SOAP Certificate issue...High priority...please check
We are getting the below error in SOAP receiver side and 2 day ago certificates got expired and we imported new certificates
when we trigger an idoc in receiver side SOAP is showing the below error.in receiver communication channel monitoring.
SOAP: response message contains an error
XIAdapter/HTTP/ADAPTER.HTTP_EXCEPTION - HTTP 401 [ISS.0084.9004] Access
Denied.
Please suggest me how to get the logs for certifaces which are working fine are not.
Please do reply as soon as possible.
Hi Siddhartha,
http://www.ncsu.edu/it/mirror/mysql/doc/maxdb/en/3c/384c4005a99523e10000000a1550b0/content.htm
If you are not sorting by the primary key ( E.g. using the ORDER BY PRIMARY key ... Instead use ABAP SORT + DELETE ADJACENT DUPLICATES on an internal table, ...
http://www.sap-img.com/abap/performance-tuning-for-data-selection-statement.htm
This links will help you to solve your problem
Thanks
sunil
Similar Messages
-
Barcode input display issue (high priority)
hi,
I'm working on barcode program. Problem what i'm facing is when i scanned a barcode the data is not filling corresponding my module pool screen. My barcode is horizontal barcode.
My barcode data's are Bill no, Bill data, Po number, po data etc..
Bill number comes 10 character length and bill data 10 character length and Po no is 10 character length and po date is 10 character length. Once i scanned the barcode the data will fill first bill no properly and bill data accepting only 6 or 5 or three character and Po number is carrying only 5 or 7 or 8 character as simlar same as po data and others also. Some time will fill all the data properly.
This is more important to clear. Any one having any idea regarding this please help he.
Regards,
BabHi,
Please Check that the cursor is placed properly for the diffrent field that you scan......
or
Check the RF Gun can support or can read the full lenght of the barcode Format that ur scaning.
Cheers,
Naveen -
Deleting Primary Key --- High Priority -- Please help us
There is a custom defined table which had two primary keys and then moved the same to production. Since we got some requiremnent we added two more primary keys in the table in development server. We also activated the same in Development server. Now we need to delete the recently added two primary keys. It is a most important custom table. It is not allowing us to delete.
It gives us error message about lot of dependencies and foreign key used in other tables.
Please help us resolve this issue. FULL POINTS WILL BE AWARDED FOR THE SOLUTION. please help us resolve the same. Bottle neck situation.
Regards,
SiddharthaHi Siddhartha,
http://www.ncsu.edu/it/mirror/mysql/doc/maxdb/en/3c/384c4005a99523e10000000a1550b0/content.htm
If you are not sorting by the primary key ( E.g. using the ORDER BY PRIMARY key ... Instead use ABAP SORT + DELETE ADJACENT DUPLICATES on an internal table, ...
http://www.sap-img.com/abap/performance-tuning-for-data-selection-statement.htm
This links will help you to solve your problem
Thanks
sunil -
2 masters 1 details.. high priority please!!
here is the scenerio:
====================
Block 'B' has two masters. The 2 masters are NOT realted to each other.
My form has:
One master block called 'A'.
One child block called 'B'.
one more block 'C'.
-> A(one) to B(many) is an unbroken relations ship. They cannot exist without each other.
->> There is no relationship between 'A' AND 'C'. (both masters)
->>>For each 'C'(master) there may be (ZERO) or (ONE) or (more than ONE) rows in 'B'.
I dont know how to desgin the form for this relationship.
->'C' master block table's data is already in table, so need not worry about inserting into that table. only updating and I can take care of that on ON-INSERT trigger.
->If execute_query for 'B' fetches 10 rows, how to show 'B' and 'C'??
total confusion.
Thanks in advance.
prasad.I cannot have 2 forms because:
Data entry happens like this.
Each batch has 50 incoming mails. It will be given a batch number (master record).
Each mail paper is a child record. Each given a unique number. (child record). A check accompanies each mail.
Data entry operator enters all the data manually into system.
->>>
But,if the mail has a check AND ALSO an INVOICE_STAMP(optional) then: she enters only INVOICE_NUMBER.
Data entry operator has no control over the child record, all fields are disabled and I have to get all the data from different tables related to that INVOICE_NUMBER that she enters. she has to just compare and save.
============
What I am doing is, if 2nd master record has 5 child records, I am just repeating the master record 5 times along with child record.
The problem is,
1)when I query the child record, 2nd master records are not appearing. Only child records are coming. (I MESSED UP SOMEWHERE, I AM LOOKING INTO IT.)
2)when I query the 2nd master record being on the 2nd block, nothing is appearing. Query caused no records to retrieve. There are records in the table.
Thanks for the reply.
I know it is difficult for you to give me a solution. I will find out myself by trail and error.
prasad -
Its a very high priority please help me
the error is requested resource is not available
//web.xml//
<?xml version="1.0" encoding="ISO-8859-1"?>
<web-app xmlns="http://java.sun.com/xml/ns/j2ee"
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
xsi:schemaLocation="http://java.sun.com/xml/ns/j2ee http://java.sun.com/xml/ns/j2ee/web-app_2_4.xsd"
version="2.4">
<display-name>Name for Loginportal</display-name>
<description>
This is a simple web application with a source code organization
based on the recommendations of the Application Developer's Guide.
