Uploaded image for project: 'JDK'
  1. JDK
  2. JDK-7027851

applet not authenticating via digital certificate and allowing jar files to load

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Cannot Reproduce
    • Icon: P3 P3
    • 7
    • 6u24
    • deploy

      FULL PRODUCT VERSION :
      Java Plug-in 1.6.0_24
      Using JRE version 1.6.0_24-b07 Java HotSpot(TM) Client VM



      ADDITIONAL OS VERSION INFORMATION :
      OS = WinXP SP3
      Browser = IE6 (6.0.2900.5512.xpsp_sp3_gdr.101209-1647)

      EXTRA RELEVANT SYSTEM CONFIGURATION :
      System specs: (standard)
       
      1. Browsers = Internet Explorer 6, 7, and 8; Mozilla Firefox 3.6.13.
      2. Windows XP SP3; Windows Vista; Windows 7
      3. All restrictive programs/firewalls/proxies have been removed/disabled.
      4. We have a server setup using the Axway Cyclone Director to receive the orders that the customer places using the Java Applet for customer application.

      A DESCRIPTION OF THE PROBLEM :
      The type of software this problem occurs in is an ecommerce solution which supports software and hardware used for ordering and other functions.
      The end user ecommerce customers use Java to transfer mixed code (partially encrypted) orders, and many were affected by the recent mal-ware that would in turn, stop the applet from running.

        Customer has installed Java SE JRE 1.6.0_24 to resolve the issue, however, we have encountered a new issue.
      At a certain point in the applet cycle, the customer must click a browse button to locate and attach a digital certificate.

      On every pc that we have installed JRE 1.6.0_24, the browse button fails to pull up the navigation window to locate the file on the hard drive. We are still running with the same settings we use on JRE 1.6.0_23 and do not know what is causing the issue.

      REGRESSION. Last worked in version 6

      STEPS TO FOLLOW TO REPRODUCE THE PROBLEM :
      The application is a customer ecommerce applet but I suppose any applet that must authenticate using a digital certificate would possibly show a similar problem going from JRE 1.6.0_23 to _24.

      EXPECTED VERSUS ACTUAL BEHAVIOR :
      EXPECTED -
      Expected Result:
      The end user should be presented with a window that allows them to authenticate with a local digital certificate then proceed with a secure ecommerce transaction.
      ACTUAL -
      Problem:
      On every pc that we have installed JRE 1.6.0_24, the browse button fails to pull up the navigation window to locate the file on the hard drive.

      ERROR MESSAGES/STACK TRACES THAT OCCUR :
      JConsole TRACE 5:

      Java Plug-in 1.6.0_24
      Using JRE version 1.6.0_24-b07 Java HotSpot(TM) Client VM
      User home directory = C:\Documents and Settings\egtzr4t

      ----------------------------------------------------
      c: clear console window
      f: finalize objects on finalization queue
      g: garbage collect
      h: display this help message
      l: dump classloader list
      m: print memory usage
      o: trigger logging
      q: hide console
      r: reload policy configuration
      s: dump system and deployment properties
      t: dump thread list
      v: dump thread stack
      x: clear classloader cache
      0-5: set trace level to <n>
      ----------------------------------------------------

