Description of problem: The Hewlett-Packard iLO remote console applet will not run on fedora 10 x86_64 from firefox with the icedtea java plugin on my workstation. However, the iLO remote console runs correctly on my laptop running RHEL 5.3 x86_64 and the java 1.6.0_12-b04 plugin from Sun. Version-Release number of selected component (if applicable): iLO 2 firmware version 1.70 How reproducible: Every time Steps to Reproduce: 1. Login to the Integrated Lights-Out 2 (iLO) on a Hewlett-Packard ProLiant server web page using firefox 2. Click the remote console tab 3. Click the third choice "Remote Console" to launch the java applet based console. Actual results: A popup window with: Error saying that the applet not initialized. Expected results: A popup window running the console on the ProLiant server. Additional info: $ firefox net.sourceforge.jnlp.LaunchException: Fatal: Initialization Error: Could not initialize applet. at net.sourceforge.jnlp.Launcher.createApplet(Launcher.java:472) at net.sourceforge.jnlp.Launcher.getApplet(Launcher.java:418) at net.sourceforge.jnlp.Launcher$TgThread.run(Launcher.java:597) Caused by: java.lang.NullPointerException at net.sourceforge.jnlp.Launcher.createApplet(Launcher.java:458) ... 2 more Caused by: java.lang.NullPointerException at net.sourceforge.jnlp.Launcher.createApplet(Launcher.java:458) at net.sourceforge.jnlp.Launcher.getApplet(Launcher.java:418) at net.sourceforge.jnlp.Launcher$TgThread.run(Launcher.java:597) java.lang.NullPointerException at net.sourceforge.jnlp.NetxPanel.runLoader(NetxPanel.java:97) at sun.applet.AppletPanel.run(AppletPanel.java:380) at java.lang.Thread.run(Thread.java:636) java.lang.NullPointerException at sun.applet.AppletPanel.run(AppletPanel.java:430) at java.lang.Thread.run(Thread.java:636)
I am not sure how to log in to this site to reproduce the problem. Do you have a link?
run it with ICEDTEAPLUGIN_DEBUG=true and then post the /tmp/java.std* files in addition to the resulting console log. The java.stderr will usually have the root cause. thanks!
Created attachment 341647 [details] Java debug standard error.
Attached the stderr output but not stdout since it was empty. The output from the console where I started firefox is: [jemcevoy@localhost /]$ export ICEDTEAPLUGIN_DEBUG=true [jemcevoy@localhost /]$ firefox ICEDTEA PLUGIN: Factory::IcedTeaPluginFactory CONSTRUCTING FACTORY ICEDTEAPLUGIN_DEBUG = true ICEDTEA PLUGIN: Factory::IcedTeaPluginFactory return ICEDTEA PLUGIN: Factory::Initialize ICEDTEA PLUGIN: Factory::Initialize: using /usr/lib/jvm/java-1.6.0-openjdk-1.6.0.0.x86_64/jre/lib/amd64/../../bin/java ICEDTEA PLUGIN: thread manager ICEDTEA PLUGIN: current thread Initializing JVM... ICEDTEA PLUGIN: get component manager ICEDTEA PLUGIN: liveconnect ICEDTEA PLUGIN: thread manager ICEDTEA PLUGIN: Instance::StartAppletviewer ICEDTEA PLUGIN: get component manager ICEDTEA PLUGIN: create local file ICEDTEA PLUGIN: init with path ICEDTEA PLUGIN: create process ICEDTEA PLUGIN: init process ICEDTEA PLUGIN: clearing old input fifo (if any): /home/jemcevoy/.icedteaplugin/icedtea-appletviewer-to-plugin ICEDTEA PLUGIN: creating input fifo: /home/jemcevoy/.icedteaplugin/icedtea-appletviewer-to-plugin ICEDTEA PLUGIN: created input fifo: /home/jemcevoy/.icedteaplugin/icedtea-appletviewer-to-plugin ICEDTEA PLUGIN: got confirmation that appletviewer is running ICEDTEA PLUGIN: clearing old output fifo (if any): /home/jemcevoy/.icedteaplugin/icedtea-plugin-to-appletviewer ICEDTEA PLUGIN: creating output fifo: /home/jemcevoy/.icedteaplugin/icedtea-plugin-to-appletviewer ICEDTEA PLUGIN: created output fifo: /home/jemcevoy/.icedteaplugin/icedtea-plugin-to-appletviewer ICEDTEA PLUGIN: run process Listening for transport dt_socket at address: 8787 ICEDTEA PLUGIN: Instance::StartAppletviewer return ICEDTEA PLUGIN: started appletviewer ICEDTEA PLUGIN: Factory::Initialize return ICEDTEA PLUGIN: Factory::CreateSecureEnv ICEDTEA PLUGIN: JNIEnv::IcedTeaJNIEnv ICEDTEA PLUGIN: JNIEnv::IcedTeaJNIEnv return CREATESECUREENV ICEDTEA PLUGIN: Factory::CreateSecureEnv return ICEDTEA PLUGIN: Factory::CreateInstance ICEDTEA PLUGIN: Instance::IcedTeaPluginInstance ICEDTEA PLUGIN: Instance::IcedTeaPluginInstance return ICEDTEA PLUGIN: Factory::CreateInstance return ICEDTEA PLUGIN: Instance::Initialize TAG FROM BROWSER = instance 1 tag https://10.15.3.1/drc2fram.htm?restart=0 <applet id="RC" code="com.hp.ilo2.remcons.remcons.class" archive="rc150p08.jar" height="2048" width="2048"> <param name="CABBASE" value="rc150p08.cab"> <param name="INFO0" value="MHgxDTNlOGY3Njg2MDMxMmRmYzFmOGUxOThkMGZlZDdmZmY4"> <param name="INFO1" value="LeifsFDIFieejf=="> <param name="INFO3" value="1"> <param name="INFO6" value="23"> <param name="INFO7" value="120"> <param name="INFO8" value="1"> <param name="INFOA" value="1"> <param name="INFOB" value="D9C1AFDD5C1F639602597242218BC320"> <param name="INFOC" value="394F399EFB2F50FF45D15519583F8D71"> <param name="INFOD" value="1232026439"> <param name="INFOM" value="1"> <param name="INFOMM" value="1"> <param name="INFON" value="1"> <param name="INFOO" value="3389"> <br><font size="1"> The remote console feature requires a Java Virtual Machine. <a href="http://www.hp.com/servers/manage/jvm" class="misc" target="Download JVM">Click here to download a JVM.</a> Download it now if the Remote Console is not displayed below. </font> </applet></embed> ICEDTEA PLUGIN: Instance::SendMessageToAppletViewer Writing to JVM: instance 1 cookie hp-iLO-Login=00000001:cm9vdA==:ZW5nX2xhYiw=:MXTPLQVCBIEDGMYGYZVPZFPLAYCBGWFVCUUFPXUN Wrote 103 bytes to pipe ICEDTEA PLUGIN: Instance::SendMessageToAppletViewer return ICEDTEA PLUGIN: Instance::SendMessageToAppletViewer Writing to JVM: instance 1 tag https://10.15.3.1/drc2fram.htm?restart=0 <applet id="RC" code="com.hp.ilo2.remcons.remcons.class" archive="rc150p08.jar" height="2048" width="2048"> <param name="CABBASE" value="rc150p08.cab"> <param name="INFO0" value="MHgxDTNlOGY3Njg2MDMxMmRmYzFmOGUxOThkMGZlZDdmZmY4"> <param name="INFO1" value="LeifsFDIFieejf=="> <param name="INFO3" value="1"> <param name="INFO6" value="23"> <param name="INFO7" value="120"> <param name="INFO8" value="1"> <param name="INFOA" value="1"> <param name="INFOB" value="D9C1AFDD5C1F639602597242218BC320"> <param name="INFOC" value="394F399EFB2F50FF45D15519583F8D71"> <param name="INFOD" value="1232026439"> <param name="INFOM" value="1"> <param name="INFOMM" value="1"> <param name="INFON" value="1"> <param name="INFOO" value="3389"> <br><font size="1"> The remote console feature requires a Java Virtual Machine. <a href="http://www.hp.com/servers/manage/jvm" class="misc" target="Download JVM">Click here to download a JVM.