SHA2 certificates and WebAuth with 7.4 code

Hi All,
are SHA2 certificates supported on the 2504 and 5508, the reason is that I am doing WebAuth and the Certificate
I got from GoDaddy was an SHA1 signed by a Root CA (GO Daddy Class 2 Certification Authority Root Certificate) that
is not in the cert root store on the Android phones I am using, these phones only have the GO Daddy Root Certificate Authority - G2,
root cert in their certificate store, which only signs certificates as SHA2.
So if I get the certificate reissued will it be accepted by controller
TIA

So the issue was how you initially generated the certificate, or you were just asking but didn't initially try it?
Thanks,
Scott
Help out other by using the rating system and marking answered questions as "Answered"

Similar Messages

How to install maintenance certificate and License with solution Manger?

Hi all,
Is this possible to install maintenance certificate and License with solution Manger atomatically ?
Regards,
Neni

Hi Swaroop,
There is a feature in SAP Solution manager through which we can instal the licenses.
Please see below links,
http://help.sap.com/saphelp_sm70ehp1_sp23/helpdata/en/41/42b6397c604278b6626f3d570c98c8/content.htm
http://help.sap.com/saphelp_sm70ehp1_sp23/helpdata/en/89/a7c08d740c4cffb491f98801f17d30/content.htm
Thanks,
Jagadish.

I am trying to reinstall my Quicktime 7 Pro after cleaning out my MacBook OSX 10.5.8 following a hacking. I have Quicktime player and reregistered with the registration code for Quicktime 7 pro and it seems to be successfully registered but not in Appl

Hello everybody. I am trying to reinstall my Quicktime 7 Pro after having my MacBook OSX 10.5.8 cleaned out following a hacking. I have Quicktime player and I reregistered with the purchased registration code for Quicktime 7 pro. It seems to be successfully registered with "Quicktime 7 Pro" appearing under the inserted registration code but it is not showing in Applications folder and I do not know how to access it or what to do. Thanks for reading this. I hope you can help me. Aidan from Dublin, Ireland.

Inapplicable advice removed; misread the OS version.

WLC: which software-version support SHA2 certificates for Web Authentification and Web Management ?

Hello,
I tried to install new SHA2 3th-Party certificates on our WLCs. There are old WiSM1-Boards and 2504 to support our old 1230 Access Points, running 7.0.251.2, which didn't install it, although the config manual for 7.6 and 8.0 say that SHA2 certificates are supported since 7.0.250.0. When I tried to install the SHA2-certificates I get the message "File transfer failed" an the log says:
*TransferTask: Dec 12 13:22:14.394: #UPDATE-3-CERT_INST_FAIL: updcode.c:1869 Failed to install Webauth certificate. rc = 1
*TransferTask: Dec 12 13:22:14.394: #SSHPM-3-KEYED_PEM_DECODE_FAILED: sshpmcert.c:4085 Cannot PEM decode private key
I tried to install the same certificates on our WiSM2-Boards, running 7.4.121.0 and I failed too. The same certificates could be installed on a 2504 running 8.0.100 without any problems.
In all 3 cases I tried to install unchained certificates for web management and Level 3 chained certificates for web authentication. I used the following guides to get the certificates (e.g. taken from the config manual 8.0.100):
http://www.cisco.com/c/en/us/support/docs/wireless/4400-series-wireless-lan-controllers/109597-csr-chained-certificates-wlc-00.html
http://www.cisco.com/c/en/us/support/docs/wireless-mobility/wlan-security/70584-csr-wlc-00.pdf
Which software versions support SHA2 certificates and which didn't ? Is the a list for it ?
Regards

Hello,
I solved the problem. First I used a Debian Linux system with Openssl 1.0.1. After I searched the internet using one of the log messages above I found sites which mentioned to use Openssl 0.9.x. So I tried a productive and security fixes Debian Linux System running Openssl 0.9.8 and I succeeded. The wlcs accepted the certificate files and used it after a reboot. The Web GUI still shows a SHA1 Fingerprint, but the certificate signature Algorithm is SHA2:
Signature Algorithm: sha256WithRSAEncryption
When you check the openssl.org homepage Openssl 0.9.8 is still one of the actual version of openssl and is still available and fixed. But the Openssl Roadmap says:
"We don't want to have to maintain too many branches. This is likely to include a timescale for the EOL of version 0.9.8"
I don't know the differences between certificates made with openssl 0.9.8 and 1.0.1. Is there anybody who can explain it to me ?
Regards

ISE EAP-Chaining with machine, certificate and domain credentials

Good morning,
A customer wants to do the following for their corporate wireless users (all clients will be customer assets):
Corp. wireless to authenticate with 2-factor authentication:
•1. Certificate
•2. Machine auth thru AD
•3. Domain creds
When client authenticates, they want to match on 2 out of the 3 conditions before allowing access.
Clients are Windows laptops and corporate iPhones.
Certs can be issued thru GPO and MDM for iPhones
Client supplicant on laptops is native Windows - which I understand is a compatibility issue from this thread: https://supportforums.cisco.com/thread/2185627
My first question is: can this be done?
Second question: how would i implement this from an AuthC/AuthZ perspective?
Thanks in advance,
Andrew

You can do this configuring anyconnect with NAM modules on endpoints! But I don't make sense configure some clients with certificate and others with domains credentials...
For your information, I'm actually configuring EAP-Chaining on ISE 1.2 and i'm gotting some problems. The first one I got with windows 8, for some reason windows was sending wrong information about the machine password but I solved the problem installing a KB on windows 8 machines (http://support.microsoft.com/kb/2743127/en-us). The second one I got with windows 7 that are sending information correctly about domain but wrong information about user credentials, on ISE logs I can see that windows 7 are sending user "anonymous" + machine name on the first longin... after windows 7 start if I remove the cable and connect again the authentication and authorization happen correctly. I still invastigate the root cause and if there is a KB to solve the problem as I did with windows 8.
Good luck and keep in touch.
http://support.microsoft.com/kb/2743127/en-us