      security: property package.access value sun.,com.sun.xml.internal.ws.,com.sun.xml.internal.bind.,com.sun.imageio.
      security: property package.access new value sun.,com.sun.xml.internal.ws.,com.sun.xml.internal.bind.,com.sun.imageio.,com.sun.javaws
      security: property package.access value sun.,com.sun.xml.internal.ws.,com.sun.xml.internal.bind.,com.sun.imageio.,com.sun.javaws
      security: property package.access new value sun.,com.sun.xml.internal.ws.,com.sun.xml.internal.bind.,com.sun.imageio.,com.sun.javaws,com.sun.deploy
      security: property package.access value sun.,com.sun.xml.internal.ws.,com.sun.xml.internal.bind.,com.sun.imageio.,com.sun.javaws,com.sun.deploy
      security: property package.access new value sun.,com.sun.xml.internal.ws.,com.sun.xml.internal.bind.,com.sun.imageio.,com.sun.javaws,com.sun.deploy,com.sun.jnlp
      security: property package.definition value null
      security: property package.definition new value com.sun.javaws
      security: property package.definition value com.sun.javaws
      security: property package.definition new value com.sun.javaws,com.sun.deploy
      security: property package.definition value com.sun.javaws,com.sun.deploy
      security: property package.definition new value com.sun.javaws,com.sun.deploy,com.sun.jnlp
      security: property package.access value sun.,com.sun.xml.internal.ws.,com.sun.xml.internal.bind.,com.sun.imageio.,com.sun.javaws,com.sun.deploy,com.sun.jnlp
      security: property package.access new value sun.,com.sun.xml.internal.ws.,com.sun.xml.internal.bind.,com.sun.imageio.,com.sun.javaws,com.sun.deploy,com.sun.jnlp,org.mozilla.jss
      security: property package.definition value com.sun.javaws,com.sun.deploy,com.sun.jnlp
      security: property package.definition new value com.sun.javaws,com.sun.deploy,com.sun.jnlp,org.mozilla.jss
      basic: Added progress listener: sun.plugin.util.GrayBoxPainter$GrayBoxProgressListener@406199
      security: Blacklist revocation check is enabled
      security: Trusted libraries list check is enabled
      network: Cache entry found [url: https://newordering.mckesson.com/SMOnline/wtapplet/log4j-1.2.12.jar, version: null] prevalidated=false/0
      network: Connecting https://newordering.mckesson.com/SMOnline/wtapplet/log4j-1.2.12.jar with proxy=DIRECT
      network: Connecting http://newordering.mckesson.com:443/ with proxy=DIRECT
      Trace level set to 5: all ... completed.
      security: Loading Root CA certificates from C:\Program Files\Java\jre6\lib\security\cacerts
      security: Loaded Root CA certificates from C:\Program Files\Java\jre6\lib\security\cacerts
      security: Loading SSL Root CA certificates from C:\Program Files\Java\jre6\lib\security\cacerts
      security: Loaded SSL Root CA certificates from C:\Program Files\Java\jre6\lib\security\cacerts
      security: Loading Deployment SSL certificates from C:\Documents and Settings\egtzr4t\Application Data\Sun\Java\Deployment\security\trusted.jssecerts
      security: Loaded Deployment SSL certificates from C:\Documents and Settings\egtzr4t\Application Data\Sun\Java\Deployment\security\trusted.jssecerts
      security: Loading certificates from Deployment session certificate store
      security: Loaded certificates from Deployment session certificate store
      security: Loading certificates from Internet Explorer ROOT certificate store
      security: Loaded certificates from Internet Explorer ROOT certificate store
