader(Unknown Source)
at sun.applet.AppletPanel.run(Unknown Source)
at java.lang.Thread.run(Unknown Source)All fine and dandy you can specify your own keystore to be used but no where
to give it a storepass so you can use it.
Can someone tell me how to use my own keystore for SSL auth, trust and
signature trust that WILL work.
Setting the system property in an applet won't auth and or trust SSL:
System.setProperty("javax.net.ssl.keyStore", "file:/C:/temp/SSL_applet/client.com");
System.setProperty("javax.net.ssl.keyStorePassword", "storepass");
System.setProperty("javax.net.ssl.keyStoreType","JKS");
System.setProperty("javax.net.ssl.trustStore", "file:/C:/temp/SSL_applet/client.com");
System.setProperty("javax.net.ssl.trustStorePassword", "storepass");
System.setProperty("javax.net.ssl.trustStoreType","JKS");Ends up with a trace telling me cacerts wil be opened, client.com is never used.
C:\Documents and Settings\UserName\Application Data\Sun\Java\Deployment\security\trusted.jssecerts
Googling for the combination of
site:sun.com "deployment.system.security.trusted.certs" password
will give me no results. Searching the entire web won't do much either.
Anyway, assuming the password is changit will end up with an unpleasent
surprise after installing a new version jre.
Because SUN actually changed it in 1.5
Anything short of the programmer loading a keystore when an applet is run
will not work.
This is not good enough, is there a way for administrators to use their own
keystore and give it a password so a jre update won't screw up everything?
Similar Messages
-
How to change a connection with the database in Runtime?
How to change a connection with the database in Runtime?
My connection was made using ADF Business component (ApplicationModule).
ADF Swing.
JDeveloper Studio 11.1.1.4.0.When deploying ADF applications with database connection, you should be using JDBC data sources configured in the weblogic server.
You could change the JDBC data sources to a different DB instance or location - by changing the JDBC data source and restarting the weblogic server.
For more details, check
http://techiecook.wordpress.com/2010/12/02/oracle-weblogic-adf-datasources/
Thanks,
Navaneeth -
While trying to use my iTunes library it will suddenly stop working with the error message Runtime error R6025 pure virtual function call.
Help???Just responded to this in another thread (note we used Captivate 7 so it might be a different error).
We found that when we created files with embedded swf files that existed ABOVE widgets in the timeline, when someone else tried to open our file it broke/we got the runtime error. The original person could still open it for a time, but eventually the cache would clear and they couldn't.
However, if we ensured swf files are BELOW widgets in the source files, it didn't break. In fact, if we found one that was breaking and got the author to move the swf file on the timeline, it would start working for others.
STRANGE! Let me know if this works for you to! -
J2SE Runtime Environment - can I delete old versions?
Hello - I know nothing about JAVA so this may be a silly question. My computer has been running very slowly lately, and I noticed I have 3 J2SE Runtime Environment 5.0 updates - update 6, 9, and 10. Can you tell me if I can delete the older updates? They're huge files, and I'd like to delete them to free up space if it's advisable.
Thank you.Shouldn't, I repeat shouldn't, not won't, be a problem, but that won't help with your "running very slowly" problem.
-
I have J2SE Runtime Environment 5.0 uptade 10,do i have to keep the other programs ( J2SE 5.0 uptade 3, 6 and 9 ) or can i remove them from my computer.
ThanksGood day Friend!
There wont be any problem keeping them together
Because each jre and jdk differs from each version
So, its you to decide that
with regards
[email protected] -
"Error while registering the Java 2 Runtime Environment registry keys"
"Error while registering the Java 2 Runtime Environment registry keys"
I am getting the above error when trying to install the 1.3 JRE (installed with the 1.3 plug in which I need). As part of my development I have been installing and uninstalling the JRE multiple times. Then, I got the above error when trying to install it, and now it appears to be installed but I cannot uninstall it. When I try to uninstall it, it just remains, and when I try to install it again I get the above error. I have tried cleaning up all javasoft registry entries, but it doesnt seem to have helped. Can anyone help me either completely uninstall the JRE so I can do a clean install or help me get rid of the error above when I install. Is there some registry entries I should be looking at? Anything else? this is quite urgent as I need to test my applet with the plugin installed and not installed - and I currently cant uninstall it. Any ideas?