Lining some divs up, one with a fireworks html and another with a jQuery slideshow

I am having an issue lining two divs up within a div. One div has a fireworks html in it (by the way, I can't figure out why that the button states arent' working. I inserted the code via the insert menu > image objects > fireworks html, but for some reason the button states work. When I open the navbar.htm in the file browser, it opens it up in dreamweaver and it works perfectly in live preview). The other div has a simple jQuery slideshow. I have these two divs in a greater overall div named "div id=wrapper". How can I line these up so that the nav div and body div are flush against each other within the wrapper div?
I plan on putting additional divs above and below the wrapper div for more content. If anyone has insight on why the fireworks html isnt working when inserted, that would be great!!
Here is the code:
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />
<title>Richard J. Craddock Designs</title>
<script type="text/javascript">
var _gaq = _gaq || [];
_gaq.push(['_setAccount', 'UA-3119473-8']);
_gaq.push(['_setDomainName', 'none']);
_gaq.push(['_setAllowLinker', true]);
_gaq.push(['_trackPageview']);
(function() {
    var ga = document.createElement('script'); ga.type = 'text/javascript'; ga.async = true;
    ga.src = ('https:' == document.location.protocol ? 'https://ssl' : 'http://www') + '.google-analytics.com/ga.js';
    var s = document.getElementsByTagName('script')[0]; s.parentNode.insertBefore(ga, s);
</script>
<link href="stylesMain.css" rel="stylesheet" type="text/css" />
<style type="text/css">
body {
background-color: #2f2f2f;
width: 50 em;
.fadein { position:relative; height:332px; width:500px; }
.fadein img {
position:absolute;
left:0px;
top:0px;
width: 784px;
}td img {display: block;}td img {display: block;}td img {display: block;}td img {display: block;}td img {display: block;}td img {display: block;}td img {display: block;}
</style>
<script src="scripts/jquery.min.js"></script>
<script>
$(function(){
$('.fadein img:gt(0)').hide();
setInterval(function(){$('.fadein :first-child').fadeOut().next('img').fadeIn().end().appendTo('.fadein');}, 3000);
</script>
</head>
<body>
<div id="wrapper">
    <div id="navdiv">
      <table style="display: inline-table;" border="0" cellpadding="0" cellspacing="0" width="148">
        
        <tr>
          <td><img src="images/spacer.gif" alt="" name="undefined_2" width="148" height="1" border="0" id="undefined_2" /></td>
          <td><img src="images/spacer.gif" alt="" name="undefined_2" width="1" height="1" border="0" id="undefined_2" /></td>
        </tr>
        <tr>
          <td><a href="http://www.rjcraddockdesigns.com/company profile.php" target="_self" onmouseout="MM_nbGroup('out');" onmouseover="MM_nbGroup('over','craddocknavbar_r1_c1_s1','images/craddocknavbar_r1_c1_s2. jpg','craddocknavbar_r1_c1_s4.jpg',1);" onclick="MM_nbGroup('down','navbar1','craddocknavbar_r1_c1_s1','images/craddocknavbar_r1_ c1_s3.jpg',1);"><img name="craddocknavbar_r1_c1_s1" src="images/craddocknavbar_r1_c1_s1.jpg" width="148" height="65" border="0" id="craddocknavbar_r1_c1_s1" alt="Richard J. Craddock Landscape Design in Nantucket: Company Profile" /></a></td>
          <td><img src="images/spacer.gif" alt="" name="undefined_2" width="1" height="65" border="0" id="undefined_2" /></td>
        </tr>
        <tr>
          <td><a href="http://www.rjcraddockdesigns.com/services.php" target="_self" onmouseout="MM_nbGroup('out');" onmouseover="MM_nbGroup('over','craddocknavbar_r2_c1_s1','images/craddocknavbar_r2_c1_s2. jpg','images/craddocknavbar_r2_c1_s4.jpg',1);" onclick="MM_nbGroup('down','navbar1','craddocknavbar_r2_c1_s1','images/craddocknavbar_r2_ c1_s3.jpg',1);"><img name="craddocknavbar_r2_c1_s1" src="images/craddocknavbar_r2_c1_s1.jpg" width="148" height="65" border="0" id="craddocknavbar_r2_c1_s1" alt="Richard J. Craddock Landscape Design in Nantucket: Services" /></a></td>
          <td><img src="images/spacer.gif" alt="" name="undefined_2" width="1" height="65" border="0" id="undefined_2" /></td>
        </tr>
        <tr>
          <td><img name="craddocknavbar_r3_c1_s1" src="images/craddocknavbar_r3_c1_s1.jpg" width="148" height="395" border="0" id="craddocknavbar_r3_c1_s1" alt="" /></td>
          <td><img src="images/spacer.gif" alt="" name="undefined_2" width="1" height="395" border="0" id="undefined_2" /></td>
        </tr>
      </table>
    </div>
     <div id="bodydiv">
    <div class="fadein">
<img src="images/slideshow/1jquery.jpg">
<img src="images/slideshow/2jquery.jpg">
<img src="images/slideshow/3jquery.jpg">
<img src="images/slideshow/4jquery.jpg">
<img src="images/slideshow/5jquery.jpg">
<img src="images/slideshow/6jquery.jpg">
<img src="images/slideshow/7jquery.jpg">
<img src="images/slideshow/8jquery.jpg">
</div>
</div>
    </div>
<div id="navigationlower">
    <p><a href="http://www.rjcraddockdesigns.com/index.php" title="Richard J. Craddock Designs Home Page">Home</a> - <a href="http://www.rjcraddockdesigns.com/company profile.php" title="Richard J. Craddock Designs">Profile</a>- <a href="http://www.rjcraddockdesigns.com/services.php" title="Richard J. Craddock Designs">Services</a></p>
<strong>Richard J. Craddock Designs, 2011</strong></p>
<p><strong><a href="http://cwws.org" title="Common Wealth Web Solutions" target="_new">Designed by CWWS</a></strong></p>
<p><a href="https://www.facebook.com/RJCLandscapeDesigns"><img src="facebook icon.png" width="60" height="60" /></a></p>
</div>
</body>
</html>