</a> Download it now if the Remote Console is not displayed below. </font> </applet></embed> Wrote 1146 bytes to pipe ICEDTEA PLUGIN: Instance::SendMessageToAppletViewer return SETTING PEER!!!: 0x7ffb0490d5b0 DONE SETTING PEER!!!: 0x7ffb0490d5b0 ICEDTEA PLUGIN: Instance::Initialize return NOT IMPLEMENTED: virtual nsresult IcedTeaPluginInstance::Start() ICEDTEA PLUGIN: Instance::GetValue ICEDTEA PLUGIN: Instance::GetValue return GETTING PEER!!!: 0x7ffb0490d5b0 DONE GETTING PEER!!!: 0x7ffb0490d5b0, 0x7ffb0490d5b0 ICEDTEA PLUGIN: Factory::GetValue ICEDTEA PLUGIN: Factory::GetValue return ICEDTEA PLUGIN: Instance::GetValue ICEDTEA PLUGIN: Instance::GetValue return ICEDTEA PLUGIN: Instance::SetWindow ICEDTEA PLUGIN: Instance::SetWindow: setting window. ICEDTEA PLUGIN: Instance::SendMessageToAppletViewer Writing to JVM: instance 1 handle 56627517 Wrote 27 bytes to pipe ICEDTEA PLUGIN: Instance::SendMessageToAppletViewer return ICEDTEA PLUGIN: Instance::SetWindow return ICEDTEA PLUGIN: Instance::SetWindow IcedTeaPluginInstance::SetWindow: Instance 0x7ffb049dae80 waiting for initialization... ICEDTEA PLUGIN: plugin_in_pipe_callback Received message: instance 1 status starting applet... PIPE: plugin read: instance 1 status starting applet... ICEDTEA PLUGIN: Instance::ConsumeMsgFromJVM received message: instance 1 status starting applet... Processing complete ICEDTEA PLUGIN: Instance::ConsumeMsgFromJVM return Pending event processed (this) ... 1 ICEDTEA PLUGIN: plugin_in_pipe_callback return ICEDTEA PLUGIN: plugin_in_pipe_callback Received message: instance 1 status exception: java.lang.NullPointerException. PIPE: plugin read: instance 1 status exception: java.lang.NullPointerException. ICEDTEA PLUGIN: Instance::ConsumeMsgFromJVM received message: instance 1 status exception: java.lang.NullPointerException. Processing complete ICEDTEA PLUGIN: Instance::ConsumeMsgFromJVM return Pending event processed (this) ... 1 ICEDTEA PLUGIN: plugin_in_pipe_callback return ICEDTEA PLUGIN: plugin_in_pipe_callback Received message: instance 1 status Start: applet not initialized. PIPE: plugin read: instance 1 status Start: applet not initialized. ICEDTEA PLUGIN: Instance::ConsumeMsgFromJVM received message: instance 1 status Start: applet not initialized. Processing complete ICEDTEA PLUGIN: Instance::ConsumeMsgFromJVM return Pending event processed (this) ... 1 ICEDTEA PLUGIN: plugin_in_pipe_callback return ICEDTEA PLUGIN: Instance::GetJavaObject IcedTeaPluginInstance::GetJavaObject: Instance 0x7ffb049dae80 waiting for initialization... IcedTeaPluginInstance::GetJavaObject: Initialization for instance 1 has timed out. Marking it void ICEDTEA PLUGIN: Instance::GetJavaObject return Initialization for instance 1 has timed out. Marking it void ICEDTEA PLUGIN: Instance::SetWindow return Close the popup console window here... ICEDTEA PLUGIN: Instance::GetValue ICEDTEA PLUGIN: Instance::GetValue return ICEDTEA PLUGIN: Instance::GetValue ICEDTEA PLUGIN: Instance::GetValue return ICEDTEA PLUGIN: Instance::SetWindow ICEDTEA PLUGIN: Instance::SetWindow: got NULL window. ICEDTEA PLUGIN: Instance::SetWindow return ICEDTEA PLUGIN: Instance::GetValue ICEDTEA PLUGIN: Instance::GetValue return ICEDTEA PLUGIN: Instance::GetValue ICEDTEA PLUGIN: Instance::GetValue return NOT IMPLEMENTED: virtual nsresult IcedTeaPluginInstance::Stop() ICEDTEA PLUGIN: Instance::Destroy ICEDTEA PLUGIN: Instance::Destroy return ICEDTEA PLUGIN: Instance::GetValue ICEDTEA PLUGIN: Instance::GetValue return ICEDTEA PLUGIN: Instance::GetValue ICEDTEA PLUGIN: Instance::GetValue return ICEDTEA PLUGIN: Instance::~IcedTeaPluginInstance ICEDTEA PLUGIN: Instance::~IcedTeaPluginInstance return ICEDTEA PLUGIN: plugin_in_pipe_callback Received message: instance 1 status Stop: applet not started. PIPE: plugin read: instance 1 status Stop: applet not started. ICEDTEA PLUGIN: Instance::ConsumeMsgFromJVM received message: instance 1 status Stop: applet not started. Processing complete ICEDTEA PLUGIN: Instance::ConsumeMsgFromJVM return ICEDTEA PLUGIN: plugin_in_pipe_callback return ICEDTEA PLUGIN: plugin_in_pipe_callback Received message: instance 1 status Destroy: applet not stopped. PIPE: plugin read: instance 1 status Destroy: applet not stopped. ICEDTEA PLUGIN: Instance::ConsumeMsgFromJVM received message: instance 1 status Destroy: applet not stopped. Processing complete ICEDTEA PLUGIN: Instance::ConsumeMsgFromJVM return ICEDTEA PLUGIN: plugin_in_pipe_callback return ICEDTEA PLUGIN: plugin_in_pipe_callback Received message: instance 1 status Dispose: applet not destroyed. PIPE: plugin read: instance 1 status Dispose: applet not destroyed. ICEDTEA PLUGIN: Instance::ConsumeMsgFromJVM received message: instance 1 status Dispose: applet not destroyed. Processing complete ICEDTEA PLUGIN: Instance::ConsumeMsgFromJVM return ICEDTEA PLUGIN: plugin_in_pipe_callback return ICEDTEA PLUGIN: plugin_in_pipe_callback Received message: instance 1 reference -1 Error Failed to handle message: handle 56627517 Thread[Thread-1,5,main] PIPE: plugin read: instance 1 reference -1 Error Failed to handle message: handle 56627517 Thread[Thread-1,5,main] ICEDTEA PLUGIN: Instance::ConsumeMsgFromJVM received message: instance 1 reference -1 Error Failed to handle message: handle 56627517 Thread[Thread-1,5,main] Processing complete ICEDTEA PLUGIN: Instance::ConsumeMsgFromJVM return ICEDTEA PLUGIN: plugin_in_pipe_callback return
I forgot to say that I upgraded ny desktop to Fedora 11 Beta and these are the versions of java that are now running... Incase it make a difference... [jemcevoy@localhost /]$ rpm -qa | grep java java_cup-0.10k-2.x86_64 tzdata-java-2009f-1.fc11.noarch java-1.6.0-openjdk-1.6.0.0-19.b14.fc11.x86_64 java-1.6.0-openjdk-plugin-1.6.0.0-19.b14.fc11.x86_64 java-1.5.0-gcj-1.5.0.0-25.fc11.x86_64
*** Bug 501808 has been marked as a duplicate of this bug. ***
Similar problem encountered with an Applet used to control a Raritan KVM. The applet is not launched, instead firefox logs the error: net.sourceforge.jnlp.LaunchException: Fatal: Initialization Error: Could not initialize applet. at net.sourceforge.jnlp.Launcher.createApplet(Launcher.java:495) at net.sourceforge.jnlp.Launcher.getApplet(Launcher.java:441) at net.sourceforge.jnlp.Launcher$TgThread.run(Launcher.java:620) Caused by: java.lang.NullPointerException at net.sourceforge.jnlp.Launcher.createApplet(Launcher.java:481) ... 2 more Caused by: java.lang.NullPointerException at net.sourceforge.jnlp.Launcher.createApplet(Launcher.java:481) at net.sourceforge.jnlp.Launcher.getApplet(Launcher.java:441) at net.sourceforge.jnlp.Launcher$TgThread.run(Launcher.java:620) java.lang.NullPointerException at net.sourceforge.jnlp.NetxPanel.runLoader(NetxPanel.java:102) at sun.applet.AppletPanel.run(AppletPanel.java:380) at java.lang.Thread.run(Thread.java:636) java.lang.NullPointerException at sun.applet.AppletPanel.run(AppletPanel.java:430) at java.lang.Thread.run(Thread.java:636) This happens on Fedora 10 with: * firefox-3.0.12-1.fc10.x86_64 * java-1.6.0-openjdk-1.6.0.0-19.b16.fc10.x86_64 * java-1.6.0-openjdk-plugin-1.6.0.0-19.b16.fc10.x86_64 I have replaced the IcedTea plugin with the Sun 1.6_12 64-bit plugin to make things work, like so: * rpm --erase java-1.6.0-openjdk-plugin * cd /usr/lib64/mozilla/plugins * ln -s /usr/local/java/jdk/jre/lib/amd64/libnpjp2.so
The same error with NullPointerException at sun.applet.AppletPanel.run(AppletPanel.java:430) occurs on Fedora 11 with firefox-3.5.1-1.fc11.i586 java-1.6.0-openjdk-1.6.0.0-25.b16.fc11.i586 java-1.6.0-openjdk-plugin-1.6.0.0-25.b16.fc11.i586