Thanks for your help
AaronI am getting this same error message when trying to upgrade from 1.3.1_03 to 1.3.1_19.
I have multiple versions of jre's and jdks on my machine.
Anyone else seen this problem or know how to resolve it. -
J2SE Runtime Environment Updates
Is it okay to remove all of the updates that occurred before the latest release? I have updates through 5, and want to uninstall the first 4.
Thanks. I also have a question about two other packages. I have the Java 2 SDK , SE 1.4.2_06, and the Java 2 Runtime Environment SE 1.4.2_06. I should leave the SDK alone, but uninstall the Java 2 Runtime Environment SE 1.4.2_06? These are in addition to the J2SE Runtime Environment 5.0, Update 7. Since I develop programs, I suppose I should leave the SDK untouched.
EDIT: Oh, I forgot, I have a fourth package (J2SE Development KIt 5.0 Update 5)
Message was edited by:
gtalumnus2005 -
Can I create a cert with the Java API only?
I'm building a client/server app that will use SSL and client certs for authenticating the client to the server. I'd like for each user to be able to create a keypair and an associated self-signed cert that they can provide to the server through some other means, to be included in the server's trust store.
I know how to generate a key pair with an associated self-signed cert via keytool, but I'd prefer to do it directly with the Java APIs. From looking at the Javadocs, I can see how to generate a keypair and how to generate a cert object using an encoded representation of the cert ( e.g. java.security.cert.CertificateFactory.generateCertififcate() ).
But how can I create this encoded representation of the certificate that I need to provide to generateCertificate()? I could do it with keytool and export the cert to a file, but is there no Java API that can accomplish the same thing?
I want to avoid having the user use keytool. Perhaps I can execute the appropriate keytool command from the java code, using Runtime.exec(), but again a pure java API approach would be better. Is there a way to do this all with Java? If not, is executing keytool via Runtime.exec() the best approach?There is no solution available with the JDK. It's rather deficient wrt certificate management, as java.security.cert.CertificateFactory is a factory that only deals in re-treads. That is, it doesn't really create certs. Rather it converts a DER encoded byte stream into a Java Certificate object.
I found two ways to create a certificate from scratch. The first one is an all Java implementation of what keytool does. The second is to use Runtime.exec(), which you don't want to do.
1. Use BouncyCastle, a free open source cryptography library that you can find here: http://www.bouncycastle.org/ There are examples in the documentation that show you how to do just about anything you want to do. I chose not to use it, because my need was satisfied with a lighter approach, and I didn't want to add a dependency unnecessarily. Also Bouncy Castle requires you to use a distinct version with each version of the JDK. So if I wanted my app to work with JDK 1.4 or later, I would have to actually create three different versions, each bundled with the version of BouncyCastle that matches the version of the target JDK.
2. I created my cert by using Runtime.exec() to invoke the keytool program, which you say you don't want to do. This seemed like a hack to me, so I tried to avoid it; but actually I think it was the better choice for me, and I've been happy with how it works. It may have some backward compatibility issues. I tested it on Windows XP and Mac 10.4.9 with JDK 1.6. Some keytool arguments changed with JDK versions, but I think they maintained backward compatibility. I haven't checked it, and I don't know if I'm using the later or earlier version of the keytool arguments.