Now that I got rid of the fireworks html and replaced with swf, the code is a bit shorter:
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />
<title>Richard J. Craddock Designs</title>
<script src="scripts/swfobject_modified.js" type="text/javascript"></script>
<script type="text/javascript">
var _gaq = _gaq || [];
_gaq.push(['_setAccount', 'UA-3119473-8']);
_gaq.push(['_setDomainName', 'none']);
_gaq.push(['_setAllowLinker', true]);
_gaq.push(['_trackPageview']);
(function() {
    var ga = document.createElement('script'); ga.type = 'text/javascript'; ga.async = true;
    ga.src = ('https:' == document.location.protocol ? 'https://ssl' : 'http://www') + '.google-analytics.com/ga.js';
    var s = document.getElementsByTagName('script')[0]; s.parentNode.insertBefore(ga, s);
</script>
<link href="stylesMain.css" rel="stylesheet" type="text/css" />
<style type="text/css">
body {
background-color: #2f2f2f;
width: 50 em;
.fadein { position:relative; height:332px; width:500px; }
.fadein img {
position:absolute;
left:0px;
top:0px;
width: 784px;
}td img {display: block;}td img {display: block;}td img {display: block;}td img {display: block;}td img {display: block;}td img {display: block;}td img {display: block;}
</style>
<script src="scripts/jquery.min.js"></script>
<script>
$(function(){
$('.fadein img:gt(0)').hide();
setInterval(function(){$('.fadein :first-child').fadeOut().next('img').fadeIn().end().appendTo('.fadein');}, 3000);
</script>
</head>
<body>
<div id="wrapper">
    <div id="navdiv">
      <object id="FlashID" classid="clsid:D27CDB6E-AE6D-11cf-96B8-444553540000" width="148" height="525">
        <param name="movie" value="images/craddocknavbar.swf" />
        <param name="quality" value="high" />
        <param name="wmode" value="opaque" />
        <param name="swfversion" value="6.0.65.0" />
        
        <param name="expressinstall" value="scripts/expressInstall.swf" />
        
        
        <object type="application/x-shockwave-flash" data="images/craddocknavbar.swf" width="148" height="525">
          
          <param name="quality" value="high" />
          <param name="wmode" value="opaque" />
          <param name="swfversion" value="6.0.65.0" />
          <param name="expressinstall" value="scripts/expressInstall.swf" />
          
          <div>
            <h4>Content on this page requires a newer version of Adobe Flash Player.</h4>
            <p><a href="http://www.adobe.com/go/getflashplayer"><img src="http://www.adobe.com/images/shared/download_buttons/get_flash_player.gif" alt="Get Adobe Flash player" width="112" height="33" /></a></p>
          </div>
          
        </object>
        
      </object>
    </div>
     <div id="bodydiv">
    <div class="fadein">
<img src="images/slideshow/1jquery.jpg">
<img src="images/slideshow/2jquery.jpg">
<img src="images/slideshow/3jquery.jpg">
<img src="images/slideshow/4jquery.jpg">
<img src="images/slideshow/5jquery.jpg">
<img src="images/slideshow/6jquery.jpg">
<img src="images/slideshow/7jquery.jpg">
<img src="images/slideshow/8jquery.jpg">
</div>
</div>
    </div>
<div id="navigationlower">
    <p><a href="http://www.rjcraddockdesigns.com/index.php" title="Richard J. Craddock Designs Home Page">Home</a> - <a href="http://www.rjcraddockdesigns.com/company profile.php" title="Richard J. Craddock Designs">Profile</a>- <a href="http://www.rjcraddockdesigns.com/services.php" title="Richard J. Craddock Designs">Services</a></p>
<strong>Richard J. Craddock Designs, 2011</strong></p>
<p><strong><a href="http://cwws.org" title="Common Wealth Web Solutions" target="_new">Designed by CWWS</a></strong></p>
<p><a href="https://www.facebook.com/RJCLandscapeDesigns"><img src="facebook icon.png" width="60" height="60" /></a></p>
</div>
<script type="text/javascript">
swfobject.registerObject("FlashID");
</script>
</body>
</html>

Problems with Oracle Web Logic 10.3.6, certificates and proxies

Good morning.
We are trying to establish a SSL connection using Apache Cxf and WebLogic Server 10.3.6.
For that, we are passing through a proxy. Using Apache Tomcat, the test is ok, we can connect to the endpoint correctly. But in WebLogic 10.3.6, we have problems with the certificates.
In our code, we are loading the certificates programatically.
The web-services-config.xml is the following:
<?xml version="1.0" encoding="UTF-8"?>
<beans
     xsi:schemaLocation=" http://www.springframework.org/schema/beans http://www.springframework.org/schema/beans/spring-beans-2.5.xsd http://cxf.apache.org/configuration/security http://cxf.apache.org/schemas/configuration/security.xsd http://cxf.apache.org/transports/http/configuration http://cxf.apache.org/schemas/configuration/http-conf.xsd http://cxf.apache.org/jaxws http://cxf.apache.org/schemas/jaxws.xsd http://www.springframework.org/schema/context http://www.springframework.org/schema/context/spring-context-2.5.xsd"
     xmlns:http="http://cxf.apache.org/transports/http/configuration"
     xmlns:sec="http://cxf.apache.org/configuration/security" xmlns:jaxws="http://cxf.apache.org/jaxws"
     xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns="http://www.springframework.org/schema/beans">
     <jaxws:client address="@SNE.SNE_WS_URL@"
          serviceClass="com.bankia.sne.ws.clientes.buzonAPESNE.APESNEBuzonWSTipoPuerto"
          id="puertoAPESNEBuzonWS" />
     <http:conduit name="@SNE.SNE_WS_URL@">
          <http:client Connection="Keep-Alive" AutoRedirect="true"
               ProxyServerType="HTTP" ProxyServerPort="@SNE.PROXY_PORT@"
               ProxyServer="@SNE.PROXY_HOST@" />
          <http:proxyAuthorization>+
               <sec:UserName>@SNE.PROXY_USER@</sec:UserName>
               <sec:Password>@SNE.PROXY_PASSWORD@</sec:Password>
          </http:proxyAuthorization>
          <http:tlsClientParameters>
               <sec:cipherSuitesFilter>
                    