Unfortunately, under Fedora 11, the trick * rpm --erase java-1.6.0-openjdk-plugin * cd /usr/lib/mozilla/plugins * ln -s /usr/local/java/jdk/jre/lib/i386/libnpjp2.so seems to not work. The applet takes firefox with it: firefox: ../../../../src/plugin/share/plugin2/common/LocalFramePusher.h:25: LocalFramePusher::LocalFramePusher(int): Assertion `env != __null' failed. /usr/lib/firefox-3.5.1/run-mozilla.sh: line 131: 4046 Aborted "$prog" ${1+"$@"}
Correction - it DOES work on Fedora 11. It is SELinux not allowing the command. "setenforce 0", then retry, we get the SELinux warning: The firefox application attempted to load /usr/local/java/jdk1.6.0_14/jre/lib/i386/client/libjvm.so which requires text relocation. This is a potential security problem. Most libraries do not need this permission. Libraries are sometimes coded incorrectly and request this permission. The SELinux Memory Protection Tests web page explains how to remove this requirement. You can configure SELinux temporarily to allow /usr/local/java/jdk1.6.0_14/jre/lib/i386/client/libjvm.so to use relocation as a workaround, until the library is fixed. Please file a bug report against this package. Allowing Access: If you trust /usr/local/java/jdk1.6.0_14/jre/lib/i386/client/libjvm.so to run correctly, you can change the file context to textrel_shlib_t. "chcon -t textrel_shlib_t '/usr/local/java/jdk1.6.0_14/jre/lib/i386/client/libjvm.so'" You must also change the default file context files on the system in order to preserve them even on a full relabel. "semanage fcontext -a -t textrel_shlib_t '/usr/local/java/jdk1.6.0_14/jre/lib/i386/client/libjvm.so'" ...so let's do that.
(In reply to comment #10) > Correction - it DOES work on Fedora 11. It is SELinux not allowing the command. > > "setenforce 0", then retry, we get the SELinux warning: > > The firefox application attempted to load > /usr/local/java/jdk1.6.0_14/jre/lib/i386/client/libjvm.so which requires text > relocation. This is a potential security problem. Most libraries do not need > this permission. Libraries are sometimes coded incorrectly and request this > permission. The SELinux Memory Protection Tests web page explains how to remove > this requirement. You can configure SELinux temporarily to allow > /usr/local/java/jdk1.6.0_14/jre/lib/i386/client/libjvm.so to use relocation as > a workaround, until the library is fixed. Please file a bug report against this > package. Urgh. That is caused by having hotspot compiled against sdt.h. It is fixed upstream: http://sourceware.org/bugzilla/show_bug.cgi?id=10381 But we need a new systemtap-sdt-devel package with this fix and a rebuild of libjvm.so
Ah... but this is Sun's problem isn't it? The SELinux problem occurs with Sun libjvm.so...
(In reply to comment #12) > Ah... but this is Sun's problem isn't it? The SELinux problem occurs with Sun > libjvm.so... O, you are right. phew. This is indeed not the libjvm.so from icedtea/openjdk. Hopefully that one wasn't compiled against the buggy sdt.h. It does look like that particular issue is for the proprietary sun implementation then indeed. Thanks for noticing.
You are welcome. So to reiterate for people who come afterwards: Under Fedora 10/11, some Applets fail with Firefox + OpenJDK plugin ...but... work if the OpenJDK plugin is replaced by Sun's JRE 1.6 plugin ...in which case however... SELinux must first be pacified because the Sun JRE's libjvm.so requires text relocation.
David, which version of Fedora are you running? And also, if I do a test build of OpenJDK, is it possible for you to try it out and see if it fixes the issue?
Hi, This is Fedora 11 for i586, fully updated. I also have machines with Fedora 10 for x86_64 and x86_32. No problem with the test build, I can run it anytime.