</description>
<servlet>
<servlet-name>Loginportal</servlet-name>
<servlet-class>com.hp.ifc.install.verify.Loginportal</servlet-class>
</servlet>
<servlet-mapping>
<servlet-name>Loginportal</servlet-name>
<url-pattern>Loginportal</url-pattern>
</servlet-mapping>
</web-app>
//Loginportal.java///
package com.hp.ifc.install.verify;
import javax.servlet.http.HttpServlet;
import java.io.IOException;
import javax.servlet.ServletException;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;
import javax.servlet.RequestDispatcher;
import com.hp.ifc.install.database.Loginportalbean;
* Servlet Class
* @web.servlet name="Loginportal"
* display-name="Name for Loginportal"
* description="Description for Loginportal"
* @web.servlet-mapping url-pattern="/Loginportal"
* @web.servlet-init-param name="A parameter"
* value="A value"
public class Loginportal extends HttpServlet {
protected void doGet(HttpServletRequest req, HttpServletResponse resp) throws ServletException,IOException
// TODO Auto-generated method stub
RequestDispatcher rd;
String username=req.getParameter("J_USERNAME");
String password=req.getParameter("J_PASSWORD");
Loginportalbean lb = new Loginportalbean();
if(lb.isUservalid(username,password))
rd=req.getRequestDispatcher("success.html");
else
rd=req.getRequestDispatcher("fail.html");
url:http://ustca130/Loginportal
please helpI think this might be helpful
<servlet-mapping>
<servlet-name>Loginportal</servlet-name>
<url-pattern>/Loginportal</url-pattern>
</servlet-mapping>url-pattern should be like "/Loginportal"
and what is ur webapplication name?
i m gettting confused with your url. the url will be like
http://<localhost>:<portno>/<webappname>/<urlpattern>
Edited by: Diablo_Chiru on Apr 21, 2008 11:10 PM -
Hello, I've started having an issue downloading songs and apps from iTunes to our PC which has Windows XP Professional installed. We also use Karspersky Anti-Virus and Firefox as an internet browser. Have never had this issue before, it comes up with "An unknow error has occured and downloads are stopped with an error 8003. Also says please check your network connection" We have no issue connecting to iTunes store or the network so not sure how to fix this. It is very frustrating. Have checked Windows Firewall and iTunes is an exception, can't think of anything else why it won't work.
I sounds as though you need to start again. The following article tells you how to completely remove iTunes and Quicktime. If you didn't actually install iTunes you wont find it in add/remove programs so you can't do that bit, but still delete the iTunes folder in Program Files as advised in the article.
http://docs.info.apple.com/article.html?artnum=93698
Once you have got rid of them, try installing the latest version of iTunes. There is a link to it in the article.
Itunes wont move your music for you, get iTune sgoing then ask again. -
Please check for security vunerabilities in Preview, the "Movie" application, and Adobe. My computer has been hacked into using a T-Mobile smartphone.
I have nosy relatives and neighbors.If you're trying to report a security vulnerability in Mac OS X, this isn't the right forum. Try https://ssl.apple.com/support/security/
You'll also need to add way more detail than you've given here. There's nothing actionable in your post that gives any kind of clue as to what kind of security issue you think you've uncovered. -
Hello，everyone.
I am using virtex6 FPGA and trying to download mcs file to PROM and have failed.
I download .bit file to FPGA and succeed.
When i try to download .mcs file to PROM XCF128X-FTG64C(BPI Flash) and choose Slave SelectMAP Mode
and the process is about 68% it fails.
The message below the IMapct is as belows:
done.
PROGRESS_END - End Operation.
Elapsed time = 0 sec.
// *** BATCH CMD : identifyMPM
// *** BATCH CMD : assignFile -p 1 -file "C:/Users/Administrator/Desktop/TEST/LED/led.bit"
'1': Loading file 'C:/Users/Administrator/Desktop/TEST/LED/led.bit' ...
done.
INFO:iMPACT:2257 - Startup Clock has been changed to 'JtagClk' in the bitstream stored in memory,
but the original bitstream file remains unchanged.
UserID read from the bitstream file = 0xFFFFFFFF.
INFO:iMPACT:501 - '1': Added Device xc6vlx240t successfully.
INFO:iMPACT - Current time: 2014/3/13 8:48:14
// *** BATCH CMD : Program -p 1
PROGRESS_START - Starting Operation.
Maximum TCK operating frequency for this device chain: 66000000.
Validating chain...
Boundary-scan chain validated successfully.
INFO:iMPACT - 1: Over-temperature condition detected! [ 230.52C > 120.00C]
1: Device Temperature: Current Reading: 230.52 C, Max. Reading: 230.52 C
1: VCCINT Supply: Current Reading: 2.997 V, Max. Reading: 2.997 V
1: VCCAUX Supply: Current Reading: 2.997 V, Max. Reading: 2.997 V
'1': Programming device...
Match_cycle = NoWait.
Match cycle: NoWait
LCK_cycle = NoWait.
LCK cycle: NoWait
done.
INFO:iMPACT:2219 - Status register values:
INFO:iMPACT - 0011 1111 0111 1110 0100 1011 1100 0000
INFO:iMPACT:579 - '1': Completed downloading bit file to device.
INFO:iMPACT:188 - '1': Programming completed successfully.
Match_cycle = NoWait.