                    <sec:include>.*EXPORT.*</sec:include>
                    <sec:include>.*EXPORT1024.*</sec:include>
                    <sec:include>.*WITHDES_.*</sec:include>
                    <sec:include>.*WITHNULL_.*</sec:include>
                    <sec:exclude>.*DHanon_.*</sec:exclude>
               </sec:cipherSuitesFilter>
          </http:tlsClientParameters>
     </http:conduit>
</beans>
That's the code used for establish the CXF connection:
private void configuraConexion(Buzon buzon){
          try {
               LOGGER.debug("Configurando conexión con el sevicio Web para el buzón con id " + buzon.getId() + " ...");
               Client client = ClientProxy.getClient(puertoAPESNEBuzonWS);
               HTTPConduit httpConduit = (HTTPConduit) client.getConduit();
               TLSClientParameters tlsParams = httpConduit.getTlsClientParameters();
               Certificado certificado = buzon.getCertificado();
               byte[] bytes = certificado.bytesCertificado();
               CertificadoSerializable certSerializado = (CertificadoSerializable)Serializador.desserializar(bytes);
               //Cargamos el truststore de disco
               TrustManagerFactory trustFactory = TrustManagerFactory.getInstance(TrustManagerFactory.getDefaultAlgorithm());
               KeyStore truststore = KeyStore.getInstance(Propiedades.getProperty(KEY_SERVICIO_WEB_ALMACEN_TRUSTSTORE));
               String contrasenia = Propiedades.getProperty(KEY_SERVICIO_WEB_TRUSTORE_PASSWORD);
               // -- provide your truststore
               File ficheroTruststore = null;
               String rutaTrustore = Propiedades.getProperty(KEY_SERVICIO_WEB_TRUSTORE_RUTA) Propiedades.getProperty(KEY_SERVICIO_WEB_NOMBRE_TRUSTSTORE);
               LOGGER.debug("rutaTrustore --> " + rutaTrustore);
               if (rutaTrustore!=null){+
                    ficheroTruststore = new File(rutaTrustore);
          URL url = null;
               if(ficheroTruststore == null || !ficheroTruststore.exists()){
                    url = Localizador.getResource(Propiedades.getProperty(KEY_SERVICIO_WEB_NOMBRE_TRUSTSTORE));
                    ficheroTruststore = new File(url.getPath());
                    truststore.load(url.openStream(), contrasenia.toCharArray());
               }else{
                    truststore.load(new FileInputStream(ficheroTruststore), contrasenia.toCharArray());
               LOGGER.info("[ServicioWSBuzonAPESNEImpl.configuraConexion] Fichero truststore.pks recuperado de "+ficheroTruststore.getPath());
               trustFactory.init(truststore);
               TrustManager[] tm = trustFactory.getTrustManagers();
               tlsParams.setTrustManagers(tm);
               //Cargamos el Keystore de base de datos
               KeyStore keyStore = KeyStore.getInstance(Propiedades.getProperty(KEY_SERVICIO_WEB_TIPO_ALMACEN_KEYSTORE));
               keyStore.load(null, certificado.getContrasenia().toCharArray());
               keyStore.setKeyEntry(certificado.getAlias(), certSerializado.getClavePrivada(), certificado.getContrasenia().toCharArray(), certSerializado.getCadena());
               // set our key store+
               // (used to authenticate the local SSLSocket to its peer)
               KeyManagerFactory keyFactory = KeyManagerFactory.getInstance(KeyManagerFactory.getDefaultAlgorithm());
               keyFactory.init(keyStore, certificado.getContrasenia().toCharArray());
               KeyManager[] km = keyFactory.getKeyManagers();
               tlsParams.setKeyManagers(km);
               httpConduit.setTlsClientParameters(tlsParams);
               LOGGER.debug("Conexión configurada satisfactoriamente");
          }catch (Exception e) {
               LOGGER.error("Error al configurar la conexión del servicio Web", e);
               throw new WSBuzonException("Error al configurar la conexión del servicio Web: " + e.getMessage());
We don't know how to solve this issue? Please, could you help us?
Thanks in advance,
Jaime.
Edited by: j2eedevelopment on 10-jul-2012 10:05

Hi Zack, thanks for the answer.
I've cleaned the code below.
Our problem is the following: we wan't to use many keystores, in function the user who is connected in the application. For that reason, we wan't to give the keyStore from Java Client, because we've saw that, in WebLogic, you can select one keystore, but only one. For that reason, we wantto change the keystore in run time execution, dinamically.
The problem we have found are the following:
1) If we configure WebLogic with the correct keystore and trustore, we are not able to change keysotre and trustore in runtime execution, so we have to us always the same keystore and we don't want this.
2) Also, I'm trying now to use JaxWS instead Apache Cxf, and I've tried to put the ssl properties of the system with the following code:
System.setProperty(JAVAXNETSSLTRUST_STORE, trustore);
System.setProperty(JAVAXNETSSLTRUST_STORE_PASSWORD, trustStorePassword);
System.setProperty(JAVAXNETSSLKEY_STORE, keyStore);
System.setProperty(JAVAXNETSSLKEY_STORE_PASSWORD, keyStorePassword);
System.setProperty(JAVAXNETSSLKEY_STORE_TYPE, keyStoreType);
Thanks in advance,
Jaime.

