How to configure JSS 4 with Firefox 21.0 to to use with HTTPS client authentication? It´s supposed that JSS allows an applet to access Mozilla user´s cert

We are trying to use HTTPS client certificate based authentication to access a Java Applet in Firefox v21.0. We have followed the instructions as per the below two urls to enable JSS 4 -
https://developer.mozilla.org/en-US/docs/JSS/Using_JSS<br />
http://docs.oracle.com/javase/6/docs/technotes/guides/deployment/deployment-guide/keystores.html<br />
http://download.java.net/jdk8/docs/technotes/guides/deployment/deployment-guide/keystores.html
We are using JRE version 1.7.0_25-b16 Java HotSpot(TM) Client VM in Firefox v21 but we are getting - <br />
security: Accessing keys and certificate in Mozilla user profile: null<br />
security: JSS is not configured
followed by SSK handshake failure when trying to load the client certificate.
<pre><nowiki>javax.net.ssl.SSLHandshakeException: Received fatal alert: handshake_failure
at sun.security.ssl.Alerts.getSSLException(Unknown Source)
at sun.security.ssl.Alerts.getSSLException(Unknown Source)
at sun.security.ssl.SSLSocketImpl.recvAlert(Unknown Source)
at sun.security.ssl.SSLSocketImpl.readRecord(Unknown Source)
at sun.security.ssl.SSLSocketImpl.performInitialHandshake(Unknown Source)
at sun.security.ssl.SSLSocketImpl.startHandshake(Unknown Source)
at sun.security.ssl.SSLSocketImpl.startHandshake(Unknown Source)
at sun.net.www.protocol.https.HttpsClient.afterConnect(Unknown Source)
at sun.net.www.protocol.https.AbstractDelegateHttpsURLConnection.connect(Unknown Source)
at sun.net.www.protocol.https.HttpsURLConnectionImpl.connect(Unknown Source)
at sun.plugin.PluginURLJarFileCallBack.connect(Unknown Source)
at sun.plugin.PluginURLJarFileCallBack.retrieve(Unknown Source)
at sun.net.www.protocol.jar.URLJarFile.retrieve(Unknown Source)
at sun.net.www.protocol.jar.URLJarFile.getJarFile(Unknown Source)
at sun.net.www.protocol.jar.JarFileFactory.get(Unknown Source)
at sun.net.www.protocol.jar.JarURLConnection.connect(Unknown Source)
at sun.plugin.net.protocol.jar.CachedJarURLConnection.connect(Unknown Source)
at sun.plugin.net.protocol.jar.CachedJarURLConnection.getJarFileInternal(Unknown Source)
at sun.plugin.net.protocol.jar.CachedJarURLConnection.getJarFile(Unknown Source)
at com.sun.deploy.security.DeployURLClassPath$JarLoader.getJarFile(Unknown Source)
at com.sun.deploy.security.DeployURLClassPath$JarLoader.access$1000(Unknown Source)
at com.sun.deploy.security.DeployURLClassPath$JarLoader$1.run(Unknown Source)
at java.security.AccessController.doPrivileged(Native Method)
at com.sun.deploy.security.DeployURLClassPath$JarLoader.ensureOpen(Unknown Source)
at com.sun.deploy.security.DeployURLClassPath$JarLoader.<init>(Unknown Source)
at com.sun.deploy.security.DeployURLClassPath$3.run(Unknown Source)
at java.security.AccessController.doPrivileged(Native Method)
at com.sun.deploy.security.DeployURLClassPath.getLoader(Unknown Source)
at com.sun.deploy.security.DeployURLClassPath.getLoader(Unknown Source)
at com.sun.deploy.security.DeployURLClassPath.getResource(Unknown Source)
at sun.plugin2.applet.Plugin2ClassLoader$2.run(Unknown Source)
at java.security.AccessController.doPrivileged(Native Method)
at sun.plugin2.applet.Plugin2ClassLoader.findClassHelper(Unknown Source)
at sun.plugin2.applet.Applet2ClassLoader.findClass(Unknown Source)
at sun.plugin2.applet.Plugin2ClassLoader.loadClass0(Unknown Source)
at sun.plugin2.applet.Plugin2ClassLoader.loadClass(Unknown Source)
at sun.plugin2.applet.Plugin2ClassLoader.loadClass0(Unknown Source)
at sun.plugin2.applet.Plugin2ClassLoader.loadClass(Unknown Source)
at sun.plugin2.applet.Plugin2ClassLoader.loadClass(Unknown Source)
at java.lang.ClassLoader.loadClass(Unknown Source)
at sun.plugin2.applet.Plugin2ClassLoader.loadCode(Unknown Source)
at sun.plugin2.applet.Plugin2Manager.initAppletAdapter(Unknown Source)
at sun.plugin2.applet.Plugin2Manager$AppletExecutionRunnable.run(Unknown Source)
at java.lang.Thread.run(Unknown Source)</nowiki></pre>
The client cert based authentication is working when using IE v8 and IE v9 with the same JRE version (JRE version 1.7.0_25-b16 Java HotSpot(TM) Client VM)
Any help to resolve this issue will be very much appreciated.