Here's my code.
import java.io.File;
import java.io.FileInputStream;
import java.io.FileOutputStream;
import java.io.IOException;
import java.security.KeyStore;
import java.security.KeyStoreException;
import java.security.NoSuchAlgorithmException;
import java.security.cert.CertificateException;
import javax.security.auth.x500.X500Principal;
import javax.swing.JOptionPane;
public class CreateCertDemo {
private static void createKey() throws IOException,
KeyStoreException, NoSuchAlgorithmException, CertificateException{
X500Principal principal;
String storeName = ".keystore";
String alias = "keyAlias";
principal = PrincipalInfo.getInstance().getPrincipal();
String validity = "10000";
String[] cmd = new String[]{ "keytool", "-genKey", "-alias", alias, "-keyalg", "RSA",
"-sigalg", "SHA256WithRSA", "-dname", principal.getName(), "-validity",
validity, "-keypass", "keyPassword", "-keystore",
storeName, "-storepass", "storePassword"};
int result = doExecCommand(cmd);
if (result != 0){
String msg = "An error occured while trying to generate\n" +
"the private key. The error code returned by\n" +
"the keytool command was " + result + ".";
JOptionPane.showMessageDialog(null, msg, "Key Generation Error", JOptionPane.WARNING_MESSAGE);
KeyStore ks = KeyStore.getInstance(KeyStore.getDefaultType());
ks.load(new FileInputStream(storeName), "storePassword".toCharArray());
//return ks from the method if needed
public static int doExecCommand(String[] cmd) throws IOException{
Runtime r = Runtime.getRuntime();
Process p = null;
p = r.exec(cmd);
FileOutputStream outFos = null;
FileOutputStream errFos = null;
File out = new File("keytool_exe.out");
out.createNewFile();
File err = new File("keytool_exe.err");
err.createNewFile();
outFos = new FileOutputStream(out);
errFos = new FileOutputStream(err);
StreamSink outSink = new StreamSink(p.getInputStream(),"Output", outFos );
StreamSink errSink = new StreamSink(p.getErrorStream(),"Error", errFos );
outSink.start();
errSink.start();
int exitVal = 0;;
try {
exitVal = p.waitFor();
} catch (InterruptedException e) {
return -100;
System.out.println (exitVal==0 ? "certificate created" :
"A problem occured during certificate creation");
outFos.flush();
outFos.close();
errFos.flush();
errFos.close();
out.delete();
err.delete();
return exitVal;
public static void main (String[] args) throws
KeyStoreException, NoSuchAlgorithmException, CertificateException, IOException{
createKey();
import java.io.BufferedReader;
import java.io.IOException;
import java.io.InputStream;
import java.io.InputStreamReader;
import java.io.OutputStream;
import java.io.PrintWriter;
//Adapted from Mike Daconta's StreamGobbler at
//http://www.javaworld.com/javaworld/jw-12-2000/jw-1229-traps.html?page=4
public class StreamSink extends Thread
InputStream is;
String type;
OutputStream os;
public StreamSink(InputStream is, String type)
this(is, type, null);
public StreamSink(InputStream is, String type, OutputStream redirect)
this.is = is;
this.type = type;
this.os = redirect;
public void run()
try
PrintWriter pw = null;
if (os != null)
pw = new PrintWriter(os);
InputStreamReader isr = new InputStreamReader(is);
BufferedReader br = new BufferedReader(isr);
String line=null;
while ( (line = br.readLine()) != null)
if (pw != null)
pw.println(line);
System.out.println(type + ">" + line);
if (pw != null)
pw.flush();
} catch (IOException ioe)
ioe.printStackTrace();
import java.io.File;
import java.io.FileInputStream;
import java.io.FileNotFoundException;
import java.io.FileOutputStream;
import java.io.IOException;
import javax.security.auth.x500.X500Principal;
public class PrincipalInfo {
private static String defInfoString = "CN=Name, O=Organization";
//make it a singleton.
