[Bug 785333] New: javaws (OpenJDK) cannot start Cisco JNLP file with self signed certificate

https://bugzilla.novell.com/show_bug.cgi?id=785333 https://bugzilla.novell.com/show_bug.cgi?id=785333#c0 Summary: javaws (OpenJDK) cannot start Cisco JNLP file with self signed certificate Classification: openSUSE Product: openSUSE 12.2 Version: Final Platform: Other OS/Version: Other Status: NEW Severity: Normal Priority: P5 - None Component: Java AssignedTo: bnc-team-java@forge.provo.novell.com ReportedBy: joschibrauchle@gmx.de QAContact: qa-bugs@suse.de Found By: --- Blocker: --- User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:16.0) Gecko/20100101 Firefox/16.0 Using Java Webstart from OpenJDK 1.7 to start a Cisco JNLP file results in: # javaws -verbose asdm.jnlp -------- netx: Read Error: Could not read or parse the JNLP file. (java.security.cert.CertificateException: No subject alternative names present) net.sourceforge.jnlp.LaunchException: Fatal: Read Error: Could not read or parse the JNLP file. at net.sourceforge.jnlp.Launcher.fromUrl(Launcher.java:491) at net.sourceforge.jnlp.Launcher.launch(Launcher.java:283) at net.sourceforge.jnlp.runtime.Boot.run(Boot.java:202) at net.sourceforge.jnlp.runtime.Boot.run(Boot.java:51) at java.security.AccessController.doPrivileged(Native Method) at net.sourceforge.jnlp.runtime.Boot.main(Boot.java:168) Caused by: java.io.IOException: java.security.cert.CertificateException: No subject alternative names present at net.sourceforge.jnlp.JNLPFile.openURL(JNLPFile.java:284) at net.sourceforge.jnlp.JNLPFile.<init>(JNLPFile.java:214) at net.sourceforge.jnlp.JNLPFile.<init>(JNLPFile.java:190) at net.sourceforge.jnlp.JNLPFile.<init>(JNLPFile.java:175) at net.sourceforge.jnlp.JNLPFile.<init>(JNLPFile.java:161) at net.sourceforge.jnlp.Launcher.fromUrl(Launcher.java:477) ... 5 more -------- Oracle JDK 1.7 does not exhibit this problem and starts the JNLP file normally Reproducible: Always Steps to Reproduce: 1. Use a jnlp file with self signed certificate 2. javaws <file>.jnlp Actual Results: Fails with error Expected Results: Should at least start and prompt on what to do about the self signed cert -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=785333 https://bugzilla.novell.com/show_bug.cgi?id=785333#c1 Michal Vyskocil <mvyskocil@suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Priority|P5 - None |P3 - Medium Status|NEW |ASSIGNED AssignedTo|bnc-team-java@forge.provo.n |mvyskocil@suse.com |ovell.com | --- Comment #1 from Michal Vyskocil <mvyskocil@suse.com> 2012-10-29 13:05:02 UTC --- There is a patched icedtea-web aims to fix this issue https://build.opensuse.org/package/show?package=icedtea-web&project=home%3Ab... would you be so kind and test it? -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=785333 https://bugzilla.novell.com/show_bug.cgi?id=785333#c2 --- Comment #2 from Joschi Brauchle <joschibrauchle@gmx.de> 2012-11-05 10:06:21 UTC --- Hello, I can confirm that the packages from above repository fix the original problem with the self signed certificate in the JNLP file! Unfortunately, the Cisco ASDM application does not run correctly after starting, either it: 1) hangs during download of JAR files and gives an error "netx: Initialization Error: Could not initialize application. (Fatal: Application Error: Unknown Main-Class. Could not determine the main class for this application." 2) hands during first start of UI, after successful login and software download. 3) hangs during consecutive starts after successful login and loading of cached software with the following message: "java.lang.ClassNotFoundException: com.sun.deploy.util.Trace at net.sourceforge.jnlp.runtime.JNLPClassLoader.loadClass(JNLPClassLoader.java:1609) at java.lang.Class.forName0(Native Method) at java.lang.Class.forName(Class.java:186) at com.cisco.launcher.i.a(Unknown Source) at com.cisco.launcher.i.if(Unknown Source) at com.cisco.launcher.i.a(Unknown Source) at com.cisco.launcher.s.if(Unknown Source) at com.cisco.launcher.Launcher.main(Unknown Source) at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:57) at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43) at java.lang.reflect.Method.invoke(Method.java:601) at net.sourceforge.jnlp.Launcher.launchApplication(Launcher.java:594) at net.sourceforge.jnlp.Launcher$TgThread.run(Launcher.java:889)" I have an "strace" logfile available for the case 3 problem... Thus, original Oracle Java needs to be installed to run this application for now. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=785333 https://bugzilla.novell.com/show_bug.cgi?id=785333#c3 --- Comment #3 from Joschi Brauchle <joschibrauchle@gmx.de> 2012-11-05 10:13:08 UTC --- Ok, it looks like these problems are due to Cisco not supporting Java7 so far, see: https://supportforums.cisco.com/thread/2174133 or http://www.bigsoft.co.uk/blog/index.php/2012/08/31/cisco-asdm-5-2-for-asa-cl... Hence, the original problem is solved! -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=785333 https://bugzilla.novell.com/show_bug.cgi?id=785333#c4 Michal Vyskocil <mvyskocil@suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Depends on| |787846 --- Comment #4 from Michal Vyskocil <mvyskocil@suse.com> 2012-11-08 09:13:09 UTC --- The self-signed issue has been added to icedtea-web 1.3.1 - an update is handled in bnc#787846. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=785333 https://bugzilla.novell.com/show_bug.cgi?id=785333#c Swamp Workflow Management <swamp@suse.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Status Whiteboard| |maint:running:49994:moderat | |e -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=785333 https://bugzilla.novell.com/show_bug.cgi?id=785333#c5 --- Comment #5 from Bernhard Wiedemann <bwiedemann@suse.com> 2012-11-14 14:30:45 CET --- This is an autogenerated message for OBS integration: This bug (785333) was mentioned in https://build.opensuse.org/request/show/141112 https://build.opensuse.org/request/show/141113 -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=785333 https://bugzilla.novell.com/show_bug.cgi?id=785333#c6 --- Comment #6 from Bernhard Wiedemann <bwiedemann@suse.com> 2012-11-14 14:43:19 CET --- This is an autogenerated message for OBS integration: This bug (785333) was mentioned in https://build.opensuse.org/request/show/141254 -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=785333 https://bugzilla.novell.com/show_bug.cgi?id=785333#c Swamp Workflow Management <swamp@suse.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Status Whiteboard|maint:running:49994:moderat |maint:running:49994:moderat |e |e obs:running:1094:moderate -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=785333 https://bugzilla.novell.com/show_bug.cgi?id=785333#c7 Swamp Workflow Management <swamp@suse.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Status Whiteboard|maint:running:49994:moderat |maint:running:49994:moderat |e obs:running:1094:moderate |e obs:running:1094:moderate | |maint:released:sle11-sp2:50 | |026 --- Comment #7 from Swamp Workflow Management <swamp@suse.de> 2012-11-20 13:54:15 UTC --- Update released for: icedtea-web, icedtea-web-debuginfo, icedtea-web-debugsource, icedtea-web-javadoc Products: SLE-DEBUGINFO 11-SP2 (i386, x86_64) SLE-DESKTOP 11-SP2 (i386, x86_64) -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=785333 https://bugzilla.novell.com/show_bug.cgi?id=785333#c8 --- Comment #8 from Swamp Workflow Management <swamp@suse.de> 2012-11-22 10:13:41 UTC --- openSUSE-SU-2012:1524-1: An update that solves one vulnerability and has three fixes is now available. Category: security (moderate) Bug References: 784859,785333,786775,787846 CVE References: CVE-2012-4540 Sources used: openSUSE 12.2 (src): icedtea-web-1.3.1-1.9.1 openSUSE 12.1 (src): icedtea-web-1.3.1-17.1 -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=785333 https://bugzilla.novell.com/show_bug.cgi?id=785333#c Swamp Workflow Management <swamp@suse.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Status Whiteboard|maint:running:49994:moderat |maint:running:49994:moderat |e obs:running:1094:moderate |e |maint:released:sle11-sp2:50 |maint:released:sle11-sp2:50 |026 |026 -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=785333 https://bugzilla.novell.com/show_bug.cgi?id=785333#c9 --- Comment #9 from Bernhard Wiedemann <bwiedemann@suse.com> 2012-11-25 03:00:26 CET --- This is an autogenerated message for OBS integration: This bug (785333) was mentioned in https://build.opensuse.org/request/show/142728 Evergreen:11.2 / icedtea-web -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=785333 https://bugzilla.novell.com/show_bug.cgi?id=785333#c10 --- Comment #10 from Bernhard Wiedemann <bwiedemann@suse.com> 2012-11-30 19:01:04 CET --- This is an autogenerated message for OBS integration: This bug (785333) was mentioned in https://build.opensuse.org/request/show/142995 Evergreen:11.2 / icedtea-web -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=785333 https://bugzilla.novell.com/show_bug.cgi?id=785333#c Michal Vyskocil <mvyskocil@suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Blocks| |787846 Depends on|787846 | -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=785333 https://bugzilla.novell.com/show_bug.cgi?id=785333#c11 Michal Vyskocil <mvyskocil@suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|ASSIGNED |RESOLVED Resolution| |FIXED --- Comment #11 from Michal Vyskocil <mvyskocil@suse.com> 2012-12-03 08:36:43 UTC --- released, fixed -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
participants (1)
-
bugzilla_noreply@novell.com