      security: Checking if certificate is in Deployment denied certificate store
      network: Connecting https://newordering.mckesson.com/SMOnline/wtapplet/log4j-1.2.12.jar with cookie "s_vi=[CS]v1|26888D7F051D045F-60000105200108DF[CE]; s_lv=1298304840406; WT_FPC=id=10.196.3.46-1297575440.30128360:lv=1297951038959:ss=1297950973656; s_nr=1298304840406; s_vnum=1300896495489%26vn%3D1; s_invisit=true; s_lv_s=Less%20than%207%20days; TLTHID=FAEDC3863DD5103DAE339B3BA57B512D; TLTSID=90B06F1E3DD5103D7053CA32C4FFF7C9; s_cc=true; s_sq=mckessonprodb%3D%2526pid%253DMcKesson%252520Connect%25253AHome%2526pidt%253D1%2526oid%253Dhttps%25253A//connect.mckesson.com/portal/site/smo/menuitem.4dec8b87f1917a3ece3ee6105740d0a0/%2526ot%253DA%2526oi%253D200; JSESSIONID=2qy6NvPHcHVzp7kGdjvNzs6rWL217qF3Q6FBShmLCqFLN2YqRxVY!-1387607239"
      network: Server https://newordering.mckesson.com/SMOnline/wtapplet/log4j-1.2.12.jar requesting to set-cookie with "TLTHID=FC18F32A3DD5103DAE479B3BA57B512D; path=/; domain=.mckesson.com"
      network: ResponseCode for https://newordering.mckesson.com/SMOnline/wtapplet/log4j-1.2.12.jar : 304
      network: Encoding for https://newordering.mckesson.com/SMOnline/wtapplet/log4j-1.2.12.jar : null
      network: Disconnect connection to https://newordering.mckesson.com/SMOnline/wtapplet/log4j-1.2.12.jar
      cache: Read manifest for https://newordering.mckesson.com/SMOnline/wtapplet/log4j-1.2.12.jar: read=190 full=190
      network: Cache entry found [url: https://newordering.mckesson.com/SMOnline/wtapplet/axway-cluster.jar, version: null] prevalidated=true/0
      network: Connecting https://newordering.mckesson.com/SMOnline/wtapplet/axway-cluster.jar with proxy=DIRECT
      network: Connecting https://newordering.mckesson.com/SMOnline/wtapplet/axway-cluster.jar with cookie "s_vi=[CS]v1|26888D7F051D045F-60000105200108DF[CE]; s_lv=1298304840406; WT_FPC=id=10.196.3.46-1297575440.30128360:lv=1297951038959:ss=1297950973656; s_nr=1298304840406; s_vnum=1300896495489%26vn%3D1; s_invisit=true; s_lv_s=Less%20than%207%20days; TLTHID=FC18F32A3DD5103DAE479B3BA57B512D; TLTSID=90B06F1E3DD5103D7053CA32C4FFF7C9; s_cc=true; s_sq=mckessonprodb%3D%2526pid%253DMcKesson%252520Connect%25253AHome%2526pidt%253D1%2526oid%253Dhttps%25253A//connect.mckesson.com/portal/site/smo/menuitem.4dec8b87f1917a3ece3ee6105740d0a0/%2526ot%253DA%2526oi%253D200; JSESSIONID=2qy6NvPHcHVzp7kGdjvNzs6rWL217qF3Q6FBShmLCqFLN2YqRxVY!-1387607239"
      network: Server https://newordering.mckesson.com/SMOnline/wtapplet/axway-cluster.jar requesting to set-cookie with "TLTHID=FC28857E3DD5103DAE499B3BA57B512D; path=/; domain=.mckesson.com"
      network: ResponseCode for https://newordering.mckesson.com/SMOnline/wtapplet/axway-cluster.jar : 304
      network: Encoding for https://newordering.mckesson.com/SMOnline/wtapplet/axway-cluster.jar : null
      network: Disconnect connection to https://newordering.mckesson.com/SMOnline/wtapplet/axway-cluster.jar
      cache: Read manifest for https://newordering.mckesson.com/SMOnline/wtapplet/axway-cluster.jar: read=112 full=3279
      network: Cache entry found [url: https://newordering.mckesson.com/SMOnline/wtapplet/wtapplet.jar, version: null] prevalidated=true/0
      network: Connecting https://newordering.mckesson.com/SMOnline/wtapplet/wtapplet.jar with proxy=DIRECT