Using a SHA2 certificate with 12.1.1 (Oracle Wallet Manager 10.1.0.5)

Hi folks,
I'm trying to enable SSL on my 12.1.1 system, but I've got a bit of a problem.
I've already logged a SR on this, so I already know that you cannot use SHA2 SSL certificates with Oracle Wallet Manager 10.1.0.5, which is part of the 10.1.3 tech stack. I started the SR on the EBS side, but it was passed on to the security group, and closed there. My question is, is there something that I don't know? Is there an upgrade path in 12.1.x that would include an upgrade to the OWM, or is there some sort of workaround? I'll be opening another SR tomorrow, but wanted to see if I was missing something simple.
We have an internal certificate server (Microsoft AD), and the root certificate, which I need to import, is SHA2. I'm being told that they cannot generate a SHA1 root certificate, and would have to stand up another certificate authority. OWM 10.1.0.5 can't handle SHA2, so I'm stuck.
Anybody been there done that?
Thanks very much,
-Adam vonNieda

I'm trying to enable SSL on my 12.1.1 system, but I've got a bit of a problem. What kind of problems?
I've already logged a SR on this, so I already know that you cannot use SHA2 SSL certificates with Oracle Wallet Manager 10.1.0.5, which is part of the 10.1.3 tech stack. I started the SR on the EBS side, but it was passed on to the security group, and closed there. My question is, is there something that I don't know? Is there an upgrade path in 12.1.x that would include an upgrade to the OWM, or is there some sort of workaround? I'll be opening another SR tomorrow, but wanted to see if I was missing something simple.
We have an internal certificate server (Microsoft AD), and the root certificate, which I need to import, is SHA2. I'm being told that they cannot generate a SHA1 root certificate, and would have to stand up another certificate authority. OWM 10.1.0.5 can't handle SHA2, so I'm stuck. I am not sure if SHA2 is certified with EBS R12 so you might need to ask this question to Oracle Support. According to the following docs, SHA1 can be used with no issues.
Enabling SSL in Oracle E-Business Suite Release 12 [ID 376700.1] To BottomTo Bottom
SSL Primer: Enabling SSL in Oracle E-Business Suite Release 12 (Trial Certificate Example) [ID 1425103.1]
Thanks,
Hussein

Cannot renew code signing certificate - maybe bug with german Umlaut?

Hello!
Since one month I expierence a message that I should renew my code signing certificate and today I thought it is time to stop this message.
Because I could not find anything about renewing the certificate in Mountain Lion I used the KB-article that discribes the process for Lion.
http://support.apple.com/kb/HT5358
after that I get this in at my terminal:
sudo /Applications/Server.app/Contents/ServerRoot/usr/sbin/certadmin --recreate-CA-signed-certificate 'myserver.domain.de Signierungszertifikate für Code' 'IntermediateCA_MYSERVER.DOMAIN.DE_1' 7D3E2458
when I press return I get this:
/Applications/Server.app/Contents/ServerRoot/usr/sbin/certadmin Cannot find the certificate: myserver.domain.de Signierungszertifikate für Code
I checked it again and again - I cannot find any typo or something like that - so maybe Mountain Lion wants to renew the certificate in a different way or certadmin cannot cope with german "Umlaute" - "für" - in english for - but I did not gave this name it was given by the system when I setup the server one year ago.
Every hint is welcome, bye
Christoph

I am stupid - I read the KB article again and there it says
"When entering the hexadecimal serial number, ensure that all letters are entered in lower case."
I retyped the command with lower case hex numbers and everything was fine
Bye,
Christoph

Checking Account and help with code ?