Thank you for your response.
Yes we have added the client certificate file (.pfx) in the Firefox browser Certificate manager / Store. It's also showing the certificate in the View Certificate window. We could not resolve it yet.

Similar Messages

Exchange 2013 - How to configure Outlook Anywhere with certificate based authentication?

Hello,
is it possible to secure Outlook Anywhere in Exchange 2013 with certficate based authentication?
I found documentation to configure CBA for OWA and ActiveSync, but not for Outlook Anywhere.
We would like to secure external access to the mailboxes via Outlook by using CBA.
Thanks a lot in advance!
Regards,
André

Hi,
Let’s begin with the answer in the following thread:
http://social.technet.microsoft.com/Forums/en-US/e4b44ff0-4416-44e6-aa78-be4c1c03f433/twofactor-authentication-outlook-anywhere-2010?forum=exchange2010
Based on my experience, Outlook client only has the following three authentication methods:Basic, NTML, Negotiate. And for more information about Security for Outlook Anywhere, you can refer to the following article:
http://technet.microsoft.com/en-us/library/bb430792(v=exchg.141).aspx
If you have any question, please feel free to let me know.
Thanks,
If you have feedback for TechNet Subscriber Support, contact
[email protected]
Angela Shi
TechNet Community Support

How to configure full tunnel with VPN client and router?

I know the concept of split tunnel....Is it possibe to configure vpn client and router full tunnel or instead of router ASA? I know filter options in concentrators is teher options in ISR routers or ASA?

I think it is possible. Following links may help you
http://www.cisco.com/en/US/products/hw/routers/ps274/products_configuration_example09186a0080819289.shtml

Problems with HTTP Client Authentication in jdev 10.1.2.17.84.

Hi,
I've told HTTP Client Authentication doesn't work in jdev 10.1.2.17.84. I need users to be authenticated using a certificate so I'm trying several workarounds but none seems to be valid. Any help?
Thanks.
Luis Serrano.

been there done that.. ive decompiled the oc4j code, debuged down to the core... its big waste of my time... :(
my advice to you is to leave it.. if you do not plan to use oracle ldap sso or xml provider you can do nothing... your hands are tied... they hardcoded everything and if you want more than classic "username & password" custom login module you will have to change oc4j...
there is no point to make a custom loginmodule which utilize a client certificate because oracle JAZN do not suport that type of login module!
just implement a login filter and manage authentication and authorization yourself... just like steve muench did in his java store demo - he didnt use JAZN... :)
anyway current approach do not allow you to leverage JAAS in ADF model layer so why bother to have that in the view/controller layer anyway...
and if i understood correctly oracle plans big changes in this area in the next jdeveloper release, and they alredy said that custom login modules would be depreciated in the next releases...

