Bug 482943
Summary: | Applet fails to initialize for signed applet | ||||||||||||||
---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
Product: | [Fedora] Fedora | Reporter: | Pontus Enhager <enpontus> | ||||||||||||
Component: | java-1.6.0-openjdk | Assignee: | Lillian Angel <langel> | ||||||||||||
Status: | CLOSED RAWHIDE | QA Contact: | Fedora Extras Quality Assurance <extras-qa> | ||||||||||||
Severity: | medium | Docs Contact: | |||||||||||||
Priority: | low | ||||||||||||||
Version: | 10 | CC: | dbhole, enpontus, langel, lkundrak, mjw, rayvd, rvandolson | ||||||||||||
Target Milestone: | --- | Keywords: | Reopened | ||||||||||||
Target Release: | --- | ||||||||||||||
Hardware: | All | ||||||||||||||
OS: | Linux | ||||||||||||||
Whiteboard: | |||||||||||||||
Fixed In Version: | Doc Type: | Bug Fix | |||||||||||||
Doc Text: | Story Points: | --- | |||||||||||||
Clone Of: | Environment: | ||||||||||||||
Last Closed: | 2009-03-03 15:47:10 UTC | Type: | --- | ||||||||||||
Regression: | --- | Mount Type: | --- | ||||||||||||
Documentation: | --- | CRM: | |||||||||||||
Verified Versions: | Category: | --- | |||||||||||||
oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |||||||||||||
Cloudforms Team: | --- | Target Upstream Version: | |||||||||||||
Embargoed: | |||||||||||||||
Attachments: |
|
Description
Pontus Enhager
2009-01-28 21:55:38 UTC
Created attachment 330288 [details]
screendump
screendump of failing signing applet, showing grey box instead of signing area
ok i think i referred to the wrong bug above - # 477351 was the one i really meant finally got around to install the sun java (1.5.0) and test - the signing process worked. I willget back and test with openjdk again when i get the time again. I have had discussions with the service provider (www.fk.se) who still haven't admitted anything wrong on their side. So https://test.bankid.com/TestBankidCom/Templates/TestPage.aspx?id=22 works, but your service provider (www.fk.se) does not? Can you provide the logs of the run with firefox please? To do so, start firefox from console as 'ICEDTEAPLUGIN_DEBUG=true firefox' ... and then attach the resulting output and the newly created /tmp/java.stderr file Created attachment 332436 [details]
java.std{err,out} and console output
ok previous archive seems corrupt updating with a fresher one
please tell if you want a log/trace from the sun java run as well
to answer your question - yes the test signing applet at the provider of the service (test.bankid.com) works, but the application that i want to use at www.fk.se does not (with openjdk), whereas i have no problem with the sun version oh i can verify that the applet still does not work with openjdk This is starting to look like Bug# 480487. Can you try the following commands? : find ~/.icedteaplugin/cache/https/gate1.forsakringskassan.se -type f -exec ls -l '{}' \; and then 'file ~/.icedteaplugin/cache/https/gate1.forsakringskassan.se/...' on each of the files that the above command returns? [pontus@palsternacka ~]$ find ~/.icedteaplugin/cache/https/gate1.forsakringskassan.se -type f -exec ls -l '{}' \; -rw-rw-r-- 1 pontus pontus 530 2009-02-18 20:37 /home/pontus/.icedteaplugin/cache/https/gate1.forsakringskassan.se/portal2/arkiv/cbt_bidt_3_5_5_sign.jar -rw-rw-r-- 1 pontus pontus 131 2009-02-18 20:37 /home/pontus/.icedteaplugin/cache/https/gate1.forsakringskassan.se/portal2/arkiv/cbt_bidt_3_5_5_sign.jar.info [pontus@palsternacka ~]$ file ~/.icedteaplugin/cache/https/gate1.forsakringskassan.se/portal2/arkiv/cbt_bidt_3_5_5_sign.jar* /home/pontus/.icedteaplugin/cache/https/gate1.forsakringskassan.se/portal2/arkiv/cbt_bidt_3_5_5_sign.jar: HTML document text /home/pontus/.icedteaplugin/cache/https/gate1.forsakringskassan.se/portal2/arkiv/cbt_bidt_3_5_5_sign.jar.info: ASCII text [pontus@palsternacka ~]$ Yeah, this looks like the same problem as Bug# 480487. I tried fetching via wget with multiple agents and got the same error. Looks like the plugin needs to send the authenticated session info (cookie) alongwith, for this site as well. There is an easy way to confirm.. can you try downloading this via firefox: https://gate1.forsakringskassan.se/portal2/arkiv/cbt_bidt_3_5_5_sign.jar First without the initial sign in, and then with? If the latter works, this bug is identical to Bug# 480487 without logging in i end up here: http://www.fk.se/inloggning/privatpersoner/?TYPE=33554433&REALMOID=06-000044bd-fa59-147e-b69f-831001150000&GUID=&SMAUTHREASON=0&METHOD=GET&SMAGENTNAME=-SM-BP%2bCCLtY8ddi4FDGvTNhPTvXFdOnpZa1hvQMKXTVAMD9UNc3OPj4Oj1pn2UqnI6y&TARGET=-SM-https%3a%2f%2fgate1.forsakringskassan.se%2fportal2%2farkiv%2fcbt_bidt_3_5_5_sign.jar after logging in i get a file to download Created attachment 332592 [details]
