SSL secrutiy warning in JRE 1.4 but not in JRE 1.3

Hello,
I have applied a SGC SSL certificate from the comodo CA. The SGC SSL certificate is signed by the intermediate CA "UTN - DataCorp SGC" and the intermediate CA is signed by "AddTrust External CA Root". After installed the SGC SSL certificate into web server, I have tested the SSL connection in IE. It worked without any security warning.
If I browsed a web page with an applet embedded and the JRE was using 1.3, the SSL connection was Ok without security warning message. But if I changed the JRE to 1.4, there was a security warning to prompt that "This certificate was signed by an untrusted CA" and "Do you want to continue".
I have found that the "UTN - DataCorp SGC" and "AddTrust External CA Root" CA certificates didn't found in the Java trust store in both 1.3 and 1.4 version. Why did the security warning message show in the JRE 1.4 but not in JRE 1.3?
Thanks and regards,

Hi
Java Plugin 1.3 (re-)used the SSL connection of the browser, whereas Java Plugin 1.4 uses its own SSL implementation (JSSE) to open a new connection. Therefore Java Plugin 1.4 needs to verify the server certificate (using its own keystore).
Cheers

Similar Messages

RMI : error on JRE 1.6 but not on JRE 1.5 ???

Hello,
I've got a problem with my application since i use JRE 1.6
My application run perfectly with JRE 1.5 !!!
My code is first :
LocateRegistry.createRegistry(port);
NamingManager.setInitialContextFactoryBuilder(new InitialServerContextFactory());
NamingManager.getInitialContext(environment);(with environment is an hastable containing HOST et PORT)
An next, i have a Java Class witch impl�ments Context :
public class InitialServerContext implements Context
    public void bind(String name, Object obj) throws NamingException
          getRMIContext().bind("rmi://" + mServer + ':' + mPort + '/' + name, obj);
    static Context getRMIContext() throws NamingException
          return NamingManager.getURLContext("rmi", null);
The error on JRE 1.6 is on the line :
getRMIContext().bind("rmi://" + mServer + ':' + mPort + '/' + name, obj);
_Exception is
:_java.lang.NullPointerException
at com.sun.jndi.rmi.registry.RegistryContext.<init>(Unknown Source)
at com.sun.jndi.url.rmi.rmiURLContext.getRootURLContext(Unknown Source)
at com.sun.jndi.toolkit.url.GenericURLContext.bind(Unknown Source)
at com.xxx.aes.naming.InitialServerContext.bind(InitialServerContext.java:231)
at com.xxx.aes.naming.InitialServerContextFactory.getInitialContext(InitialServerContextFactory.java:104)
at javax.naming.spi.NamingManager.getInitialContext(Unknown Source)
at com.xxx.aes.server.NamingServer.start(NamingServer.java:65)
What is the difference between JRE 1.5 and 1.6 ?
Why my application in 1.6 is not correct ?
If necessary, i can give you my Java Class InitialServerContextFactory.java
Thanks a lot for your responses.

Hello,
I tired this approach you mentioned, and interestingly if i just make ejb calls without any event handling, meaning if i call them separately they all just work fine and i see the results coming back from server. But when i relate them to any click events the whole IE freezes.
One more thing i noted is that, seems like the way JRE 1.6 render my applet is somewhat different than JRE 1.5.* familiy,because initially when my aplet is loaded, i see everything which should be displayed from the first screen, but any further operations i cannot perform, even opening a file chooser from tool bar. I admit my applet is real heavy and it contains a lot of data in it on the first screen, may be its the heap size causing the problem in 1.6 but fine with jre 1.5.
Day by day am coming to conlusion that jre 1.6 is my concern now ..:(
Thanks,

Can TMS warn of objects on released-but-not-imported requests?