Hi all..my computer hung up on me, so I'm not sure if my last post went through. First of all thank you all for helping me out the other day with my question on the Bank Account. It continues :)
I'm trying to work on each class one by one..when I test my Checking Account, it isn't printing out the correct balance. The string method to print this is coming from the Withdrawal class...so I know it has to be somewhere in there but I can't seem to figure out why it isn't totalling the balance...or how to get it too.
Then when I test my MyBank class, it hangs up on line 63..which I could swear I have written correctly. Again I am getting a NullPointerException and I honestly think I have the line of code written right, but I'm guessing I dont.
Any help would be appreciated.
public abstract class BankAccount {
    public static final String bankName = "BrianBank";
    protected String custName;
    protected String pin;
    protected Transaction[] history;
    private double balance;
    private double amt, amount;
    private double bal, initBal;
    private int transactions;
    private final int MAX_HISTORY = 100;
    private int acct;
    protected BankAccount(String cname, String cpin, double initBal) {
     custName = cname;
     pin = cpin;
     balance = initBal;
     history = new Transaction[MAX_HISTORY];
     transactions =0;
    public double getBalance() {
     return balance;
    public void withdraw(double amt) {
     history [transactions] = new Withdrawal (bal, amt);
   balance = bal;
     amount = amt;
     balance -= amt;
   transactions = transactions + 1;
    public void deposit(double amt) {
     history [transactions] = new Deposit (bal, amt);
     balance = bal;
     amount = amt;
     balance += amt;
     transactions = transactions +1;
    // abstract method to return account number
    public abstract int getAcctNum();
    // abstract method to return a summary of transactions as a string
    public abstract String getStatement();
public class CheckingAccount extends BankAccount implements IncursFee
      private int transactions;
      private double balance, initBal, amt;
      private static final int NOFEE_WITHDRAWALS = 10;
      private static final double TRANSACTION_FEE = 5.00;
      public static final String bankName = "iBank";
      public static final int STARTING_ACCOUNT_NUMBER = 10000;
      private int checkingAccountNumber = STARTING_ACCOUNT_NUMBER;
      private static int accountNumberCounter = STARTING_ACCOUNT_NUMBER;
      private String custName;
      private String pin;
      public CheckingAccount (String cname, String cpin, double initBal)
         super (cname, cpin, initBal);
          custName = cname;
          pin = cpin;
         balance = initBal;
         accountNumberCounter++;
         checkingAccountNumber = accountNumberCounter;
      //initialize a count of transactions
         transactions = 0;
       public double getBalance()
         return balance;
       public void withdraw(double amt)
        super.withdraw (amt);
         transactions ++;
       public void deposit(double amt)
       super.deposit (amt);
         transactions ++;
       public int getAcctNum ()
         return checkingAccountNumber;
       public String getStatement ()
         int i = 0;
         String output = "";
         while ( i < history.length && history[i] != null )
            output += history.toString () + "\n";
i++;
return output;
public void deductFee(double fee)
if (transactions > NOFEE_WITHDRAWALS)
{ fee = TRANSACTION_FEE *(transactions - NOFEE_WITHDRAWALS);
super.withdraw(fee);
balance -=fee;
transactions = 0;
public interface IncursFee {
public abstract void deductFee(double fee);
public abstract class Transaction {
protected double initBal;
protected double tranAmt;
// constructor
protected Transaction(double bal, double amt) {
     initBal = bal;
     tranAmt = amt;
abstract public String toString();
public class Withdrawal extends Transaction
     private double initBal;
     private double amount;
     private static NumberFormat fmt = NumberFormat.getCurrencyInstance();
     public Withdrawal (double bal, double amt)
          super (bal, amt);
          initBal = bal;
          amount = amt;
     public String toString ()
     return "Balance : " + fmt.format(initBal) + "\n" + "Withdrawal : " + fmt.format(amount);
import java.text.NumberFormat;
public class Deposit extends Transaction
     private double initbal, balance;
     private double amount;
     private static NumberFormat fmt = NumberFormat.getCurrencyInstance();
     public Deposit (double bal, double amt)
     super (bal, amt);
     initbal = bal;
     amount = amt;
     public String toString ()
     return "Balance : " + fmt.format(initbal) + "\n" + "Deposit : " + fmt.format(amount);
public class TestCheckingAcct {
public static void main(String[] args) {
     BankAccount b1 = new CheckingAccount("Harry", "1234", 500.0);
     System.out.println (b1.getBalance ());
     b1.withdraw(1);
     b1.withdraw(1);
     b1.withdraw(1);
     b1.withdraw(1);
     b1.withdraw(1);
     b1.deposit(50);
     b1.withdraw(1);
     b1.withdraw(1);
     b1.withdraw(1);
     b1.withdraw(1);
     b1.withdraw(1);
     b1.withdraw(1);
     b1.withdraw(1);
     b1.deposit(10);
     b1.withdraw(1);
     System.out.println(b1.getStatement());
// This interface specifies the functionality requirements of a bank
public interface Bank {
public abstract int openNewAccount(String customerName, String customerPIN, String accType, double initDepAmount);
public abstract void processWithdrawal(int accNum, String pin, double amount);
// executes a deposit on the specified acct by the amount
public abstract void processDeposit(int accNum, String pin, double amount);
// returns the balance of acct
public abstract double processBalanceInquiry(int accNum, String pin);
// returns summary of transactions
public abstract String processStatementInquiry(int accNum, String pin);
import java.util.ArrayList;
public class MyBank implements Bank
private ArrayList<BankAccount> savAccounts = new ArrayList<BankAccount>(); //dynamically grows
private ArrayList<BankAccount> chkAccounts = new ArrayList<BankAccount>(); //dynamically grows
private SavingsAccount sav;
private CheckingAccount chk;
private int accNum;
private String customerName, customerPIN, accType, pin;
private double initDepAmount, amount, balance;
public int openNewAccount(String customerName, String customerPIN, String accType, double initDepAmount)
this.customerName = customerName;
this.customerPIN = customerPIN;
this.accType = accType;
this.initDepAmount = initDepAmount;
if ( accType.equals("Savings"))
BankAccount savAcct = new SavingsAccount(customerName, customerPIN, initDepAmount);
try
savAccounts.add(savAcct);
catch (ArrayIndexOutOfBoundsException savAccounts)
return savAcct.getAcctNum();
else
CheckingAccount chkAcct = new CheckingAccount(customerName, customerPIN, initDepAmount);
     try
chkAccounts.add(chkAcct);
catch (ArrayIndexOutOfBoundsException chkAccounts)
return chkAcct.getAcctNum();
public void processWithdrawal (int accNum, String pin, double amount)
     this.accNum = accNum;
     this.pin = pin;
     this.amount = amount;
if (accNum >10000 && accNum < 20000)
     chk.withdraw (amount);
if (accNum >50000 && accNum <60000)
     sav.withdraw (amount);
public void processDeposit (int accNum, String pin, double amount)
     this.accNum = accNum;
     this.pin = pin;
     this.amount = amount;
if (accNum >10000 && accNum < 20000)
     chk.deposit (amount);
if (accNum >50000 && accNum <60000)
     sav.deposit (amount);
public double processBalanceInquiry (int accNum, String pin)
     this.accNum = accNum;
     this.pin = pin;
     this.balance = 0;
if (accNum >10000 && accNum <20000)
     balance = chk.getBalance ();
if (accNum >50000 && accNum <60000)
     balance = sav.getBalance ();
return balance;
public String processStatementInquiry(int accNum, String pin)
     this.accNum = accNum;
     this.pin = pin;
     this.statement = "";
if (accNum >10000 && accNum <20000)
statement = chk.getStatement ();
if (accNum >50000 && accNum <60000)
statement= sav.getStatement ();
     return statement;