      network: Connecting https://newordering.mckesson.com/SMOnline/wtapplet/wtapplet.jar with cookie "s_vi=[CS]v1|26888D7F051D045F-60000105200108DF[CE]; s_lv=1298304840406; WT_FPC=id=10.196.3.46-1297575440.30128360:lv=1297951038959:ss=1297950973656; s_nr=1298304840406; s_vnum=1300896495489%26vn%3D1; s_invisit=true; s_lv_s=Less%20than%207%20days; TLTHID=FC28857E3DD5103DAE499B3BA57B512D; TLTSID=90B06F1E3DD5103D7053CA32C4FFF7C9; s_cc=true; s_sq=mckessonprodb%3D%2526pid%253DMcKesson%252520Connect%25253AHome%2526pidt%253D1%2526oid%253Dhttps%25253A//connect.mckesson.com/portal/site/smo/menuitem.4dec8b87f1917a3ece3ee6105740d0a0/%2526ot%253DA%2526oi%253D200; JSESSIONID=2qy6NvPHcHVzp7kGdjvNzs6rWL217qF3Q6FBShmLCqFLN2YqRxVY!-1387607239"
      network: Server https://newordering.mckesson.com/SMOnline/wtapplet/wtapplet.jar requesting to set-cookie with "TLTHID=FC4009E23DD5103DAE4A9B3BA57B512D; path=/; domain=.mckesson.com"
      network: ResponseCode for https://newordering.mckesson.com/SMOnline/wtapplet/wtapplet.jar : 304
      network: Encoding for https://newordering.mckesson.com/SMOnline/wtapplet/wtapplet.jar : null
      network: Disconnect connection to https://newordering.mckesson.com/SMOnline/wtapplet/wtapplet.jar
      cache: Read manifest for https://newordering.mckesson.com/SMOnline/wtapplet/wtapplet.jar: read=112 full=3520
      cache: Reading Signers from 2713 https://newordering.mckesson.com/SMOnline/wtapplet/wtapplet.jar | C:\Documents and Settings\egtzr4t\Application Data\Sun\Java\Deployment\cache\6.0\62\2a1b847e-614984ce.idx
      basic: Plugin2ClassLoader.getPermissions CeilingPolicy allPerms
      network: Cache entry found [url: https://newordering.mckesson.com/SMOnline/wtapplet/forms_rt.jar, version: null] prevalidated=true/0
      network: Connecting https://newordering.mckesson.com/SMOnline/wtapplet/forms_rt.jar with proxy=DIRECT
      network: Connecting https://newordering.mckesson.com/SMOnline/wtapplet/forms_rt.jar with cookie "s_vi=[CS]v1|26888D7F051D045F-60000105200108DF[CE]; s_lv=1298304840406; WT_FPC=id=10.196.3.46-1297575440.30128360:lv=1297951038959:ss=1297950973656; s_nr=1298304840406; s_vnum=1300896495489%26vn%3D1; s_invisit=true; s_lv_s=Less%20than%207%20days; TLTHID=FC4009E23DD5103DAE4A9B3BA57B512D; TLTSID=90B06F1E3DD5103D7053CA32C4FFF7C9; s_cc=true; s_sq=mckessonprodb%3D%2526pid%253DMcKesson%252520Connect%25253AHome%2526pidt%253D1%2526oid%253Dhttps%25253A//connect.mckesson.com/portal/site/smo/menuitem.4dec8b87f1917a3ece3ee6105740d0a0/%2526ot%253DA%2526oi%253D200; JSESSIONID=2qy6NvPHcHVzp7kGdjvNzs6rWL217qF3Q6FBShmLCqFLN2YqRxVY!-1387607239"
      network: Server https://newordering.mckesson.com/SMOnline/wtapplet/forms_rt.jar requesting to set-cookie with "TLTHID=FC52A55C3DD5103DAE4C9B3BA57B512D; path=/; domain=.mckesson.com"
      network: ResponseCode for https://newordering.mckesson.com/SMOnline/wtapplet/forms_rt.jar : 304
      network: Encoding for https://newordering.mckesson.com/SMOnline/wtapplet/forms_rt.jar : null
      network: Disconnect connection to https://newordering.mckesson.com/SMOnline/wtapplet/forms_rt.jar
      cache: Read manifest for https://newordering.mckesson.com/SMOnline/wtapplet/forms_rt.jar: read=112 full=1783
      network: Cache entry found [url: https://newordering.mckesson.com/SMOnline/wtapplet/ib6core.jar, version: null] prevalidated=true/0
      network: Connecting https://newordering.mckesson.com/SMOnline/wtapplet/ib6core.jar with proxy=DIRECT