Match cycle: NoWait
LCK_cycle = NoWait.
LCK cycle: NoWait
INFO:iMPACT - '1': Checking done pin....done.
'1': Programmed successfully.
PROGRESS_END - End Operation.
Elapsed time = 23 sec.
Selected part: XCF128X
// *** BATCH CMD : attachflash -position 1 -bpi "XCF128X"
// *** BATCH CMD : assignfiletoattachedflash -position 1 -file "C:/Users/Administrator/Desktop/TEST/LED/leda.mcs"
INFO:iMPACT - Current time: 2014/3/13 8:49:32
// *** BATCH CMD : Program -p 1 -dataWidth 16 -rs1 NONE -rs0 NONE -bpionly -e -v -loadfpga
PROGRESS_START - Starting Operation.
Maximum TCK operating frequency for this device chain: 66000000.
Validating chain...
Boundary-scan chain validated successfully.
INFO:iMPACT - 1: Over-temperature condition detected! [ 230.52C > 120.00C]
1: Device Temperature: Current Reading: 230.52 C, Max. Reading: 230.52 C
1: VCCINT Supply: Current Reading: 2.997 V, Max. Reading: 2.997 V
1: VCCAUX Supply: Current Reading: 2.997 V, Max. Reading: 2.997 V
'1': BPI access core not detected. BPI access core will be downloaded to the device to enable operations.
INFO:iMPACT - Downloading core file D:/Xilinx/14.3/ISE_DS/ISE/virtex6/data/xc6vlx240t_jbpi.cor.
'1': Downloading core...
Match_cycle = NoWait.
Match cycle: NoWait
LCK_cycle = NoWait.
LCK cycle: NoWait
done.
INFO:iMPACT:2219 - Status register values:
INFO:iMPACT - 0011 1111 0111 1110 0100 1011 1100 0000
INFO:iMPACT:2492 - '1': Completed downloading core to device.
Current cable speed is set to 6.000 Mhz.
Cable speed is default to 3Mhz or lower for BPI operations.
Current cable speed is set to 3.000 Mhz.
Setting Flash Control Pins ...
Setting Configuration Register ...
Populating BPI common flash interface ...
Common Flash Interface Information Query completed successfully.
INFO:iMPACT - Common Flash Interface Information from Device:
INFO:iMPACT - Verification string: 51 52 59
INFO:iMPACT - Manufacturer ID: 49
INFO:iMPACT - Vendor ID: 01
INFO:iMPACT - Device Code: 18
Setting Flash Control Pins ...
Using x16 mode ...
Setting Flash Control Pins ...
Setting Configuration Register ...
'1': Erasing device...
'1': Start address = 0x00000000, End address = 0x008CE03B.
done.
'1': Erasure completed successfully.
Setting Flash Control Pins ...
Using x16 mode ...
Setting Flash Control Pins ...
Setting Configuration Register ...
INFO:iMPACT - Using Word Programming.
'1': Programming Flash.
done.
Setting Flash Control Pins ...
'1': Flash Programming completed successfully.
Using x16 mode ...
Setting Flash Control Pins ...
Setting Configuration Register ...
'1': Reading device contents...
done.
'1': Verification completed.
Setting Flash Control Pins ...
Current cable speed is resumed to 6.000 Mhz.
'1': Configuration data download to FPGA was not successful. DONE did not go high, please check your configuration setup and mode settings.
`Elapsed time = 814 sec.
and i find many people have met the same thing. But they are spartan series FPGA and i try to low the Resistances of Mode pins,M0 M1 and M2, but the problem does not been solved.
I have read the status Registers and find there is an over-temperature state
and in Impact i could not readback the registers. It is strange.
I am anxious about this problem and have not solved it yet
What reasons may it be?
Hope for your answer, thank youHi~I want to know if you solve the configuration problem for virtex-6?
As I encounter the same configuration problem, I want to consult you with some question.
Can I have your email?
gszakacs wrote:
I have measured the VCCINT and find it is 1.0V, not 2.997V;
That is not at all surprising. I always assumed the problem is with reading the XADC (system monitor) block and not with the voltage or temperature.
my Reference board is ML605
That would have been nice to know at the beginning...
It seems that you have selected the correct mode, assuming your jumpers are set as required in the ML605 Hardware User's Guide. See table 1-27, table 1-33 and the note below it about switch S1.
I'm not that familiar with the details of this reference design, but it may be that the slave SelectMap circuitry requires a reset or power cycle to actually configure the FPGA. Have you tried power-cycling to see if the FPGA boots from the flash?
I'd also suggest that you select the V6 in the JTAG chain view, then go to the debug menu of Impact and select Read Device Status (this is from memory, but it's something like that). That will not only show the bits of the configuration status register, but also describe what each bit means. Among other things you can check the state of the FPGA's configuration logic and the Mode pins.
-
I am using SOAP message over HTTPS.
Our architecture:
Client submission server uses TOMCAT 4.1..29, JDK 1.4.2 with JSSE
I am using com.sun.net. ssl.HttpsURLConnection object to open url connection with submission server.
Submsiion server at the other end has IIS configred to authenticate digital certificate information for the incoming SOAP envelope.
My code works fine except in some instances IIS does not find the certificate info in HTTP session. What causes to strip off this certificate info? If I use browser to submit the same SOAP message it works fine for all submissions, that means IIS server at the other end always receives the certificate info.