When using Java Wizard with Firefox 3.6.23 on a Mac OS X 10.6.8 it keep getting an error message: "The Java Wizard cannot run. Please configure your browser to allow Java applets to access the filesystem." Have NO idea how to fix this problem.

When trying to upload files I received the following error: "The Java Wizard cannot run. Please configure your browser to allow Java applets to access the filesystem."

If the problem is with a site that is hosted using MOVEit DMZ by Ipswitch, please notify the site owner of the issue and ask them to apply the patch that is available on the support site to resolve the issue.
This is a better resolution than downgrading your version of Java that was updated due to security issues.

I have a Symphonic 32' HDTV (Dolby Digital Plus). can someone help me figure out how to configure it optimally with my Mac Mini? the display and sound is off. Do I need drivers/software? I'm new to macs.

I have a Symphonic 32' HDTV (Dolby Digital Plus). can someone help me figure out how to configure it optimally with my Mac Mini? the display and sound is off. Do I need drivers/software? I'm new to macs.

Hello, since nobdy else has replied...
Long shot, but...
Open Audio Midi Setup in Applications>Utilities, see the input & output options & KHz setting there.

How to configure bt mail with icloud?

how to configure bt mail with icloud?

iCloud does not handle any mail systems except for its own. BT is not an iCloud mail system, so you can't.

Qosmio F60-L10 - How to configure tv tuner with integrated antenna?

good evening,
i have a notebook toshiba qosmio f60 ,i had read your answer about tv tuner.
my question is : how to configure tv tuner with integrated antenna? thanks

Hi 3171954,
I think Paolo30 is right. Qosmio F60 is equipped with internal DVB-T but in some cases you need an external antenna to pick up the low signal. In most cases only in large citys you dont need an external antenna. If you live on the fringe of the city, normally a cable is needed.
Anyway, do you mean an external antenna or external DVB-T receiver (USB stick)?
Normally Windows media center should recognize the internal DVB-T tuner. Is it listed in device manager? Did you update the driver?

How to configure portal server with the Backend Oracle database

Hi Portal Experts,
we are planning to install Netweaver 04s sp stack 9 full java edition with Oracle 8i on windows platform.
we have the installation docs of portal but we didn't have any idea about how to configure Portal server with the Backend Oracle database at the time of installation or after ost installation of portal.can anyone provide the documentation about this or guide me how to achieve this.
PLZ share ur views---your help would be highly appreciable.
Regds
Phani.

HI
if you r working in Sap enterprise portal use for connection url
jdbc:sap:sqlserver://ilsql01.tlv.sap.corp:1433;DatabaseName=Northwind
ilsql01.tlv.sap.corp:1433 this is your portal url with port number
Northwind is your database name.
for dirver you need to give
com.sap.portals.jdbc.sqlserver.SQLServerDriver
in case if you r working on other than sap say windows along with oracle try to use
Connection URL as jdbc:oracle:<drivertype>:@<database>
Driver name as oracle.jdbc.driver.OracleDriver
ex jdbc:oracle:thick:@localhost:3036:mydb
Oracle implements two types of JDBC drivers:
Thick JDBC drivers built on top of the C-based Net8 client, as well as a Thin (Pure Java) JDBC driver to support downloadable applets. Oracle JDBC drivers are used to create JDBC applications to communicate with Oracle databases.
Oracle extensions to JDBC include the following features:
Data access and manipulation
LOB access and manipulation
Oracle object type mapping
Object reference access and manipulation
Array access and manipulation
Application performance enhancement
*************if the information is helpful to you please reward points************

How to configure IIS webserver with weblogic so that I can invoke servlets without the .wlforward extension

How to configure IIS webserver with weblogic so that I can
invoke servlets without the .wlforward extension
As per the documentation iisforward.dll is registered as a filter and .wlforward
has also been
included as a special file type. However this requires me to key-in ".wlforward"
after my servlet name.
What I want is something like this
http://iis/MyServlet
Please help me find a solution to this
Thanks,
Rishi