private static class PrincipalInfoHolder{
private static PrincipalInfo instance = new PrincipalInfo();
public static PrincipalInfo getInstance(){
return PrincipalInfoHolder.instance;
private PrincipalInfo(){
public X500Principal getPrincipal(){
String fileName = "principal.der";
File file = new File(fileName);
if (file.exists()){
try {
return new X500Principal(new FileInputStream(file));
} catch (FileNotFoundException e) {
// TODO Auto-generated catch block
e.printStackTrace();
return null;
}else{
return new X500Principal(defInfoString);
public void savePrincipal(X500Principal p) throws IOException{
FileOutputStream fos = new FileOutputStream("principal.der");
fos.write(p.getEncoded());
fos.close();
}Message was edited by:
MidnightJava
Message was edited by:
MidnightJava -
Multiple Failures for new trusted certs with ORA-28857
We are seeing problems with working APIs that use UTL_HTTP over SSL starting to fail with newer trusted certs. Importing these certificates into the wallet just leads to a ORA-28857 and a corrupted wallet. We are using 11.2.0.1. 3 trusted chains have now failed. Examples include the cert chains (hydrant and godaddy certs) from
https://api.betfair.com
https://www.flipkey.com/
I've had a support call open for the last month with no resolution.
If anyone has any potential avenues of workarounds / solutions might just save me some sleepless nights. Our products functionality is dying because of this problem!If the certificates are SHA2, they won't work in 11201.. they are fully supported from 11203 up.
-
Numerous problems with the Adobe AIR runtime for Android
I created a app on the platform Adobe AIR for Android, which requires for AIR. The app is very popular in the Android Market, but many users complain of problems with the installation of Adobe Air runtime.
For example these phones users: LGE LG-P698, LG Pecan, HTC Wildfire. But judging by the fact that users have access to the installation of Air, their phones are compatible with it.
Tell me how do I solve the problem?
In addition, I have a few questions:
1. Decides whether the problem of export application with embedded AIR runtime?
2. I build my apps with the help of ADT. How in this case to make embeding AIR runtime?
3. Is it possible to prompt the user to download and install older versions of AIR? Where to find its?
I hope to help, because the problem is global.Hi Astraport,
I think you should embed the air runtime in your application,
Some time ago I've written a step by step guide, have a look at this post:
http://forums.adobe.com/message/3961579#3961579
I hope it helps -
How do I suppress the "Outdated Java Runtime Environment" message?
Hi,
Does anyone know how I can suppress this "Outdated Java Runtime Environment" message?
I'm currently running 1.4.2.12 alongside the latest version of 1.6.x
Each time I start an applet coded to run with 1.4.2.12 a security warning appears titled "Outdated Java Runtime Environment" saying that:
"A Java applet in this webpage requires the Java Runtime Envronment (JRE 1.4.2 to run. You have JRE 1.4.2 installed, but not the latest release. Using an old release may present security risks. Do you want to run the applet anyway?"
YES / NO
I don't want to upgrade to 1.4.2.19 and this problem will occur again is 1.4.2.20 arrvies...
So how can I suppress this warning message?
I can't see anything in the registry under HKEY_LOCAL_MACHINE\SOFTWARE\JavaSoft\Java Update\Policy that can be turned off.
I've tried the obvious:
EnableAutoUpdateCheck = 0
EnaleJavaUpdate = 0
Update schedule = 0
In fact, everything under "Policy" has been set to "0"
Any ideas? Is there an unknown registry switch or something that can be added to the startup script that turns off this version/security check?
Any advice would be useful.While looking for something else, I accidentally found the following message:
[t-5253971]
The 3rd post in that thread (i.e. the 2nd reply) claims to have an answer. I haven't tried it (though if you do try it I would be interested to know if it works). -
CAF Java-Based COs with SAP Workflows as Runtime Environment?
Hi Folks,
we have a big CAF project hitting us at the moment.
Due to the heavy load we expect we do want to have the traditional SAP workflows as the runtime environment for our GPs.
As far as I know we can transfer WFs designed with CAF GP to the R/3 WF system, right?
My question is know: Can we still develop in Java our CAF objects and use them as we would do that in a portal based GP??