Here's some quick code review:
public abstract class BankAccount {
public static final String bankName =
me = "BrianBank";
protected String custName;
protected String pin;
protected Transaction[] history;
private double balance;
private double amt, amount;
private double bal, initBal;
private int transactions;// make MAX_HISTORY private static final, too.
private final int MAX_HISTORY = 100;
private int acct;
protected BankAccount(String cname, String cpin,
pin, double initBal) {
     custName = cname;
     pin = cpin;
     balance = initBal;
     history = new Transaction[MAX_HISTORY];
     transactions =0;
public double getBalance() {
     return balance;
public void withdraw(double amt) {
     history [transactions] = new Withdrawal (bal, amt);
balance = bal;
     amount = amt;
     balance -= amt;// ++transactions above would be elegant.
transactions = transactions + 1;
public void deposit(double amt) {
     history [transactions] = new Deposit (bal, amt);
     balance = bal;
     amount = amt;
     balance += amt;
     transactions = transactions +1;
// abstract method to return account number// why abstract?
public abstract int getAcctNum();
// abstract method to return a summary of
y of transactions as a string// why abstract?
public abstract String getStatement();
public class CheckingAccount extends BankAccount
implements IncursFee
private int transactions;
private double balance, initBal, amt;
private static final int NOFEE_WITHDRAWALS =
WALS = 10;
private static final double TRANSACTION_FEE =
_FEE = 5.00;
public static final String bankName = "iBank";
public static final int STARTING_ACCOUNT_NUMBER
NUMBER = 10000;
private int checkingAccountNumber =
mber = STARTING_ACCOUNT_NUMBER;
private static int accountNumberCounter =
nter = STARTING_ACCOUNT_NUMBER;// BankAccount has a custName attribute; why does CheckingAccount need
// one if it extends BankAccount?
private String custName;
private String pin;
public CheckingAccount (String cname, String
String cpin, double initBal)
super (cname, cpin, initBal);
custName = cname;
pin = cpin;
balance = initBal;
accountNumberCounter++;
checkingAccountNumber =
tNumber = accountNumberCounter;
//initialize a count of transactions
transactions = 0;
// same as BankAccount - why rewrite it?
public double getBalance()
return balance;
// same as BankAccount - why rewrite it?
public void withdraw(double amt)
super.withdraw (amt);
transactions ++;
// same as BankAccount - why rewrite it?
public void deposit(double amt)
super.deposit (amt);
transactions ++;
          // same as BankAccount - why rewrite it?
public int getAcctNum ()
return checkingAccountNumber;
public String getStatement ()
int i = 0;
String output = "";
while ( i < history.length && history[i] !=
ory[i] != null )
output += history.toString () + "\n";
i++;
return output;
public void deductFee(double fee)
if (transactions > NOFEE_WITHDRAWALS)
{ fee = TRANSACTION_FEE *(transactions -
ansactions - NOFEE_WITHDRAWALS);
super.withdraw(fee);
balance -=fee;
transactions = 0;
public interface IncursFee {
public abstract void deductFee(double fee);
public abstract class Transaction {
protected double initBal;
protected double tranAmt;
// constructor
// why protected? make it public.
protected Transaction(double bal, double amt) {
     initBal = bal;
     tranAmt = amt;
abstract public String toString();
public class Withdrawal extends Transaction
     private double initBal;
     private double amount;
private static NumberFormat fmt =
= NumberFormat.getCurrencyInstance();
     public Withdrawal (double bal, double amt)
          super (bal, amt);
          initBal = bal;
          amount = amt;
     public String toString ()
return "Balance : " + fmt.format(initBal) + "\n" +
+ "Withdrawal : " + fmt.format(amount);
import java.text.NumberFormat;
public class Deposit extends Transaction
     private double initbal, balance;
     private double amount;
private static NumberFormat fmt =
= NumberFormat.getCurrencyInstance();
     public Deposit (double bal, double amt)
     super (bal, amt);
     initbal = bal;
     amount = amt;
     public String toString ()
return "Balance : " + fmt.format(initbal) + "\n" +
+ "Deposit : " + fmt.format(amount);
public class TestCheckingAcct {
public static void main(String[] args) {
BankAccount b1 = new CheckingAccount("Harry",
, "1234", 500.0);
     System.out.println (b1.getBalance ());
     b1.withdraw(1);
     b1.withdraw(1);
     b1.withdraw(1);
     b1.withdraw(1);
     b1.withdraw(1);
     b1.deposit(50);
     b1.withdraw(1);
     b1.withdraw(1);
     b1.withdraw(1);
     b1.withdraw(1);
     b1.withdraw(1);
     b1.withdraw(1);
     b1.withdraw(1);
     b1.deposit(10);
     b1.withdraw(1);
     System.out.println(b1.getStatement());
// This interface specifies the functionality
requirements of a bank
public interface Bank {
public abstract int openNewAccount(String
String customerName, String customerPIN, String
accType, double initDepAmount);
public abstract void processWithdrawal(int
(int accNum, String pin, double amount);
// executes a deposit on the specified acct by
t by the amount
public abstract void processDeposit(int accNum,
Num, String pin, double amount);
// returns the balance of acct
public abstract double processBalanceInquiry(int
(int accNum, String pin);
// returns summary of transactions
public abstract String
ring processStatementInquiry(int accNum, String
pin);
import java.util.ArrayList;
public class MyBank implements Bank
private ArrayList<BankAccount> savAccounts =
unts = new ArrayList<BankAccount>(); //dynamically
grows
private ArrayList<BankAccount> chkAccounts =
unts = new ArrayList<BankAccount>(); //dynamically
grows
private SavingsAccount sav;
private CheckingAccount chk;
private int accNum;
private String customerName, customerPIN,
erPIN, accType, pin;
private double initDepAmount, amount, balance;
public int openNewAccount(String customerName,
erName, String customerPIN, String accType, double
initDepAmount)
this.customerName = customerName;
this.customerPIN = customerPIN;
this.accType = accType;
this.initDepAmount = initDepAmount;
if ( accType.equals("Savings"))
BankAccount savAcct = new
vAcct = new SavingsAccount(customerName, customerPIN,
initDepAmount);
try
savAccounts.add(savAcct);
catch (ArrayIndexOutOfBoundsException
Exception savAccounts)
return savAcct.getAcctNum();
else
CheckingAccount chkAcct = new
hkAcct = new CheckingAccount(customerName,
customerPIN, initDepAmount);
     try
chkAccounts.add(chkAcct);
catch (ArrayIndexOutOfBoundsException
Exception chkAccounts)
return chkAcct.getAcctNum();
public void processWithdrawal (int accNum,
accNum, String pin, double amount)
     this.accNum = accNum;
     this.pin = pin;
     this.amount = amount;
if (accNum >10000 && accNum < 20000)
     chk.withdraw (amount);
if (accNum >50000 && accNum <60000)
     sav.withdraw (amount);
public void processDeposit (int accNum, String
String pin, double amount)
     this.accNum = accNum;
     this.pin = pin;
     this.amount = amount;
if (accNum >10000 && accNum < 20000)
     chk.deposit (amount);
if (accNum >50000 && accNum <60000)
     sav.deposit (amount);
public double processBalanceInquiry (int accNum,
String pin)
     this.accNum = accNum;
     this.pin = pin;
     this.balance = 0;
if (accNum >10000 && accNum <20000)
     balance = chk.getBalance ();
if (accNum >50000 && accNum <60000)
     balance = sav.getBalance ();
return balance;
public String processStatementInquiry(int accNum,
m, String pin)
     this.accNum = accNum;
     this.pin = pin;
     this.statement = "";
if (accNum >10000 && accNum <20000)
statement = chk.getStatement ();
if (accNum >50000 && accNum <60000)
statement= sav.getStatement ();
     return statement;
Very bad style with those brace placements. Pick a style and stick with it. Consistency is the key.
Your code isn't very readable.
You don't have a SavingsAccount here anywhere, even though your MyBank uses one.
You use JDK 1.5 generics yet you've got ArrayList as the static type on those declarations. Better to use the interface type List as the compile time type on the LHS.
You have a lot of compile time problems, and some incomprehensible stuff, but I was able to change it enough to my TestCheckingAcct run to completion. No NPE exceptions.
I'm not sure I agree with your design.
No SavingsAccount. The accounts I have ALL incur fees - no need for a special interface there. Savings accounts are usually interest bearing. That's the way they behave differently from checking accounts. Where do you have that?
You rewrite too much code. If you put behavior in the abstract BankingAccount class (a good idea), the whole idea is that concrete classes that extend BankingAccount don't need to overload any methods whose default behavior is correct for them.
I don't know that I'd have separate Deposit and Withdrawal to implement Transaction. I'd make Transaction concrete and have starting balance, ending balance, and a transaction type String (e.g., "DEPOSIT", "WITHDRAWAL")
It'd be good to see some thought put into exception handling. I don't see an OverdrawnException anywhere. Seems appropriate.
No transfer methods from one account to another. I often do that with my bank.
That's enough to get started.