I am able to invoke the servlet without the wlforward extension now.
However, now I am required to add /weblogic before the servlet
name otherwise it does not execute the pathtrim property.
I have tried with the pathprepend thing also.
Can we get rid of the /weblogic part also. I just want to execute
my servlet as http://iis/myServlet.
Your help in this regard is greatly appreciated...
Thanks..
"Rishi" <[email protected]> wrote:
>
Thanks for the reply Kumar.
I did follow the instructions as given in the Weblogic documentation
The documentation said to add iisforward.dll as a filter service
and register .wlforward as a special
file type to be handled by iisproxy.dll. For this,
while configuring the IIS server in the Home Directory tab
I added an extension ".wlforward" and the executable as
iisproxy.dll. Is this the way it should have been done...
I also modified the iisproxy.ini file as per the documentation.
I have added the WLForwardPath property and set it to /weblogic.
My server works fine when I give the url as
http://iis/myServlet.wlforward
but it does not work for
http://iis/myServlet and this is the way i'd want it to work.
Please tell me if I am missing something on the configuration part
and if there is something special that needs to be done. I shall
be grateful to you.
Kumar Allamraju <[email protected]> wrote:
http://e-docs.bea.com/wls/docs61/adminguide/isapi.html#101184
Rishi wrote:
How to configure IIS webserver with weblogic so that I can
invoke servlets without the .wlforward extension
As per the documentation iisforward.dll is registered as a filter
and
.wlforward
has also been
included as a special file type. However this requires me to key-in".wlforward"
after my servlet name.
What I want is something like this
http://iis/MyServlet
Please help me find a solution to this
Thanks,
Rishi

How to access CQ configuration settings using CQ HTTP client?

Hi,
I am trying to access CQ configuration in my application using CQ HTTP client. I am able to access through ConfigAdmin, but not directly.
Please suggest a way to access the configuration directly by CQ HTTP client.
Is CQ proxy settings directly available to CQ HTTP client? if so, how do we access it?
Thanks

Yes it is directly available. The proxy does not need to be explicitly configured for each HttpClient since it is done automatically when the com.day.commons.osgi.wrapper.commons-httpclient gets activated. Make sure your bundle imports [1] and call as HttpClient client = new HttpClient();
[1]
org.apache.commons.httpclient,version=3.1.0 from com.day.commons.osgi.wrapper.commons-httpclient (xx)
org.apache.commons.httpclient.methods,version=3.1.0 from com.day.commons.osgi.wrapper.commons-httpclient (xx)

How does create a server with multiple Clients ?

Any people can lead me .
How does create a server with multiple Clients ?
Thanks

For a multithreaded server you will need a thread to listen and at least one thread per client. If the conversation is half duplex, one thread per client works very well, if it's full duplex you will find one thread to send and one to receive much easier to program.
I posted a Simple Socket Server that uses 1+2*clients threads.

After downloadeding the latest Java plugin, I start to receive "Please configure your browser to allow Java applets to access the filesystem" message when I try to run a download wizard. What do I need to do? BTW, IE does not have this problem.

I had no problem using a download wizard Java applet to download file to my computer from an SFTP site using Firefox. When I tried to do the same thing with Chrome, I was told to download the latest plugin. Once I did that, I receive the following message when I run the downlaod wizard:
The Java Wizard cannot run.
Please configure your browser to allow Java applets to access the filesystem.
I got the same message using Firefox and Chrome. However, I have no problem using IE to run the same download wizzard. Please help.

If the problem is with a site that is hosted using MOVEit DMZ by Ipswitch, please notify the site owner of the issue and ask them to apply the patch that is available on the support site to resolve the issue.
This is a better resolution than downgrading your version of Java that was updated due to security issues.

How can I print from my MacBook Pro to Canon MP560 using rear tray? I can't find that "option" in the print selection possibilities.