I eliminated the doubt on Tomcat web server at my end by simply running the similar code as pure java application using commnad prompt and still I get the same issue ( certificate info is not in session)
Please note that our network has no proxy server. SOAP message file size is just few KB.
Please check the code below and any feedback, suggestion is wel come
==============================================
Code sample :
import javax.net.ssl.SSLSocket;
import javax.net.ssl.SSLSocketFactory;
import javax.servlet.ServletException;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;
import com.sun.net.ssl.HttpsURLConnection;
import com.sun.net.ssl.KeyManagerFactory;
import com.sun.net.ssl.SSLContext;
sendMessage(File output, ActionForm form, ActionMapping mapping, HttpServletRequest request) throws Exception {
SignatureForm signForm = (SignatureForm) form;
String xyz = null;
System.setProperty("java.protocol.handler.pkgs","com.sun.net.ssl.internal.www.protocol");
java.security.Security.addProvider(new com.sun.net.ssl.internal.ssl.Provider());
System.setProperty("UseSunHttpHandler", "true");
System.setProperty("javax.net.ssl.trustStore", signForm.getCertPath() + "cacerts");
String filePath = request.getSession().getServletContext().getContext("/les").getRealPath("/") + "/cert/";
System.setProperty("javax.net.ssl.keyStore", filePath + "" + signForm.getCertFileName());
System.setProperty("javax.net.ssl.keyStorePassword", signForm.getPassword());
System.setProperty("javax.net.ssl.keyStoreType", "PKCS12");
System.setProperty("file.encoding", "UTF-8");
//System.setProperty("javax.net.debug", "all");
String pathKeyStore = filePath + "" + signForm.getCertFileName();
System.out.println("Key store path :" + pathKeyStore);
char[] passphrase = signForm.getPassword().toCharArray();
FileInputStream fis = new FileInputStream(pathKeyStore);
KeyStore ks = KeyStore.getInstance("PKCS12");
ks.load(fis, passphrase);
fis.close();
KeyManagerFactory kmf = KeyManagerFactory.getInstance("SunX509");
kmf.init(ks, passphrase);
sslcontext = SSLContext.getInstance("TLS", "SunJSSE");
sslcontext.init(kmf.getKeyManagers(), null, null);
Enumeration en1 = null;
en1 = ks.aliases();
String alias = null;
while (en1.hasMoreElements()) {
alias = (String) en1.nextElement();
System.out.println("Alias is " + alias);
System.out.println("Submitting Certificate details are " + ks.getCertificate(alias).toString());
java.net.URL url = new URL(null, signForm.getSubmitUrl(), new com.sun.net.ssl.internal.www.protocol.https.Handler());
// signForm.getSubmitUrl(): https://shop.gateway.elite.com/PPC/BatchServlet
FileInputStream fileInputStream = new FileInputStream(output);
int bytesRead, bytesAvailable, bufferSize;
byte[] buffer;
int maxBufferSize = 40 * 1024 * 1024; // 40MB limit on submission file
try {
SSLSocketFactory factory = sslcontext.getSocketFactory();
SSLSocket socket = (SSLSocket) factory.createSocket(url.getHost(), 443);
socket.startHandshake();
socket.setKeepAlive(true);
HttpsURLConnection.setDefaultSSLSocketFactory(factory);
HttpsURLConnection.setDefaultAllowUserInteraction(true);
HttpsURLConnection conn = (HttpsURLConnection) url.openConnection();
// Use a post method.
conn.setRequestMethod("POST");
// Allow Outputs and Inputs
conn.setDoOutput(true);
conn.setDoInput(true);
// Don't use a cached copy.
conn.setUseCaches(false);
System.out.println("--------------------------");
System.out.println("Submission Start:" + new Date().toString());
DataOutputStream wr = new DataOutputStream(conn.getOutputStream());
bytesAvailable = fileInputStream.available();
bufferSize = Math.min(bytesAvailable, maxBufferSize);
buffer = new byte[bufferSize];
// read file and write to Dtrade server
bytesRead = fileInputStream.read(buffer, 0, bufferSize);
while (bytesRead > 0) {
wr.write(buffer, 0, bufferSize);
bytesAvailable = fileInputStream.available();
bufferSize = Math.min(bytesAvailable, maxBufferSize);
bytesRead = fileInputStream.read(buffer, 0, bufferSize);
BufferedReader rd1 = new BufferedReader(new InputStreamReader(conn.getInputStream()));
StringBuffer strBuff = new StringBuffer();
String line1;
while ((line1 = rd1.readLine()) != null) {
System.out.println(line1);
strBuff.append(line1);
signForm.setSoapResponseMsg(strBuff.toString());
rd1.close();
wr.close();
conn.disconnect();
socket.close();
String patternStr1 = "faultcode";
String patternStr2 = "receiptID";
if (strBuff.indexOf(patternStr1) > 0) {
System.out.println("Submission unsuccessful:" + new Date().toString());
System.out.println("--------------------------");
signForm.setFilingStatus("F");
if (signForm.getSubmitUrl().indexOf(patternStr3) > 0)
signForm.setSubmitUrl("test");
else
signForm.setSubmitUrl("trade");
if (strBuff.indexOf(patternStr2) > 0) {
System.out.println("Submission successful:" + new Date().toString());
System.out.println("--------------------------");
signForm.setFilingStatus("Y");
} catch (Exception ex) {
if (signForm.getSubmitUrl().indexOf(patternStr3) > 0)
signForm.setSubmitUrl("test");
else
signForm.setSubmitUrl("trade");
ex.printStackTrace();
signForm.setSoapResponseMsg("");
System.out.println("Submission unsuccessful:" + new Date().toString());
System.out.println("--------------------------");
signForm.setFilingStatus("N");
return null;
Code Sample end:Thanks for your reply.