I'm sure this is a common problem: Developer A makes a change to an ABAP program, releases his transport, and imports it to the QA system. Developer B makes a subsequent change to the same program (unaware of Developer A's changes), realeases his transport and imports it to QA. Developer B's QA testing completes first, and his transport is imported to the Production system. Some time later, Developer A's QA testing is completed, and his transport moves to Prod, wiping out Developer B's changes!
How do we avoid this situation? Is there a way to configure TMS so that it warns Developer B of Developer A's released-but-not-yet-imported-to-Prod transport?
I am open to all suggestions, including activating user exits in TMS, and coding the warning myself. If that's the only solution, some guidance on TMS user exits and TMS tables I would need to query would be helpful.
Thanks in advance.

Well, this thread may be 4 years old, but I have answered my own question (some time ago), and would like to share the answer with the SDN community.
I ended up activating the BADI CTS_REQUEST_CHECK. In the CHECK_BEFORE_RELEASE method I added my own code to check for "incomplete" transports for any of the objects on the transport being released. The code is pretty involved, but the basic trick is to SELECT all transports for each of the objects in the request from database tables E070, E071, and E07T, then use function TR_READ_GLOBAL_INFO_OF_REQUEST to get the details of each request to determine if it has been imported into the production system.
Once I have a list of "potentially conflicting" transports, I display it for the user in an ALV grid. I then allow the user to decide whether to go on with the release of the transport, or to cancel the release.
Cheers,
Terry

Applet runs with jre 1.5 but not jre 1.6

I'm working on an applet which works just fine when 1.5.0_15 is the latest JRE installed on the PC, but does not work when 1.6.0_6 is installed. In the latter case, the applet does not load due to getting a NoClassDefFoundError. Here's the Java Console error trace:
java.lang.NoClassDefFoundError: com/hp/nonstop/hsc/core/configuration/ConfigurationMetaData
        at com.hp.nonstop.hsc.tools.configurator.ConfiguratorApplet.init(ConfiguratorApplet.java:53)
        at sun.applet.AppletPanel.run(Unknown Source)
        at java.lang.Thread.run(Unknown Source)
Caused by: java.lang.ClassNotFoundException: com.hp.nonstop.hsc.core.configurati
on.ConfigurationMetaData
        at sun.applet.AppletClassLoader.findClass(Unknown Source)
        at java.lang.ClassLoader.loadClass(Unknown Source)
        at sun.applet.AppletClassLoader.loadClass(Unknown Source)
        at java.lang.ClassLoader.loadClass(Unknown Source)
        at java.lang.ClassLoader.loadClassInternal(Unknown Source)
        ... 3 moreThe relevant (I think) portions of the <object> generated by the JSP is:
<object
    classid="clsid:8AD9C840-044E-11D1-B3E9-00805F499D93"
    name="ConfiguratorApplet" width="600" height="400"
    codebase="http://java.sun.com/products/plugin/1.3/jinstall-131-win32.cab">
<param name="java_code" value="com.hp.nonstop.hsc.tools.configurator.ConfiguratorApplet.class">
<param name="java_codebase" value="/HSC/configurator">
<param name="java_archive" value="configurator.jar,../lib/configapi.jar,<<other jar files listed here>>">
<<other param tags included here>>
</object>The class it can't seem to find (under 1.6) is actually located in the configapi.jar file, which itself is located in the ../lib folder (relative to the /HSC/configurator folder where configurator.jar is located).
Obviously, when the browser is using JRE 1.5.15 the VM engine can find all the needed classes as the applet runs OK. But when 1.6.6 is installed, things can't be found. I suspect something different in the search paths (though I thought the "java_archive" value was supposed to specify that), in the permissions needed to read the files, or something, but I just can't track down what the difference is (and thus why things are failing with 1.6 installed).
Any help/ideas would be greatly appreciated!

