Created attachment 330287 [details] icedteaplugin-debug-info Description of problem: Applet fails to initialize for signed applet Version-Release number of selected component (if applicable): java-1.6.0-openjdk-1.6.0.0-9.b14.fc10.i386 java-1.6.0-openjdk-plugin-1.6.0.0-9.b14.fc10.i386 java-1.6.0-openjdk-devel-1.6.0.0-9.b14.fc10.i386 AND earlier released as well as unreleased versions How reproducible: every time Steps to Reproduce: 1. Try to use the self service of www.fk.se 2. Login with BankID (works OK) 3. Do all changes 4. try to sign registration 5. applet fails to start Actual results: applet works during log in at fk.se but not during signing of said registration a test service for said E-signing functionality is available here: https://test.bankid.com/TestBankidCom/Templates/TestPage.aspx?id=22 this service works Expected results: Additional info: this might or might not be related to bug # 304031 and other similar bugs, it should be mentioned however that the signing service have LIKELY been changed since the aforementioned bug, however i am not sure what version Göran and the others are referring to (my personal old version of the same signing certificate worked but was not valid due to age since october last year, the new one went public this week, i am not technical enough to determine what is equal and not) .
Created attachment 330288 [details] screendump screendump of failing signing applet, showing grey box instead of signing area
ok i think i referred to the wrong bug above - # 477351 was the one i really meant
finally got around to install the sun java (1.5.0) and test - the signing process worked. I willget back and test with openjdk again when i get the time again. I have had discussions with the service provider (www.fk.se) who still haven't admitted anything wrong on their side.
So https://test.bankid.com/TestBankidCom/Templates/TestPage.aspx?id=22 works, but your service provider (www.fk.se) does not? Can you provide the logs of the run with firefox please? To do so, start firefox from console as 'ICEDTEAPLUGIN_DEBUG=true firefox' ... and then attach the resulting output and the newly created /tmp/java.stderr file
Created attachment 332436 [details] java.std{err,out} and console output ok previous archive seems corrupt updating with a fresher one please tell if you want a log/trace from the sun java run as well
to answer your question - yes the test signing applet at the provider of the service (test.bankid.com) works, but the application that i want to use at www.fk.se does not (with openjdk), whereas i have no problem with the sun version
oh i can verify that the applet still does not work with openjdk
This is starting to look like Bug# 480487. Can you try the following commands? : find ~/.icedteaplugin/cache/https/gate1.forsakringskassan.se -type f -exec ls -l '{}' \; and then 'file ~/.icedteaplugin/cache/https/gate1.forsakringskassan.se/...' on each of the files that the above command returns?
[pontus@palsternacka ~]$ find ~/.icedteaplugin/cache/https/gate1.forsakringskassan.se -type f -exec ls -l '{}' \; -rw-rw-r-- 1 pontus pontus 530 2009-02-18 20:37 /home/pontus/.icedteaplugin/cache/https/gate1.forsakringskassan.se/portal2/arkiv/cbt_bidt_3_5_5_sign.jar -rw-rw-r-- 1 pontus pontus 131 2009-02-18 20:37 /home/pontus/.icedteaplugin/cache/https/gate1.forsakringskassan.se/portal2/arkiv/cbt_bidt_3_5_5_sign.jar.info [pontus@palsternacka ~]$ file ~/.icedteaplugin/cache/https/gate1.forsakringskassan.se/portal2/arkiv/cbt_bidt_3_5_5_sign.jar* /home/pontus/.icedteaplugin/cache/https/gate1.forsakringskassan.se/portal2/arkiv/cbt_bidt_3_5_5_sign.jar: HTML document text /home/pontus/.icedteaplugin/cache/https/gate1.forsakringskassan.se/portal2/arkiv/cbt_bidt_3_5_5_sign.jar.info: ASCII text [pontus@palsternacka ~]$
Yeah, this looks like the same problem as Bug# 480487. I tried fetching via wget with multiple agents and got the same error. Looks like the plugin needs to send the authenticated session info (cookie) alongwith, for this site as well. There is an easy way to confirm.. can you try downloading this via firefox: https://gate1.forsakringskassan.se/portal2/arkiv/cbt_bidt_3_5_5_sign.jar First without the initial sign in, and then with? If the latter works, this bug is identical to Bug# 480487
without logging in i end up here: http://www.fk.se/inloggning/privatpersoner/?TYPE=33554433&REALMOID=06-000044bd-fa59-147e-b69f-831001150000&GUID=&SMAUTHREASON=0&METHOD=GET&SMAGENTNAME=-SM-BP%2bCCLtY8ddi4FDGvTNhPTvXFdOnpZa1hvQMKXTVAMD9UNc3OPj4Oj1pn2UqnI6y&TARGET=-SM-https%3a%2f%2fgate1.forsakringskassan.se%2fportal2%2farkiv%2fcbt_bidt_3_5_5_sign.jar after logging in i get a file to download
Created attachment 332592 [details] .jar file in question if needed
Yeah, I'm afraid this is the same problem as 480487 :( I am going to close this as a dupe -- 480487 is on my todo list and I hope to start work on it by tomorrow. *** This bug has been marked as a duplicate of bug 480487 ***
Re-opening bug. You said it shows a grey box now? Can you please follows the steps in Comment #8 again, and post the results? Additionally, can you also run firefox as 'ICEDTEAPLUGIN_DEBUG=true firefox' from console, and then attach the output log after visiting that site, along with the /tmp/java.std* files that get created?