I am also interested in a test build. Fedora 11, x86_64
David, can you please give this a try? http://koji.fedoraproject.org/koji/taskinfo?taskID=1540619 It is the current F-11 release + 2 patches. 1. A race condition fix 2. Cookie support rewrite for the plugin. I think the failure you are seeing is probably due to #2 .. let me know if the patch works. James.. sorry, I did only a i586 test build. I will start an x86_64 one now and will add a comment here when it completes.
James, here is an x86_64 build: http://koji.fedoraproject.org/koji/taskinfo?taskID=1541757
Hi, I have tried the 32-it build. Unfortunately, there are problems. So: Download: java-1.6.0-openjdk-1.6.0.0-25.b16.1.fc11.i586.rpm java-1.6.0-openjdk-plugin-1.6.0.0-25.b16.1.fc11.i586.rpm Install: rpm --upgrade --nodeps java-1.6.0-openjdk-1.6.0.0-25.b16.1.fc11.i586.rpm rpm --install java-1.6.0-openjdk-plugin-1.6.0.0-25.b16.1.fc11.i586.rpm "java -version" shows: java version "1.6.0_0" OpenJDK Runtime Environment (IcedTea6 1.5) (fedora-25.b16.1.fc11-i386) OpenJDK Client VM (build 14.0-b15, mixed mode) Then restart firefox. Page "about:plugins" shows that we are back on the IcedTea Java Web Browser Plugin Tested that applets work using http://java.sun.com/applets/jdk/1.4/index.html Unfortunately, accessing the Raritan KVM applet now takes the whole of Firefox with it. The console shows: firefox: Fatal IO error 11 (Resource temporarily unavailable) on X server :0.0. Firefox also intermittently logs: (firefox:3904): GLib-GObject-WARNING **: IA__g_object_weak_unref: couldn't find weak ref 0xad9650(<some hex number>)
Hold on! A second attempt doesn't crash firefox, but I still get: net.sourceforge.jnlp.LaunchException: Fatal: Initialization Error: Could not initialize applet. at net.sourceforge.jnlp.Launcher.createApplet(Launcher.java:495) at net.sourceforge.jnlp.Launcher.getApplet(Launcher.java:441) at net.sourceforge.jnlp.Launcher$TgThread.run(Launcher.java:620) Caused by: java.lang.NullPointerException at net.sourceforge.jnlp.Launcher.createApplet(Launcher.java:481) ... 2 more Caused by: java.lang.NullPointerException at net.sourceforge.jnlp.Launcher.createApplet(Launcher.java:481) at net.sourceforge.jnlp.Launcher.getApplet(Launcher.java:441) at net.sourceforge.jnlp.Launcher$TgThread.run(Launcher.java:620) java.lang.NullPointerException at net.sourceforge.jnlp.NetxPanel.runLoader(NetxPanel.java:99) at sun.applet.AppletPanel.run(AppletPanel.java:380) at java.lang.Thread.run(Thread.java:636) java.lang.NullPointerException at sun.applet.AppletPanel.run(AppletPanel.java:430) at java.lang.Thread.run(Thread.java:636)
A not directly related remark, though interesting: Sun'a libnpjp2.so coming with "jdk 1.6.0_13" apparently does not allow Firefox to find out the plugin's label (not sure how that works but about:plugins does not show a valid header line), leading the Raritan application to protest that it needs a JDK of at least 1.5. Sun's libnpjp2.so coming with "jdk 1.6.0_14" does allow Firefox to say "Java(TM) Plug-in 1.6.0_14" in about:plugins
Ah, Raritan! I remember that word from a few days ago. Sorry, this is my mistake. I had forgotten that this was related to Raritan software.. only the word HP stuck around in my head. I know what the problem is now because I encountered another (this time reproducible) bug that was related and has the same symptoms: https://bugzilla.redhat.com/show_bug.cgi?id=489414 The issue is caused by an incorrect certificate CN. Sun plugin allows bypassing this, but IcedTea doesn't. There is no workaround atm unfortunately, other than re-generating the certificate with the proper CN.
Oh, so simple. Yes, the Raritan KVM comes with a self-signed default certificate by Raritan. I hadn't updated it yet with a good one... Ok, I shall do so and report back.