Web Intelligence: Save Report as PDF and with embedded HTML code

Hi all.
Sorry but I'm not able to find any post about this matter, please feel free to provide links if you know existing topics about this problem.
We created a beautiful report with HTML5 code embedded into a blank cell and we are now trying to export it in a printable format (e.g.: PDF or HTML).
As you know (as per manual information) it is not possible to export a report with embedded HTML code and keeping it in the output (cell with embedded HTML code is rendered blank).
My question is: is there a known workaround or an alternative solution to export the report and keep its content?
Print screen is not a valid option :-P
Thanks for the support or any suggestions
Stecas

Product limitation; vote for change on ideaplace, etc. I don't believe there is an *easy* workaround, but see:
https://scn.sap.com/thread/3149287
HTH
NMG

I need to make a task with less as3 code and more timeline structure and event dispatcher !

I went to an interview in a big company. I had to make a task in which there is a wall with 3 lines and 5 columns filled with bombs.When you click on a bomb the bomb changes its scale, a robot enters, goes under the bomb and takes it, then goes to a smaller wall, makes the bomb smaller and place it at the same place it had been in the previous wall.I made the task with tween througout as3 code.The interviewer told me it was good but i need to make it with the less code possible and with more complex timeline structure and to use event dispatcher.What is the best way to do this ?

The immediate thing that comes to mind is they might want to see that you can balance work between design teams and development teams.
To do that, the robots movements (pick up bomb, bomb grows/shrinks, arms/treads/legs moving, sequences of 'doing things') can be timeline based so animators can work on those separate from code.
Developers would be working on the logic of keeping score, moving the robot around to the correct spot with path detection, collision detection, etc.
It's very similar to thinking in simple factories (which Flash is good at being automatically with timelines), and a bit of MVC (or just VC in some cases).
Big companies have lots of different types of employees so you'll probably be very specific in your role so you're efficient.

Since the most recent Firefox update 3.6.8 by banking institution no longer shows as having a secure encrypted connection, however, my bank assures me all is well with their certificates and that is a problem with the new Firefox browser update, can you g

Since the most recent Firefox update 3.6.8 my banking institution no longer shows as having a secure encrypted connection, however, my bank assures me all is well with their certificates and that is a problem with the new Firefox browser update, can you give me some idea why it is doing this?
== This happened ==
Every time Firefox opened
== Right after the new Firefox update

Hello Anne.
Can you please try it in a new (temporary) Firefox profile and see if the issue is still present? See [http://support.mozilla.com/en-US/kb/Managing+profiles this article] to know how to create a new Firefox profile. Please report back the results.

I cannot install Creative Suite 5.5 on my Windows 7 Professional. I keep getting error message: "Exit Code: 15 - Media DB sync failed". I have disabled UAC and Startup items and Services with no luck. Can you please help?

I cannot install Creative Suite 5.5 on my Windows 7 Professional. I keep getting error message: "Exit Code: 15 - Media DB sync failed". I have disabled UAC and Startup items and Services with no luck. Can you please help?

I am sorry Erickkasner but there is no longer direct support provided for Creative Suite 5.5 installation issues.
You are welcome to post any specific errors you are able to discover within your installation log to this discussion. Since you are using Windows then Exit Code 15 could mean one of the following:
Installer database is corrupted
Update pending to your operating system
Improper permissions set for the Media.db
The installation log file should provide additional insight into the exact error you are experiencing. Please make sure to use the find command to look for the words 'ERROR' and 'FATAL' to locate the relevant error messages.

I have a license for all adobe files but recently i had a virus and all my files were deleted.Now when i want to have them back with my redemption code it says that i cannot use it anymore.But my license is not expired.How do i get my files back??

i have a license for all adobe files but recently i had a virus and all my files were deleted.Now when i want to have them back with my redemption code it says that i cannot use it anymore.But my license is not expired.How do i get my files back??

Your redemption code was used to acquire an activation code. The activation code is what you need to use when you want to reinstall/enable the software again. Check your Adobe account online to see if the number(s) can be found there.

SHA2 certificates and WebAuth with 7.4 code

Similar Messages

Maybe you are looking for