Yes I tried hardcoding the values still the problem persists.
Is there any possible code part i am missing here? -
Checklist for Exchange Certificate issues
Checklist for Exchange Certificate issues
1.
Why certificate is important for Exchange and What are Certificates used for
Exchange is now using certificates for more than just web, POP3, or IMAP. In addition to
securing web services, it has also incorporated Transport Layer Security (TLS) for session based authentication and encryption.
Certificates are used for several things on Exchange Server. Most customers also use certificates
on more than one Exchange server. In general, the fewer certificates you have, the easier certificate management becomes.
IIS (OWA, ECP, EWS, EAS, OA, Autodiscover, OAB, UM)
POP/IMAP
SMTP
2.
Common symptoms for
certificate issue
Here we can see three different types of the certificate warning, mainly from the Outlook
side.
a.
Certificate mismatch issue
b.
Certificate trust issue
c.
Certificate expiration issue
3.
Checklists
In this section, checklists will be provided according to the three different scenarios:
Certificate Mismatch Issue
[Analysis]:
This issue mainly occurs because the URL of the web services Outlook tries
to connect does not match the host name in the certificate.
[Checklist]:
Firstly make sure how many host name in your certificate the certificate. Run “Get-ExchangeCertificate | select certificatedomain”.
Secondly, check the web services URLs which Outlook are trying to connect to. Run “Test Email AutoConfiguration”
In this scenario, you need to check the host name for the following services:
Autodiscover
EWS
OAB
ECP
UM
If any of the urls above does not match the one in the certificate, refer to the following article to change
it via EMS:
http://support.microsoft.com/kb/940726
1.
Do not forget to restart the IIS service after applying the changes above.
2. Make sure a valid certificate is enabled on the IIS service.
Certificate Trust Issue
[Analysis]:
For the self-signed and PKI-based (Enterprise)
certificates, they are not automatically trusted by the client computer or mobile device, you must make sure that you import the certificate into the trusted root certificate store on client computers and devices. On the other hand, Third-party or commercial
certificates do not have this problem. Most commercial CA certificates are already trusted because the certificate already resides in the trusted root certificate store. Because the issuer is trusted, the certificate is also trusted. Using third-party certificates
greatly simplifies deployment.
[Checklist]:
If it’s an Enterprise CA certificate, manually install the root certificate to the “Trusted Root Certification Authorities” folder:
If it is a 3<sup>rd</sup>-party certificate, first remove and reinstall the certificate. Check whether the Windows Certificate Store on the local
client is corrupted. If it still does not work, please contact the third-party CA support to verify the certificate.
Certificate Expiration Issue
[Checklist]:
When a certificate is about to expired, we just need to renew it by referring the following article:
Renew an Exchange Certificate
http://technet.microsoft.com/en-us/library/ee332322(v=exchg.141).aspx
To avoid any conflictions, it’s recommended to remove the expired certificate from the certificate store.
[How to set a reminder to alert the administrator when a certificate is about to expired]:
It’s easy to fix the certificate expire issue. But it should be more important to set a reminder before the
certificate expiration. Or there can be a large user impacts.
Generally, the Event ID “^(24|25)$” will appear in Application log when a certificate is about to expire.
If it’s not quite visible, we can refer to the following solution:
http://blogs.technet.com/b/nexthop/archive/2011/11/18/certificate-expiration-alerting.aspx
OWA certificate revoked issue
[Analysis]:
IE
includes support for server certificate revocation which verifies that an issuing
CA has not revoked a server certificate. This feature checks for CryptoAPI revocation when certificate extensions
are present. If the URL for the revocation information is unresponsive, IE cancels the connection.
[Solution or workaround]:
1. Contact CA provider and check whether the questioned certificate is in the Revoked List.
2. If not, check whether the certificate has a private key.
3. Remove the old certificate and import the new one.
Workaround:
IE Internet Options -> Advanced tab -> Clear the "Check for server certificate revocation"
checkbox.
4.
More References
Digital Certificates and SSL
http://technet.microsoft.com/en-us/library/dd351044(v=exchg.150).aspx
More on Exchange 2007 and certificates - with real world scenario
http://blogs.technet.com/b/exchange/archive/2007/07/02/3403301.aspx(Reported previous post with link to SIS package to moderator)
This is not the correct SIS package for the N73. The package shown is for S60 3.2 devices, but the N73 is not S60 3.2, I believe it is S60 3.0.
Most features may work with this SIS, but if you experience strange problems, try using the S60 3.0 version.
But there are no significant difference between 2.5.3 and 2.5.5 with regard to attachments. The only changes were with localization (languages).
At this point, try 2.7.0 which is out now:
http://businesssoftware.nokia.com/mail_for_exchange_downloads.php
Make sure to pick the right phone on the drop down list. It does matter! There are 4 different packages. This list makes sure you get the right one.
I have seen some issues with attachments not completing that seem to be carrier dependent. You can test this my using Wifi (if possible).
Message Edited by m4e_team_k on 28-Sep-2008 12:25 AM -
CF7 and JDK 1.4.2 - EV SSL Certificate Issue
Let me start off by telling the group that we do not use CF for any of our applications. We are a payments company that hosts a .NET API in IIS that 100's of thousands of customer use. We have one particular customer using CF7 and JDK 1.4.2 who is currently unable to process against our API. About a week ago we upgraded our SSL certificates to EV (Extended Validation) and since that time our once happy customer is now unhappy. I have spent hours working with him, going through FAQs and walk throughs, knowledge bases and forums and have had no luck. Here are the details:
EV Certificate issued by DigiCert (4096-bit).
Customer is on CF7 and JDK 1.4.2.
When he attempts to process against our API with the new certificate he gets 'Connection Failure: Status code unavailable' message from his CF application. He is using cfhttp to post his requests. We found a work around that indicated that the only issue with JDK 1.4.2 was importing the high-bit certificates. Our customer installed JDK 1.6, imported the certificate (and all intermediate certificates) successfully into the cacerts file, but when attempting to list using JDK 1.4.2 is returns an invalid certificate error and still will not work.
Please help as we are currently in a work around state for this customer (not long term) and we have exhausted the resources we have access to for solving this issue.
Thanks in advance to those gurus that reply. I have attached a sample post from our customers logs with non-essential data removed.
I can be reached by phone at 801-341-5620 if anyone feels like reaching out to talk.
- DaveDave,
I am having a similar issue with CF7 and PayPal's Reporting API which also uses EV SSL.
I can offer that in my testing, both CF 8 and CF 9 do seem to be able to work when using CFHTTP and EV SSL,
so the only solution I can offer at this time is to make the suggestion to your customer that they need to upgrade
to either CF 8 or CF 9 to get the issue quickly resolved.
I'm still working to see if I can find a solution for CF7 and I've been asking around in the CF community for help, so
if I do find a solution, I'll definitely post it there for you.
Cheers -
Listing Items based on criteria e.g. High Priority Items First.
Hi,
One of our customers have a need to List High Priority Items first on the WebTools site.
Let's take two ItemCodes for example: Printer001, and, Monitor001.
>> If these two items are included in the same category then Monitor001 will appear before Printer001 as WebTools sorts in alphabetic ascending order;
>> But, our customer wants Printer001 to appear before Monitor001 as it is an Item higher in priority that Printer001.
I can think of two possible solutions:
1/2) Prefix Items with a number or letter to have it appear first in the WebTools default sort order. E.g. Rename "Monitor001" as "AMonitor001". This will not be possible for existing Items in SAP, so it doen't solve the issue,
Or,
2/2) Customize the Default WebTools Item List block to sort Items based on a User Define field called "pririty". Which might require a lot of effort.
Please advise if anyone else has solved similar issue and how.
Thanks very much for your replies in advance.Hey Kafil ... I think you may be stuck modifying the parts list page or creating something from scratch. I'm not aware of an easy way to do this out of the box.
-
How to fetch certificates issued in past
Hi,
I have a long list of templates issued in my Client's Issuing CA, some of them are not in use. If I try to export " Issued Certificates" list from CA, it hangs.
I want to know how many certificates and last certificate issed from a specific template for fine-tuning and seggregation purpose. Please let me know how we can check that status.
Thanks
Neha GargHi Paul,
I am getting the output like this :
C:\Windows\system32>certutil -view -restrict "certificate template=<1.3.6.1.4.1.
311.21.8.10269956.2688026.1196953.3333800.9810006.227.1092942.575204>"
Schema:
Column Name Localized Name Type MaxLength
Request.RequestID Request ID Long 4 -- Index
ed
Request.RawRequest Binary Request Binary 65536
Request.RawArchivedKey Archived Key Binary 65536
Request.KeyRecoveryHashes Key Recovery Agent Hashes String 8192
Request.RawOldCertificate Old Certificate Binary 16384
Request.RequestAttributes Request Attributes String 32768
Request.RequestType Request Type Long 4
Request.RequestFlags Request Flags Long 4
Request.StatusCode Request Status Code Long 4
Request.Disposition Request Disposition Long 4 -- Index
ed
Request.DispositionMessage Request Disposition Message String 8192
Request.SubmittedWhen Request Submission Date Date 8 -- Index
ed
Request.ResolvedWhen Request Resolution Date Date 8 -- Index
ed
Request.RevokedWhen Revocation Date Date 8
Request.RevokedEffectiveWhen Effective Revocation Date Date 8 -- Index
ed
Request.RevokedReason Revocation Reason Long 4
Request.RequesterName Requester Name String 2048 -- In
dexed
Request.CallerName Caller Name String 2048 -- In
dexed
Request.SignerPolicies Signer Policies String 8192
Request.SignerApplicationPolicies Signer Application Policies String 8192
Request.Officer Officer Long
4
Request.DistinguishedName Request Distinguished Name String 8192