The applet providing the login page starts up alright for me (obviously I have no login to test however). See attached.
Created attachment 333050 [details] Login page using java-1.6.0-openjdk-plugin-1.6.0.0-10.b14.1.fc10.i386
Yep, that page works for me too. Apparently there is a secondary issue though, that the applet on the following page (after login) doesn't work..
please note that i got the login screen and managed to login with the previous version i had installed
Oh, so you cant even get to that initial applet now? Can you post the logs from firefox and the /tmp/java.std* files and follow steps from comment #14?
i'll get back to that later tonight possibly tomorrow - ive got two kids to entertain and a wife that expects an anniversary dinner tonight
correct that i does not even get the login screen with this and it does seems to be the correct version doesn't it ? [pontus@palsternacka ~]$ rpm -qa |grep openjdk java-1.6.0-openjdk-1.6.0.0-10.b14.1.fc10.i386 java-1.6.0-openjdk-plugin-1.6.0.0-10.b14.1.fc10.i386 [pontus@palsternacka ~]$ java -version java version "1.6.0_0" IcedTea6 1.4 (fedora-10.b14.1.fc10-i386) Runtime Environment (build 1.6.0_0-b14) OpenJDK Client VM (build 14.0-b08, mixed mode) [pontus@palsternacka ~]$
Yep, that's the right version. Whenever you do get to the logs (no rush on that..), please also check about:plugins to make sure that the plugin is being seen, and that 'rpm -qV java-1.6.0-openjdk-plugin' returns no errors.
about:plugins yields a positive result on installation testing the java at java.com test applet fails as do other java enabled sites cleaning cache does not help, nor does starting the the browser with a clean profile. I'll get back to some further testing later on any clues ?
The ICEDTEAPLUGIN_DEBUG=true would probably be pretty helpful. I'm not convinced the plugin is even being loaded correctly. :-) As mentioned before, I can get the login page on that bank site just fine with the latest scratch build of the plugin (and other Java sites work OK as well). Something seems a little funky indeed!
Ah, none of the applets working.. looks like an installation issue. Does 'rpm -qV java-1.6.0-openjdk-plugin' show any output? Also, what does 'readlink -f /usr/lib/mozilla/plugins/libjavaplugin.so' show? (/usr/lib64/... if you are on x86_64).
ahh found it - during all the changes (today) between the sun java and the openjdk one i managed to forget a link/copy of a plugin in the wrong place. found it - removed it relinked against the right plugin file and voila everything works it does however seem somewhat flaky - if i can reproduce that i'll get back with another bug thanks guys for the assistance - now i can get paid again, and everybody will get much happier, sorry for my mistake at the homerun
Ah, cool. Glad it works! Out of curiosity, what did you mean by flaky? Did it crash or something?
the login applet have not started 100% of the occasions i have tried it, and i honestly think that it did not work on the first try even after correcting the file link, but after restarting the web browser _again_ it did. but as i said - i will investigate the matter further and get back if i reach a reproducible behaviour
fix will be in rawhide within the next couple of days