      network: Connecting https://newordering.mckesson.com/SMOnline/wtapplet/ib6core.jar with cookie "s_vi=[CS]v1|26888D7F051D045F-60000105200108DF[CE]; s_lv=1298304840406; WT_FPC=id=10.196.3.46-1297575440.30128360:lv=1297951038959:ss=1297950973656; s_nr=1298304840406; s_vnum=1300896495489%26vn%3D1; s_invisit=true; s_lv_s=Less%20than%207%20days; TLTHID=FC52A55C3DD5103DAE4C9B3BA57B512D; TLTSID=90B06F1E3DD5103D7053CA32C4FFF7C9; s_cc=true; s_sq=mckessonprodb%3D%2526pid%253DMcKesson%252520Connect%25253AHome%2526pidt%253D1%2526oid%253Dhttps%25253A//connect.mckesson.com/portal/site/smo/menuitem.4dec8b87f1917a3ece3ee6105740d0a0/%2526ot%253DA%2526oi%253D200; JSESSIONID=2qy6NvPHcHVzp7kGdjvNzs6rWL217qF3Q6FBShmLCqFLN2YqRxVY!-1387607239"
      network: Server https://newordering.mckesson.com/SMOnline/wtapplet/ib6core.jar requesting to set-cookie with "TLTHID=FC65B5C03DD5103DAE4F9B3BA57B512D; path=/; domain=.mckesson.com"
      network: ResponseCode for https://newordering.mckesson.com/SMOnline/wtapplet/ib6core.jar : 304
      network: Encoding for https://newordering.mckesson.com/SMOnline/wtapplet/ib6core.jar : null
      network: Disconnect connection to https://newordering.mckesson.com/SMOnline/wtapplet/ib6core.jar
      cache: Read manifest for https://newordering.mckesson.com/SMOnline/wtapplet/ib6core.jar: read=112 full=14125
      network: Cache entry found [url: https://newordering.mckesson.com/SMOnline/wtapplet/ib6swing.jar, version: null] prevalidated=true/0
      network: Connecting https://newordering.mckesson.com/SMOnline/wtapplet/ib6swing.jar with proxy=DIRECT
      network: Connecting https://newordering.mckesson.com/SMOnline/wtapplet/ib6swing.jar with cookie "s_vi=[CS]v1|26888D7F051D045F-60000105200108DF[CE]; s_lv=1298304840406; WT_FPC=id=10.196.3.46-1297575440.30128360:lv=1297951038959:ss=1297950973656; s_nr=1298304840406; s_vnum=1300896495489%26vn%3D1; s_invisit=true; s_lv_s=Less%20than%207%20days; TLTHID=FC65B5C03DD5103DAE4F9B3BA57B512D; TLTSID=90B06F1E3DD5103D7053CA32C4FFF7C9; s_cc=true; s_sq=mckessonprodb%3D%2526pid%253DMcKesson%252520Connect%25253AHome%2526pidt%253D1%2526oid%253Dhttps%25253A//connect.mckesson.com/portal/site/smo/menuitem.4dec8b87f1917a3ece3ee6105740d0a0/%2526ot%253DA%2526oi%253D200; JSESSIONID=2qy6NvPHcHVzp7kGdjvNzs6rWL217qF3Q6FBShmLCqFLN2YqRxVY!-1387607239"
      network: Server https://newordering.mckesson.com/SMOnline/wtapplet/ib6swing.jar requesting to set-cookie with "TLTHID=FC75CAC83DD5103DAE519B3BA57B512D; path=/; domain=.mckesson.com"
      network: ResponseCode for https://newordering.mckesson.com/SMOnline/wtapplet/ib6swing.jar : 304
      network: Encoding for https://newordering.mckesson.com/SMOnline/wtapplet/ib6swing.jar : null
      network: Disconnect connection to https://newordering.mckesson.com/SMOnline/wtapplet/ib6swing.jar
      cache: Read manifest for https://newordering.mckesson.com/SMOnline/wtapplet/ib6swing.jar: read=112 full=1669
      network: Cache entry found [url: https://newordering.mckesson.com/SMOnline/wtapplet/ib6util.jar, version: null] prevalidated=true/0
      network: Connecting https://newordering.mckesson.com/SMOnline/wtapplet/ib6util.jar with proxy=DIRECT
      network: Connecting https://newordering.mckesson.com/SMOnline/wtapplet/ib6util.jar with cookie "s_vi=[CS]v1|26888D7F051D045F-60000105200108DF[CE]; s_lv=1298304840406; WT_FPC=id=10.196.3.


      ( This report has more than 16,000 characters and has been truncated. )

            dgu Dennis Gu (Inactive)
            webbuggrp Webbug Group
            Votes:
            0 Vote for this issue
            Watchers:
            0 Start watching this issue

              Created:
              Updated:
              Resolved:
              Imported:
              Indexed: