[oi-dev] hipster a8: ILOM remote console broken

[Udo Grabowski (IMK)]

Found out that launching the 'Remote Console' (javaws application)
no longer works in hipster (works in a7):

The jnlp file started with javaws is:
------------------------------------------------------------
<?xml version="1.0" encoding="UTF-8"?>

<jnlp spec="1.0+" codebase="https://imksuns-sp42:443/">
      <information>
         <title>JavaRConsole</title>
         <vendor>Sun Microsystems</vendor>
         <description kind="one-line">JavaRConsole Console Redirection 
Application</description>
         <description kind="tooltip">JavaRConsole Console Redirection 
Application</description>
         <description kind="short">
             JavaRConsole enables a user to view the video display of an
             ILOM computer equipped with a service processor. It also enables
             the user to redirect the local keyboard, mouse, CD-ROM and floppy 
drives to
             the remote computer to allow for complete control over the remote 
machine.
         </description>
     </information>
     <security>
         <all-permissions/>
     </security>
     <resources>
         <j2se version="1.5+" initial-heap-size="32m"  max-heap-size="128m"/>
         <jar href="Java/JavaRConsole.jar"/>
         <jar href="Java/RedirLib.jar"/>
<!-- These are only used to override the built in values. -->
<!-- Enabling them will produce warnings with Java1.6 -->
<!-- See CR 6884159 -->
<!--
         <property name="DEBUGLIST" 
value="ui,general,video,threads,cdrom,floppy,dispatcher,hid,scsi,network,cli"/>
         <property name="SEV_WARN" value="ilomrc.log"/>
         <property name="SEV_CRIT" value="ilomrc.log"/>
-->
     </resources>
     <resources os="Linux" arch="i386">
         <nativelib href="Java/linuxi386.jar"/>
     </resources>
     <resources os="Windows" arch="x86">
         <nativelib href="Java/win32.jar"/>
     </resources>
     <resources os="SunOS" arch="x86">
         <nativelib href="Java/solarisx86.jar"/>
     </resources>
     <resources os="SunOS" arch="sparc">
         <nativelib href="Java/solarissparc.jar"/>
     </resources>
     <application-desc>
         <argument>16</argument>
                 <argument>imksuns-sp42</argument>
         <argument>root-sp-1</argument>
         <argument>fTXRpdSkEUWAXNK</argument>

     </application-desc>
</jnlp>
------------------------------------------------------------
and produces this exception:
------------------------------------------------------------
java.io.IOException: JNLP Jar download failure.
	at com.sun.javaws.LaunchDownload.validateResults(LaunchDownload.java:1241)
	at com.sun.javaws.LaunchDownload.downloadJarFiles(LaunchDownload.java:1213)
	at com.sun.javaws.LaunchDownload.downloadEagerorAll(LaunchDownload.java:920)
	at com.sun.javaws.Launcher.downloadResources(Launcher.java:1617)
	at com.sun.javaws.Launcher.prepareResources(Launcher.java:1013)
	at com.sun.javaws.Launcher.prepareAllResources(Launcher.java:621)
	at com.sun.javaws.Launcher.prepareToLaunch(Launcher.java:327)
	at com.sun.javaws.Launcher.prepareToLaunch(Launcher.java:199)
	at com.sun.javaws.Launcher.launch(Launcher.java:116)
	at com.sun.javaws.Main.launchApp(Main.java:416)
	at com.sun.javaws.Main.continueInSecureThread(Main.java:248)
	at com.sun.javaws.Main$1.run(Main.java:110)
	at java.lang.Thread.run(Thread.java:722)
------------------------------------------------------------
I copied all certs from a7 /etc/cert to a8, as there are some SUN
certs which maz come into play here. Java itself was not changed,


cryptoadm list looks like a7:

User-level providers:
Provider: /usr/lib/security/$ISA/pkcs11_kernel.so
Provider: /usr/lib/security/$ISA/pkcs11_softtoken.so
Provider: /usr/lib/security/$ISA/pkcs11_tpm.so

Kernel software providers:
         des
         aes
         arcfour
         blowfish
         ecc
         sha1
         sha2
         md4
         md5
         rsa
         swrand
------------------------------------------------------------

certutil -L:
certutil: function failed: The certificate/key database is in an old, 
unsupported format.
------------------------------------------------------------
The wrapper shared libs in solarisx86.jar link to existing libs:

ldd /tmp/libjavacdromwrapper.so
         libstdc++.so.6 =>        /usr/sfw/lib/libstdc++.so.6
         libm.so.2 =>     /lib/libm.so.2
         libgcc_s.so.1 =>         /usr/sfw/lib/libgcc_s.so.1
         libc.so.1 =>     /lib/libc.so.1

What changed to break this ? Do I have to reimport the old
certs into some database to reenable the RConsole ?
-- 
Dr.Udo Grabowski    Inst.f.Meteorology a.Climate Research IMK-ASF-SAT
www.imk-asf.kit.edu/english/sat.php
KIT - Karlsruhe Institute of Technology            http://www.kit.edu
Postfach 3640,76021 Karlsruhe,Germany  T:(+49)721 608-26026 F:-926026

-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 2050 bytes
Desc: S/MIME Cryptographic Signature
URL: <http://openindiana.org/pipermail/oi-dev/attachments/20130607/08ee577c/attachment-0004.bin>