[oi-dev] hipster a8: ILOM remote console broken

[Udo Grabowski (IMK)]

On 13/06/2013 00:07, Andrzej Szeszo wrote:
> What kind of ILOM are you connecting to? Perhaps I could try
> replicating your problem over here by connecting to our Sun gear.

These are ILOM versions 3.0.x on a Sun Blade X6275, a Thumper X4540,
and a X4275. All of them worked with a7, but break on a8. I believe
that com.sun.javaws.LaunchDownload.validateResults may be related
to the certificate check, since the missing SUN certs are the obvious
change on a8, but I'm not sure, since there's no java source available
for ILOM.

>
> On 7 June 2013 17:15, Udo Grabowski (IMK) <udo.grabowski at kit.edu> wrote:
>> Found out that launching the 'Remote Console' (javaws application)
>> no longer works in hipster (works in a7):
....
....
>> ------------------------------------------------------------
>> and produces this exception:
>> ------------------------------------------------------------
>> java.io.IOException: JNLP Jar download failure.
>>          at
>> com.sun.javaws.LaunchDownload.validateResults(LaunchDownload.java:1241)
>>          at
>> com.sun.javaws.LaunchDownload.downloadJarFiles(LaunchDownload.java:1213)
>>          at
>> com.sun.javaws.LaunchDownload.downloadEagerorAll(LaunchDownload.java:920)
>>          at com.sun.javaws.Launcher.downloadResources(Launcher.java:1617)
>>          at com.sun.javaws.Launcher.prepareResources(Launcher.java:1013)
>>          at com.sun.javaws.Launcher.prepareAllResources(Launcher.java:621)
>>          at com.sun.javaws.Launcher.prepareToLaunch(Launcher.java:327)
>>          at com.sun.javaws.Launcher.prepareToLaunch(Launcher.java:199)
>>          at com.sun.javaws.Launcher.launch(Launcher.java:116)
>>          at com.sun.javaws.Main.launchApp(Main.java:416)
>>          at com.sun.javaws.Main.continueInSecureThread(Main.java:248)
>>          at com.sun.javaws.Main$1.run(Main.java:110)
>>          at java.lang.Thread.run(Thread.java:722)
>> ------------------------------------------------------------
>> I copied all certs from a7 /etc/cert to a8, as there are some SUN
>> certs which may come into play here. Java itself was not changed,
>>
>>
>> cryptoadm list looks like a7:
>>
>> User-level providers:
>> Provider: /usr/lib/security/$ISA/pkcs11_kernel.so
>> Provider: /usr/lib/security/$ISA/pkcs11_softtoken.so
>> Provider: /usr/lib/security/$ISA/pkcs11_tpm.so
>>
>> Kernel software providers:
>>          des
>>          aes
>>          arcfour
>>          blowfish
>>          ecc
>>          sha1
>>          sha2
>>          md4
>>          md5
>>          rsa
>>          swrand
>> ------------------------------------------------------------
>>
>> certutil -L:
>> certutil: function failed: The certificate/key database is in an old,
>> unsupported format.
>> ------------------------------------------------------------
>> The wrapper shared libs in solarisx86.jar link to existing libs:
>>
>> ldd /tmp/libjavacdromwrapper.so
>>          libstdc++.so.6 =>        /usr/sfw/lib/libstdc++.so.6
>>          libm.so.2 =>     /lib/libm.so.2
>>          libgcc_s.so.1 =>         /usr/sfw/lib/libgcc_s.so.1
>>          libc.so.1 =>     /lib/libc.so.1
>>
>> What changed to break this ? Do I have to reimport the old
>> certs into some database to reenable the RConsole ?
--
Dr.Udo Grabowski    Inst.f.Meteorology a.Climate Research IMK-ASF-SAT
www.imk-asf.kit.edu/english/sat.php
KIT - Karlsruhe Institute of Technology            http://www.kit.edu
Postfach 3640,76021 Karlsruhe,Germany  T:(+49)721 608-26026 F:-926026




-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 2050 bytes
Desc: S/MIME Cryptographic Signature
URL: <http://openindiana.org/pipermail/oi-dev/attachments/20130613/05086a40/attachment-0005.bin>