.jar file in question
if needed
Yeah, I'm afraid this is the same problem as 480487 :( I am going to close this as a dupe -- 480487 is on my todo list and I hope to start work on it by tomorrow. *** This bug has been marked as a duplicate of bug 480487 *** Re-opening bug. You said it shows a grey box now? Can you please follows the steps in Comment #8 again, and post the results? Additionally, can you also run firefox as 'ICEDTEAPLUGIN_DEBUG=true firefox' from console, and then attach the output log after visiting that site, along with the /tmp/java.std* files that get created? The applet providing the login page starts up alright for me (obviously I have no login to test however). See attached. Created attachment 333050 [details]
Login page using java-1.6.0-openjdk-plugin-1.6.0.0-10.b14.1.fc10.i386
Yep, that page works for me too. Apparently there is a secondary issue though, that the applet on the following page (after login) doesn't work.. please note that i got the login screen and managed to login with the previous version i had installed Oh, so you cant even get to that initial applet now? Can you post the logs from firefox and the /tmp/java.std* files and follow steps from comment #14? i'll get back to that later tonight possibly tomorrow - ive got two kids to entertain and a wife that expects an anniversary dinner tonight correct that i does not even get the login screen with this and it does seems to be the correct version doesn't it ? [pontus@palsternacka ~]$ rpm -qa |grep openjdk java-1.6.0-openjdk-1.6.0.0-10.b14.1.fc10.i386 java-1.6.0-openjdk-plugin-1.6.0.0-10.b14.1.fc10.i386 [pontus@palsternacka ~]$ java -version java version "1.6.0_0" IcedTea6 1.4 (fedora-10.b14.1.fc10-i386) Runtime Environment (build 1.6.0_0-b14) OpenJDK Client VM (build 14.0-b08, mixed mode) [pontus@palsternacka ~]$ Yep, that's the right version. Whenever you do get to the logs (no rush on that..), please also check about:plugins to make sure that the plugin is being seen, and that 'rpm -qV java-1.6.0-openjdk-plugin' returns no errors. about:plugins yields a positive result on installation testing the java at java.com test applet fails as do other java enabled sites cleaning cache does not help, nor does starting the the browser with a clean profile. I'll get back to some further testing later on any clues ? The ICEDTEAPLUGIN_DEBUG=true would probably be pretty helpful. I'm not convinced the plugin is even being loaded correctly. :-) As mentioned before, I can get the login page on that bank site just fine with the latest scratch build of the plugin (and other Java sites work OK as well). Something seems a little funky indeed! Ah, none of the applets working.. looks like an installation issue. Does 'rpm -qV java-1.6.0-openjdk-plugin' show any output? Also, what does 'readlink -f /usr/lib/mozilla/plugins/libjavaplugin.so' show? (/usr/lib64/... if you are on x86_64). ahh found it - during all the changes (today) between the sun java and the openjdk one i managed to forget a link/copy of a plugin in the wrong place. found it - removed it relinked against the right plugin file and voila everything works it does however seem somewhat flaky - if i can reproduce that i'll get back with another bug thanks guys for the assistance - now i can get paid again, and everybody will get much happier, sorry for my mistake at the homerun Ah, cool. Glad it works! Out of curiosity, what did you mean by flaky? Did it crash or something? the login applet have not started 100% of the occasions i have tried it, and i honestly think that it did not work on the first try even after correcting the file link, but after restarting the web browser _again_ it did. but as i said - i will investigate the matter further and get back if i reach a reproducible behaviour fix will be in rawhide within the next couple of days |