Request.RawName Request Binary Name Binary 4096
Request.Country Request Country/Region String 8192
Request.Organization Request Organization String 8192
Request.OrgUnit Request Organization Unit String 8192
Request.CommonName Request Common Name String 8192
Request.Locality Request City String 8192
Request.State Request State String 8192
Request.Title Request Title String 8192
Request.GivenName Request First Name String 8192
Request.Initials Request Initials String 8192
Request.SurName Request Last Name String 8192
Request.DomainComponent Request Domain Component String 8192
Request.EMail Request Email Address String 8192
Request.StreetAddress Request Street Address String 8192
Request.UnstructuredName Request Unstructured Name String 8192
Request.UnstructuredAddress Request Unstructured Address String 8192
Request.DeviceSerialNumber Request Device Serial Number String 8192
RequestID Issued Request ID Long 4 -- Index
ed
RawCertificate Binary Certificate Binary 16384
CertificateHash Certificate Hash String 128 -- Ind
exed
CertificateTemplate Certificate Template String 254 -- Ind
exed
EnrollmentFlags Template Enrollment Flags Long 4
GeneralFlags Template General Flags Long 4
PrivatekeyFlags Template Private Key Flags Long 4
SerialNumber Serial Number String 128 -- Ind
exed
IssuerNameID Issuer Name ID Long 4
NotBefore Certificate Effective Date Date 8
NotAfter Certificate Expiration Date Date 8 -- Index
ed
SubjectKeyIdentifier Issued Subject Key Identifier String 128 -- In
dexed
RawPublicKey Binary Public Key Binary 4096
PublicKeyLength Public Key Length Long 4
PublicKeyAlgorithm Public Key Algorithm String 254
RawPublicKeyAlgorithmParameters Public Key Algorithm Parameters Binary 4096
PublishExpiredCertInCRL Publish Expired Certificate in CRL Long 4
UPN User Principal Name String
2048 -- In
dexed
DistinguishedName Issued Distinguished Name String 8192
RawName Issued Binary Name Binary 4096
Country Issued Country/Region String 8192
Organization Issued Organization String 8192
OrgUnit Issued Organization Unit String 8192
CommonName Issued Common Name String 8192 -- In
dexed
Locality Issued City
String 8192
State Issued State
String 8192
Title Issued Title
String 8192
GivenName Issued First Name String 8192
Initials Issued Initials String 8192
SurName Issued Last Name String 8192
DomainComponent Issued Domain Component String 8192
EMail Issued Email Address String 8192
StreetAddress Issued Street Address String 8192
UnstructuredName Issued Unstructured Name String 8192
UnstructuredAddress Issued Unstructured Address String 8192
DeviceSerialNumber Issued Device Serial Number String 8192
Maximum Row Index: 0
0 Rows
0 Row Properties, Total Size = 0, Max Size = 0, Ave Size = 0
0 Request Attributes, Total Size = 0, Max Size = 0, Ave Size = 0
0 Certificate Extensions, Total Size = 0, Max Size = 0, Ave Size = 0
0 Total Fields, Total Size = 0, Max Size = 0, Ave Size = 0
CertUtil: -view command completed successfully.
but it doesnt give me the output that I am looking for. I want to know details of last certificate issued by a given template and its validity status.
Please let me know if I need to make any changes in command.
Thanks
Neha Garg -
ADS Credential Rights Issue. All reports checks successful...
I am having an ADS issue in my EP production environment. When users click on any adobe form, it gives 2 popup, stating
1) u201CThis document enabled extended feature in Adobe Reader. The use of the extended features has expiredu201D
2) u201CThis document enabled extended feature in Adobe Reader. The document has been changed since it was created and use of extended feature is no longer available. Please contact the author for the original version of this document.u201D
And it displays the below errors in the log.
Log location:--> /usr/sap/<SID>/JC00/j2ee/cluster/server0/log
1) com.adobe.ProcessingException: Required stream: "PDFDocument" not found in request OR its length is zero.
2) com.adobe.ProcessingException: Credential login error while applying usage rights to PDF: /var/tmp/adobewa_EPP_14070851/DM-4025786556068948812.dir/DM-6606423593397490494.tmp
Specific error information:
error while logging into credential '^0'
GeneralError: Operation failed.
SecurityHandler.login:-1:
Could not create temporary file
Troubleshooting Steps I have followed
Step 1: I observed the u201CCredential Keyu201D in Visual Admin got expired.
Action: I sent a request to SAP Market place to request a new credential key and got a new key.
Resolution: The credential key was applied to all server nodes, all required ADS service were restarted and u201CWASu201D was restarted.
Step 2: Ran reports (FP_TEST_00, FP_PDF_TEST_00, FP_CHECK_DESTINATION_SERVICE, and FP_TEST_IA_01)
Action: Ran reports in se38
Resolution: All reports were successful.
Step 3: Followed all instructions for the below links
Action: /people/dezso.pap/blog/2007/01/10/common-problems-with-sap-interactive-forms-by-adobe--part-i- --> (ADS troubleshooting issuses)
https://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/f03414f8-d4ce-2a10-d4b6-ab201b329d98 --> (Installing credentials and configuring ADS)
Resolution: Did not resolve my issues.
Step 4: Open a very high priority ticket with SAP.
Action: Sent SAP all the logs and screen shot of problems.
Resolution: None! SAP canu2019t figure out the problem.
Kindly assist me, if you have encountered this issue before. Your assistance is greatly appreciated.