Stephen.Thomas wrote:
have [you] tried moving the configapi.jar into the same folder as the configurator.jarYes, I have. I've also tried re-rooting the page to the lib directory where everything exists; i.e. changing java_codebase to /HSC/lib and changing java_archive so all jars referenced no longer have ../lib/ in them. Same behavior.
It's almost as if the search path is behaving differently between 1.5 and 1.6, possibly not even being controlled by the values of java_codebase and java_archive at all.

Why are Java SASLFactories missing when called via PL/SQL but not from JRE?

Hi
This may be quite a technical point about SASL and JCE Providers etc OR it may just be a question about how Oracle PL/SQL interfaces with Java.
The background is that I am trying to get a Java opensource library to run in Oracle DB - this is for specialized communication from Database to other servers.
The library uses a SASL mechanism to authenticate with the server and this (appears) to rely on JCE Providers installed and provided by the JRE.
I have some Java code working which uses the library - this runs OK in NetBeans/Windows environment and also using Linux/Oracle JRE directly such as:
  +# $ORACLE_HOME/jdk/bin/java -classpath "./MyMain.jar:./OtherSupport.jar" package.TestClient+
However it refuses to work (throws a NullPointerException) when called from PL/SQL.
  +FUNCTION send_a_message (iHost IN VARCHAR2,+
     iPort IN NUMBER,
    +iLogin IN VARCHAR2,+
    +iPasswd IN VARCHAR2,+
     iRecipient IN VARCHAR2,
     iMessage IN VARCHAR2) RETURN NUMBER
   AS LANGUAGE JAVA
   NAME package.TestClient.sendATextMessage(java.lang.String, int, java.lang.String, java.lang.String, java.lang.String, java.lang.String) return int';
In the Java code this is:
   public static int sendATextMessage(String iHost,
     int iPort,
     String iLogin,
     String iPasswd
     String iRecipient,
     String iMessage)
I've tracked the issue down to there being no SaslClientFactories (via Sasl.getSaslClientFactories()) showing when called from PL/SQL whereas 3 are available when run from within Java directly. This via:
   Enumeration<SaslClientFactory> facts = Sasl.getSaslClientFactories();
   System.out.println("Found Sasl Factories [" & (facts != null) & "] size[" & Collections.list(facts).size() & "]");
So, is there some aspect of Java initialisation that I'm missing when calling from PL/SQL (which means SASL factories aren't getting loaded into JRE) or is there something different in SASL setup?
Any pointers appreciated.
Thanks
Dave

