Page 1 of 1

Uploader servlet certificate expired

PostPosted:Wed Aug 13, 2014 5:44 pm
by kesha
Hello,
I tried using uploader recently and it was blocked because its certificate expired on 8th August. Is there any provision that will allow me to update the certificate. Thanks in advance for the help.

Re: Uploader servlet certificate expired

PostPosted:Thu Aug 14, 2014 9:20 am
by jllort
I saw you've posted the same question tree times ( I removed the duplicates ). We know the applet certificates has been expired, we're expecting renovation process and we'll release a new version to solve this problem. Meanwhile I think although you see the warning you still can use the applets ( confirm this point please ).

Re: Uploader servlet certificate expired

PostPosted:Thu Aug 14, 2014 2:04 pm
by kesha
Thank you for quick reply. I cannot use this applet because I am using JDK 1.7 54 update which does not allow me to use applications that does not have valid certificate. Downgrading the jdk version is not the option for me. Will you please let me know as to when will the latest build be made available with updated certificate? Thank you in advance.

Re: Uploader servlet certificate expired

PostPosted:Mon Aug 18, 2014 2:13 pm
by jllort
That's quite rare, because I'm using JDK 1.7 update 65 and I'm able to use it. Try "java plugin control" -> tab security -> list of sites add your url.

If does not going right, please indicate the browser, the OS and make for us some screenshots of java popup warnings or errors.

Re: Uploader servlet certificate expired

PostPosted:Sat Aug 23, 2014 8:45 pm
by ip0072000
Hello. I'm using Java 7 update 67 and I'm experiencing the same problem. Using Chrome.
OKM Community 6.3 build 8150 on Fedora... will install on CentOS this afternoon

This is part of the Java Console Debug:
Code: Select all
security: Trust for: http://okm01.nnnnnnn.com:8080/OpenKM/uploader.jar has ended: Wed Dec 31 18:00:00 CST 1969
security: Loaded certificates from Deployment session certificate store
security: Validate the certificate chain using CertPath API
security: The certificate has expired, need to check timestamping info
security: No timestamping info available
security: Loading Root CA certificates from C:\Program Files (x86)\Java\jre7\lib\security\cacerts
security: Loaded Root CA certificates from C:\Program Files (x86)\Java\jre7\lib\security\cacerts
security: Obtain certificate collection in Root CA certificate store
security: Loaded blacklisted.certs file: C:\Users\nnnnnnn\AppData\LocalLow\Sun\Java\Deployment\security\blacklisted.certs
security: Failing over to CRLs: Certificate does not specify OCSP responder
network: Cache entry not found [url: http://crl.thawte.com/ThawtePremiumServerCA.crl, version: null]
network: Connecting http://crl.thawte.com/ThawtePremiumServerCA.crl with proxy=DIRECT
network: Connecting http://crl.thawte.com:80/ with proxy=DIRECT
network: CleanupThread used 3 us
network: Downloading resource: http://crl.thawte.com/ThawtePremiumServerCA.crl
cache: Adding MemoryCache entry: http://crl.thawte.com/ThawtePremiumServerCA.crl
security: Certificate validation succeeded using OCSP/CRL
security: Saving certificates in Deployment session certificate store
security: Saved certificates in Deployment session certificate store
basic: Your security settings have blocked an application signed with an expired or not-yet-valid certificate from running
basic: Dialog type is not candidate for embedding

Re: Uploader servlet certificate expired

PostPosted:Sun Aug 24, 2014 8:36 am
by jllort
Install on Centos will not change anything. We must release a new version with certificates changed. However, from client side, I think if you follow the steps I described before, you can pass over the expiration date evaluation.

Re: Uploader servlet certificate expired

PostPosted:Sun Aug 24, 2014 4:39 pm
by ip0072000
Thanks. It worked with a lot of warnings.
Is there any date for this patch?

Re: Uploader servlet certificate expired

PostPosted:Thu Aug 28, 2014 7:31 am
by pavila
I've updated the applet with a new sign and now should work without problems.

Regards.

Re: Uploader servlet certificate expired

PostPosted:Sat Sep 27, 2014 11:09 pm
by skorpion78
How to update applet installation in already running OKM.

Re: Uploader servlet certificate expired

PostPosted:Mon Sep 29, 2014 7:30 am
by pavila