How can I print from my MacBook Pro to Canon MP560 using rear tray? I can't find that "option" in the print selection possibilities.

Sure can.
With a document open in Pages, select to print so that you can see the print dialog as shown below.
Note that to see this view, you may need to press the Show Details button in the bottom left corner. In the image above, since I have the expanded view displayed, this button changes to Hide Details
So with the view shown, first change the Presets menu to Default Settings. Then click the Layout drop menu and select Quality & Media. Make the changes you want and then click on the Presets menu and select Save Current Settings as Preset...
At the next window, give the Preset a name and select the Only this Printer radio button and then click OK to save it. That's it.
As for the Preset that you already have, if you no longer want this preset then you can delete it via the Show Presets menu pane that you've used already.

How to configure SharePoint HNSC with a reverse proxy server so that HNSC Share Point URLs are not exposed to end users.

Could you please let me know how SharePoint HNSC can be configured with a reverse proxy server so that HNSC Share Point URLs are not exposed to end users.
In normal path based site collections/web applications, reverse proxy configuration can be done using alternate access mappings with Public URL = "proxy URL", internal = "HNSC Share Point URL" so that share point sends response back
to Public URL = "proxy URL".
In Host Named Site Collections, alternate access mappings are not supported. Each HNSC is designed to have only one URL in each zone. Zone is one of the five zones(Default,Intranet,Internet,Custom,Extranet) with each of which only one alternate
URL is associated. This is what we are able to get using power shell command "Set-SPSiteUrl", but this will not help us to get the response back to proxy URL after a request sent to share point because we could not find any mechanism in share
point HNSC to respond to a different URL(proxy URL). Consequently, Share Point URLs are exposed to external users.
Below share point article in MSDN blog is symmetrical to what we are observing with Share Point 2013 and Proxy Server. It mentions that internal HNSC URLs can’t be hidden using any proxy server. If hiding the internal Share Point URLS is a requirement,
it suggests to use a web application instead of host named site collections.
Though I’m also observing the same behavior with Share Point 2013 HNSC, Could you please confirm my understanding is correct.
http://blogs.msdn.com/b/kaevans/archive/2012/03/27/what-every-sharepoint-admin-needs-to-know-about-host-named-site-collections.aspx
Excerpt from above article-
"Host Named Site Collections Only Use One Host Name
Continuing on the discussion on AAMs and host named site collections, you cannot use multiple host names to address a site collection in SharePoint 2010. Because host-named site collections have a single URL, they do not support alternate access mappings and
are always considered to be in the Default zone. This is important if you are using a reverse proxy to provide access to external users. Products like Unified Access Gateway 2010 allow external users to authenticate to your gateway and access a site
as http://uag.sharepoint.com and forward the call to http://portal.sharepoint.com. Remember that URL rewriting is not permitted. Further, a site collection can only respond to one host name. This means if you are using a reverse proxy, it must forward the
calls to the same URL. If your networking team has a policy against exposing internal URLs externally, you must instead use web applications and extend the web application using an alternate access mapping."<u5:p></u5:p>

Hi Satish,
You are right that only one URL is allowed for each zone of the host-name site collections in both SharePoint 2010 and SharePoint 2013.
It is by design that each host-name site collection only support one URL for each zone.
The article below is about RTM version of SharePoint, and it is the same for SharePoint 2013 with the latest CU.
https://support.microsoft.com/en-us/kb/2826457
So to make the URL of HNSC not exposed to external users is not supported, you need to use path-based sites instead.
Best regards.
Thanks
TechNet Community Support
Please remember to mark the replies as answers if they help, and unmark the answers if they provide no help. If you have feedback for TechNet Support, contact
[email protected]

How to configure JSS 4 with Firefox 21.0 to to use with HTTPS client authentication? It´s supposed that JSS allows an applet to access Mozilla user´s cert

Similar Messages

Maybe you are looking for