Ok, after a bit of reading and general hacking about I have got this working.
What I hadn't initially understood/remembered is that for a Stored Procedure the JVM installed on file system with Oracle isn't actually used - java code is loaded into the database and hence a different set of base functions are available. The following is a good explanation of this http://docs.oracle.com/cd/B14117_01/java.101/b12021/appover.htm#BGBIBDAJ
So "out of the box" the Oracle Database appears to come loaded with only two of the Sun security providers i.e. no com.sum.security.SASL
>
OBJECT_NAME             OBJECT_TYPE     STATUS   TIMESTAMP
com/sun/security/auth/NTSid  JAVA CLASS    VALID   2013-02-14:14:08:57
com/sun/security/jgss/GSSUtil    JAVA CLASS    VALID   2013-02-14:14:08:57
>
This is from:
>
SELECT
  object_name,
  object_type,
  status,
  timestamp
FROM
  user_objects
WHERE
  (object_name NOT LIKE 'SYS_%' AND
   object_name NOT LIKE 'CREATE$%' AND
   object_name NOT LIKE 'JAVA$%' AND
   object_name NOT LIKE 'LOADLOB%') AND
   object_type LIKE 'JAVA %' AND
   object_name LIKE 'com/sun/security%'
ORDER BY
  object_type,
  object_name;
>
My solution (which may well be a work-around) is the following:
1) Downloaded JDK Source and extracted "com.sun.security.sasl" java code to my project
2) Added following code to my Stored Procedure ()
>
Enumeration<SaslClientFactory> saslFacts = Sasl.getSaslClientFactories();
if (!saslFacts.hasMoreElements()) {
  System.out.println("Sasl Provider not pre-loaded");
  int added = Security.addProvider(new com.sun.security.sasl.Provider());
  if (added == -1) {
    System.out.println("Sasl Provider could not be loaded");
    System.exit(added);
  else {
    System.out.println("Sasl Provider added");
>
3) Built my JAR file with the sasl package embedded (note: could only find Java 6 code, so had to comment out some GSS lines - but wasn't intending to use these)
4) Loaded JAR to oracle via "loadjava".
5) Add permissions (only found this out after a couple of failed runs)
>
call dbms_java.grant_permission('XMPP', 'SYS:java.security.SecurityPermission', 'putProviderProperty.SunSASL', '' );
call dbms_java.grant_permission('XMPP', 'SYS:java.security.SecurityPermission', 'insertProvider.SunSASL', '' );
>
6) Run gives the following:
>
Sasl Provider not pre-loaded
Sasl Provider added
...etc...
>
It works!. I confess I'm not sure of the implications of this for multiple calls/performance and if it will need to be added for each stored procedure call - may post back.
For completeness I should point out that after my load the Security providers look like this:
>
OBJECT_NAME             OBJECT_TYPE     STATUS   TIMESTAMP
com/sun/security/auth/NTSid    JAVA CLASS    INVALID  2013-02-15:09:11:36
com/sun/security/jgss/GSSUtil    JAVA CLASS    INVALID  2013-02-15:09:11:37
com/sun/security/sasl/Provider    JAVA CLASS    VALID    2013-02-15:10:03:21
>
i.e. the original couple are "INVALID" !
Dave
Edited by: 946763 on Feb 26, 2013 2:35 AM

Applet work with JRE 7_51 but NOT with JRE 7_45

Hello,
My major problem is, that my Applet signed with COMODO certificate DOES NOT WORK with JRE 7_45.
The SAME applet works fine with JRE 7_45, if I sign this applet WITH A SELFMADE UNTRUSTED certificate.
WHY the comodo signed applet doesn't run in JRE 7_45 ???
If i launch the comodo signed applet with JRE 7_51 it works perfect !!!
But in our company we got JRE 7_45 and I have to deal with JRE 7_45. That’s my problem.
Could you please tell me a solution what I have to do that the comodo signed applet works also in JRE 7_45.
Thank you!
Philipp

Thanks gimbal2.
I agree the problem may be in the proxy or in the firewall but I don' to know how to prove it as if i call the servlet url from browser I dont have problems .
The version im using is 6.45 but im sure the same problem occurs also with other versions of JRE6 .
... and the problem disappear with JRE7 ...
trouble is my company want people to use JRE6
any idea ?
Gio

Distorted fonts in (jre+Linux) Client but ok in (jre+Windows) client

We are doing the feasibility for using linux desktops in our company.
In Linux desktop clinents, the Oracle AS forms are shown in distorted fonts and lot of alignment issues. Whereas, Windows client shows the alignment perfectly.
Any body experienced the same issue ?
regards,
Rajkiran.

See this documentation http://java.sun.com/j2se/1.5.0/docs/guide/intl/fontconfig.html for details.
The JDK also uses a system property to set the font paths but I don't have it handy...
--olaf

HT201210 I am trying to restore software on my iPad which is connected to my PC with iTunes when i'm in recovery mode a warning comes up "The iPad could not be restored an unknown error occurred (1604) I have followed all suggestions but still my iPad is

I am trying to restore software on my iPad which is connected to my PC with iTunes when i'm in recovery mode a warning comes up
"The iPad could not be restored an unknown error occurred (1604) This i have discovered probably a USB timing problem ?
I have followed all suggestions but still my iPad screen is locked with a iTunes logo and a USB cable beneath it, wish I had never bothered
to update it now. Any help would be appreciated. rg

When I restart my iPad the connect to iTunes comes up and stays on until it shuts down again, I have read a report from Apple support suggesting I reinstall iTunes so I might try that again and also your suggestion which i shall also try, but thanks again - rg1547

Port 25 works fine for SSL/SMTP, but not port 587?