Regards,
HaffizHi Haffiz,
I have your same problem:
Credential login error while applying usage rights to PDF: C:\WINDOWS\Temp\adobewa_S19_197736650\DM-7159480439143838974.dir\DM-6724718864855579594.tmp
I just installed the credential
the FP_TEST_IA_01 failed at running
How you have resolved this problem?
Best Regards
T.Anderson -
Hi All
Is it possible in IOS to have for a particular subnet:
a) Two static routes?
b) Make one static route a higher priority than the other?
c) If one static router "goes down", failover to the lower priority static route?
We have a l2tp/vpdn connection to a supplier which can be accessed via two vlans/routes. I would like to make one route the preferred one but the "route" to failover if the preferred route goes down.
Again, many thanks in advance for all responses!
Thanks
JohnHi John,
Hope the below explaination will help you...
R1(config)# ip route 0.0.0.0 0.0.0.0 2.2.2.2
R1(config)# ip route 0.0.0.0 0.0.0.0 3.3.3.3 10
If you notice the Administrative Distance for the secondary route pointing to ISP2 is increased to 10 so that it becomes the backup link.
The above configuration with just two floating static routes partially accomplishes our requirement as it will work only in the scenario where the routers interfaces connected to the WAN link are in up/down or down/down status. But in a lot of situations we see that even though the links remain up but we are not able to reach the gateway, this usually happens when the issue is at the ISP side.
In such scenarios, IP SLAs becomes an engineer's best friend. With around six additional IOS commands we can have a more reliable automatic failover environment.
Using IP SLA the Cisco IOS gets the ability to use Internet Control Message Protocol (ICMP) pings to identify when a WAN link goes down at the remote end and hence allows the initiation of a backup connection from an alternative port. The Reliable Static Routing Backup using Object Tracking feature can ensure reliable backup in the case of several catastrophic events, such as Internet circuit failure or peer device failure.
IP SLA is configured to ping a target, such as a publicly routable IP address or a target inside the corporate network or your next-hop IP on the ISP's router. The pings are routed from the primary interface only. Following a sample configuration of IP SLA to generate icmp ping targeted at the ISP1s next-hop IP.
R1(config)# ip sla 1
R1(config)# icmp-echo 2.2.2.2 source-interface FastEthernet0/0
R1(config)# timeout 1000
R1(config)# threshold 2
R1(config)# frequency 3
R1(config)# ip sla schedule 1 life forever start-time now
The above configuration defines and starts an IP SLA probe.
The ICMP Echo probe sends an ICMP Echo packet to next-hop IP 2.2.2.2 every 3 seconds, as defined by the “frequency” parameter.
Timeout sets the amount of time (in milliseconds) for which the Cisco IOS IP SLAs operation waits for a response from its request packet.
Threshold sets the rising threshold that generates a reaction event and stores history information for the Cisco IOS IP SLAs operation.
After defining the IP SLA operation our next step is to define an object that tracks the SLA probe. This can be accomplished by using the IOS Track Object as shown below:
R1(config)# track 1 ip sla 1 reachability
The above command will track the state of the IP SLA operation. If there are no ping responses from the next-hop IP the track will go down and it will come up when the ip sla operation starts receiving ping response.
To verify the track status use the use the “show track” command as shown below:
R1# show track
Track 1
IP SLA 1 reachability
Reachability is Down
1 change, last change 00:03:19
Latest operation return code: Unknown
The above output shows that the track status is down. Every IP SLAs operation maintains an operation return-code value. This return code is interpreted by the tracking process. The return code may return OK, OverThreshold, and several other return codes.
Different operations may have different return-code values, so only values common to all operation types are used. The below table shows the track states as per the IP SLA return code.
Tracking
Return Code
Track State
Reachability
OK or over threshold
(all other return codes)
Up
Down
The Last step in the IP SLA Reliable Static Route configuration is to add the “track” statement to the default routes pointing to the ISP routers as shown below:
R1(config)# ip route 0.0.0.0 0.0.0.0 2.2.2.2 track 1
R1(config)# ip route 0.0.0.0 0.0.0.0 3.3.3.3 10
The track number keyword and argument combination specifies that the static route will be installed only if the state of the configured track object is up. Hence if the track status is down the secondary route will be used to forward all the traffic.
Please rate the helpfull posts.
Regards,
Naidu.
Maybe you are looking for
-
I was trying to make a new screen recording using quicktimeplay, but when I watched the video after recording it all I could hear was me talking while the video was showing on the screen. How do I turn off that recording and turn the right one on? th
-
No keyboard rotation in some apps
Hello, in some apps (in landscape modus), when I want to give in some text, the keyboard will be opened into portrait mode. So i have to rotate the iPhone, then I give in my text, and after sending text, I have to rotate back to landscape modus. Happ
-
Hi there, i need some help from you guys, you see i reinstaled my windows because it had a problem but now im having trobule looking for the drivers for mi neetbook, last time i need it to download the drivers i did it from here http://h20000.www2.hp
-
Face time will ring when cover is closed
Face time will not ring on the iPad when the cover is closed. There is no notification of a missed call. Face time works normally when the cover is open.
-
Canon G7X camera raw files not recognised in Aperture?
I use Aperture 3.5 extensively and have updated to, I think, 6.07 which is the latest update pack but the RAW files are still not recognised in Aperture. Am I doing something wrong or any idea when aperture will be updated for this relatively new cam