If this should be possible - is this creating an overhead killing the benefit we gain by shifting from portal to the ABAP stack?
Any hint is appreciated!
helgeHi Helge,
Technically, there is no transfer from Guided Procedures to the R/3 Workflow since the process definitions still stay in the GP Design Time. The business logic still takes place on the Java Stack. Only the low-level workflow operations are delegated to the r/3 Workflow.
That's a difficult dilemma that you are facing right now. As far as I know, the configuration to get Guided Procedures running against the Business Workflow (R/3 Workflow) is quite complex and time consuming. Main pain points are callbacks registrations for background steps, user mapping and endpoints configuration. These are the main tasks. But to reach the right configuration, you will have to be tricky and patient.
Furthermore, there will be an overhead due the RFC Roundtrips between the Java Stack and the ABAP Stack.
Hope this helps you.
Best regards,
David -
J2SE RUNTIME ENVIRONMENT UNINSTALL
HOW DO I UNINSTALL J2SE RUNTIME? I HAVE TRIED TO REMOVE IT BY ADD/REMOVE IN CONTROL PANEL. IT RUNS THE INSTALL WINDOW AND IT TELLS ME TO UNINSTALL IT IN CONTROL PANEL.
Hello, I too am going through the same thing ... Can't download and install latest version as it says I already have it and must uninstall first from add/remove programs .. then when I try to uninstall from add/remove programs it says "you already have this version, please uninstall first from add/remove programs!!! I am trying to run a program which requires latest Java and it won't work without it so I am stuck! Have you worked it out at all? regards bevie.
-
Why do I get a warning about downloading J2SE Runtime Environment?
I want to take some courses through SkillSoft, it requires downloading a Java Runtime environment. Before I even started to download I got a Firefox message about something being blocked and that the JRE could cause stability or security problems? I closed the window so I don't have the exact message. Should I download the JRE or not?
Welcome to the Support Communities. So that we can see exactly what you're referring to, please take a screen shot of the warning and post it using ASC's camera icon:
-
J2SE Runtime Environment Update 2
This broke my connection to the 5.0 sensors. I experienced crashes of the browser itself. I know this Java version isn't officially supported by Cisco along with the IDS sensors, but for anyone else experiencing this problem, uninstall the update from "add/remove programs" and you should be back to normal.
-kpruettJust an FYI: the 5.0(1.1) version is a test version for a 5.0(2) Service Pack, and is not available for customer download.
The 5.0(2) Service Pack is still under development and test, but should be made available fairly soon.
In the meantime you will need to downgrade back to 1.5.0_01 to use IDM with version 5.0(1).
Once 5.0(2) Service Pack is released then you will be able to use IDM with the newer 1.5.0_02 Java.
Maybe you are looking for
-
Problem Installing XP Pro on Virtual PC
I'm trying to install XP Professional on iMac G4 2 Ghz. When I run Virtual PC I get the message "OS not found Install an OS on this hard drive" When I go to capture the CD, the option is grey and unavailable. I tried the workaround of going to virtu
-
How do I add web links to PDF files
I have a pdf file with a list of songs, and I need to add a web link to each one. How do I do it? Henry.
-
OK, so I have gone into iTunes on my desktop computer and completely deleted podcasts that I no longer want. I synced my phone (4S) but the podcasts are still showing on my phone. I am already unsubscribed, but I want to totally DELETE them. Why i
-
IWeb update not on my computer?
I added a scrolling text marquee to my website home page using iWeb, it publishes ok. But when I open the website in Safari it doesn't display the marquee, there is a blank space where the marquee should be. When I open the website in Firefox, the
-
CRM IC web- Reading controller "BuPaController" in a BADI
Hi, I'm using BADI, ORDER_SAVE, to check some input before saving the actvitiy in CRM IC Web. I want to read the controller "BuPaController" in the BADI but I'm not succeeding. My question is if it's possible to read the "BuPaController" in a BADI? A