So after doing a rather painful migration to new hardware to support 10.5 from a previously working 10.4 config...
I got SSL working -- web service is fine, mail service is fine for all ports for POP and IMAP...but not port 587.
- It's open on my firewall
- There's no software firewall impeding it
- Trying to telnet to port 587 results in nothing
It's as if the server isn't even listening to the port...
And the odd part?
- Mac OS X desktop clients report they can't connect on 587. Changing the port to 25 and leaving everything else the same (auth type, username, password) -- suddenly it works...BUT
- The iPhone is configured for port 587 and works every time.
My guess it that iPhone auto falls back to port 25 if all else fails, I can't explain why it would work. Bigger question, I suspect something got munged in the migration...is it possible it needs to be told to listen on 587 as well?

I saw that site...it mentions adding port 587 specifically -- or commenting out "the appropriate lines of master.cf"
I assume that means to uncomment out the submission port in that file -- or would it be better to add 587 specifically?
Also, I never allow unauth SMTP (even inside my network) -- I would want to continue to impose that on the submission port and the normal port 25; how do I do this?
Thanks in advance for the help.

Why cant i run my applet on JRE 1.6 but on JRE 1.5?

Hello,
I know this is a very basic problem, but i still cannot get a justified answer for this problem. Its like i have an applet which is compiled in JDk j2sdk1.4.2_16. Now when i try to run this applet on my IE under jre 1.5.* family on all the client machines it works fine. But when i switch to jre 1.6.* family, i see the applet being displayed, but i cannot perform any operations on it i no mouse clicks work and i cannot open any file menu or my jdialog boxes.
Is it because of the incompatibilities in jre 1.6, but wont it be backward compatible to that older version applets can run on this new jre. My applet seems to be a simple applet,with only one exception that it has lot of jframes and jpanel in it.
This problem is killing me ..
Can someone point me towards where can i find what all changes are made in JRE 1.6 over JRE 1.5 so that atleast i can compare what is causing my applet freeze in JRE 1.6.
i went through the release notes but cant find anything useful there.
Please help.

Sun ensures that newer versions of the JRE are backward compatible. Your applet should work under the newest JRE version. Have you tried running the applet in a different browser (e.g., Firefox) with JRE 1.6 to eliminate it being an IE issue?

HT1848 i Authorize my apple 4s in to my computer,but my phone non syncing to my computer, the warning message is , the phon colld not synced because this computer is no longer autherise for purchased item that are on this iPhone., wat i do??

I Authorize my apple 4s in to my computer,but my phone non syncing to my computer, the warning message is , the phon colld not synced because this computer is no longer autherise for purchased item that are on this iPhone., wat i do??

Well Authorize the Computer...........

Error when installing OpsMgr reporting (Attempted to add warning icon to item OMREPORTING but since this was as NONVITALFAILURE case, we added an Error icon instead.)

Hi
I have the following scenario:
Two Management Server, the first
Management Server has the following functions:
- Management Server
- Operations Console
- Web Console
My second Management Server has the following
functions:
- Management Server
- Operations Console
A SQL Server with the
OperationsManager and OperationsManagerDW
bases.
My second Management Server, I installed the
service report server SQL,
created the foundation in my remote SQL
Server (ReportServerOpsMgr and
ReportServerOpsMgrTempDB). By adding the
feature of Reporting Server
it starts the installation process, but
at a certain point it gives me the following error message
in the Reporting Server log: Attempted
to add warning icon to
OMREPORTING item but since
this was the NONVITALFAILURE
case, we added an Error
icon instead.
Has anyone been through
this problem and can help me?
Thanks a lot!
Wilsterman Fernandes

Seems this is either a permissions issue or the it is a restriction configured for running external stored procedures
I suggest you remove the Reporting portion from the server, then remove the Reporting Service completely. After doing this, reboot the SQL and Management server=>install Reporting again.
Juke Chou
TechNet Community Support

Powershell script to set custom attribute on mailuser returns WARNING: The command completed successfully but no settings of user have been modified.

I am trying to write a script to enable a mailuser (I do know the difference between mailuser and mailbox) and set a custom attribute for that mailuser. Every time I run the script I get "WARNING: The command completed successfully but no settings
of <User DN> have been modified." Both commands being invoked work when typed manually into the exchange management shell on the exchange server itself. I am using the same administrator account in the script, and when I login to the
exchange server to manually run the commands, so it shouldn't be a permission issue. Here is my script so far. If anyone can shed some light on what I'm doing wrong, I'd appreciate it.
$excel = new-object -com excel.application
$wb = $excel.workbooks.open("c:\temp\testmail8.xlsx")
$ws = $wb.Worksheets.Item(1)
$row = 1
$s = New-PSSession -ConfigurationName microsoft.exchange -ConnectionUri http://<Exchange Server Name>/powershell -Credential [email protected]
Do {
$Email = $ws.Cells.Item($row, 1).Value()
$Cat = $ws.Cells.Item($row, 2).Value()
invoke-command -Session $s -ScriptBlock {Enable-MailUser -ExternalEmailAddress $($args[0][0] + "@domain.com") -Identity $($args[0][0])} -ArgumentList (,$Email, $Cat)
invoke-command -Session $s -ScriptBlock {Set-MailUser -Identity $($args[0][0]) -CustomAttribute1 $($args[0][1])} -ArgumentList (,$Email, $Cat)
$row++
} While ($ws.Cells.Item($row,1).Value() -ne $null)
$excel.quit
Exit-PSSession

Hi,
I'm not sure where is wrong in your script. If you want to get more help about the script troubleshooting, I recommand you to ask a question in Script Center forum for more professional answers:
http://social.technet.microsoft.com/Forums/scriptcenter/en-US/home?forum=ITCG
As a workaround, please directly create a mail user in EAC and set related custom attribute to have a try.
Thanks,
Winnie Liang
TechNet Community Support

I cannot transfer movies on my iphone 4s eventhought its mp4 format. it say 1 item could not be sync see itunes for more information. Tried to look for the reset warning on itunes 11.0 but cannot locate it. Help please

i cannot transfer movies on my iphone 4s eventhought its mp4 format. it say 1 item could not be sync see itunes for more information. Tried to look for the reset warning on itunes 11.0 but cannot locate it. Help please

Hello eLZhi,
Thanks for the question, and welcome to Apple Support Communities.
The following article provides the most relevant information to your question:
iOS: 'Not enough free space' alert when trying to sync
http://support.apple.com/kb/TS1503
Thanks,
Matt M.

Installing JRE 6u12 uninstalls 6u10 & 6u11 but not 6u07 or earlier - why?

G'day,
I've noticed that installing JRE 6u12 (on Windows Vista) removes JRE 6u10 and JRE 6u11 but not the versions prior to 6u10, i.e. 6.0 though 6u7.
In part this would seem to be due to the default installation directory for JREs 6u10+ being C:\Program Files\Java\jre, whereas for 6u07- it's C:\Program Files\Java\JRE1.6.0_NN
This seems a fairly superficial reason - is it something to do with the new features introduced in JRE 6u10, e.g. the "next generation" Java Plug-In? I can't find this behaviour documented anywhere so would be interested to understand this new policy and its motivation.
Thanks,
Chris.

After Java6 update 10 there is now a patch in place that upgrades the current version to the new version. This can be turned off I believe if you want. Earlier versions would still need to be removed manually.
QuickDraw

SSL secrutiy warning in JRE 1.4 but not in JRE 1.3

Similar Messages

Maybe you are looking for