Created attachment 355702 [details] Firefox Cert Waring Deepak's last comment could very well be the reason for the original problem. By default the HP remote console creates a self signed certificate for itself but I doubt there is a CA behind this cert. I will ask around to see if someone has setup a CA in the Local Net that could sign a cert for my servers. This is waht is in the cert. I can attache the whole cert if it will help you with debugging. CN = BC05-ilo OU = ISS O = Hewlett-Packard Company L = Houston ST = Texas C = US
Hi Jim, If the certificate is self-signed it's sure to not be acceptable, it must have been signed by a "trusted Certification Authority", i.e. one for which the self-signed root CA certificate is known. The question is, known by whom? Not by Firefox (which would mean the root CA cert is listed in Edit > Preferences > Advanced > View Certificates > Authorities), but by the plugin (which would mean it can be found in the plugin-used truststore) So there is another way to test this: adding the dubious self-signed certificate to the JDK truststore using keytool.
Hi David, Jim, Self signed certificates will work. The IcedTea plugin does support it (it will prompt you if the CA is not known). What it doesn't prompt for is certificates with a CN mismatch. The CN field identifies the authorized host for that cert. In this case, it should be whatever host is shown in the firefox address bar. As long as you generate a certificate with the proper CN, it should work .... should :)
Hi all, I just installed a verifiable certificate onto the Raritan KVM (signed using my own root CA certificate). The root CA certificate was installed in the Firefox trusted certificate set. It works, here's what happens: 1) Firefox connects to the KVM SSL website and can verify the presented certificate. The applet is downloaded. 2) A pop-up from the JVM appears saying "The website's certificate cannot be verified, do you want to continue? (run)". This is expected as the root CA certificate cannot be found in the JVM's truststore. We click (run) 3) A pop-up from the JVM appears saying "The application's digital signature cannot be verified. Do you want to run the application?" This is because the Applet has ostensibly been signed with a certificate from VeriSign and that certificate is also unknown to the JVM (VeriSign Class 3 Code Signing 2004 CA) We can click (run) 4) The Applet's "login" dialog appears. So just by making Firefox alone be friend with the website, Applet crash can be avoided. This was tested with the above-mentioned test build. Now we need to hear from the people using HP.
Hi I'm using HP DL360s with iLOs. I had the same 'Java Applet not initialised' problem with the NullPointer error while using F11-64bit/Firefox 3.5/IcedTea plugin. The way I got this to work was by adding an entry into my /etc/hosts file for the CN of the SSL certifate, mapping it to the IP of the iLO interface. The CN can be set from the server BIOS, and (for example) on one of my machines it was set to 'fsdb'. So I just created an /etc/hosts entry for 'fsdb' mapped to the correct iLO interface IP, and in firefox I viewed 'https://fsdb/login.htm'. Now the applet correctly runs. Hope this helps anyone else with the same issue. Regards Arif
Arif, Your comment is interesting, I have the common name resolved in DNS, and assign all the network parameters with the exception of "iLO 2 Subsystem Name:" to iLO using DHCP. "iLO 2 Subsystem Name:" is set to BC01-ilo. DNS resolves bc01 as: "bc01-ilo.cpe.polyserve.com has address 10.15.7.1" the reverse lookup returns: " 1.7.15.10.in-addr.arpa domain name pointer BC01-ilo.cpe.polyserve.com." I get two different behaviors depending on the URL I use to connect to iLO on the server. If I connect to https://bc01-ilo/ the applet starts and the following is output from the window where I stared firefox: Xlib: extension "Generic Event Extension" missing on display ":1063.0". Exception: java.io.FileNotFoundException: /home/jemcevoy/.java/hp.properties (No such file or directory) Trying to select locale: en_US Xlib: extension "Generic Event Extension" missing on display ":1063.0". Trying to select locale: en_US Applet initialized... Applet started... Remote Console inactivity timeout = 120 minutes. Version 20050808154652 ----------------------------------------------------------- What is the ~/.java/hp.properties file about? ----------------------------------------------------------- However if I use the URL https://bc01-ilo.cpe.polyserve.com or https://10.15.7.1/ to connect to iLO on the same server the applet fails to initialize and the following is output from the window where I stared firefox: Xlib: extension "Generic Event Extension" missing on display ":1063.0". net.sourceforge.jnlp.LaunchException: Fatal: Initialization Error: Could not initialize applet. at net.sourceforge.jnlp.Launcher.createApplet(Launcher.java:495) at net.sourceforge.jnlp.Launcher.getApplet(Launcher.java:441) at net.sourceforge.jnlp.Launcher$TgThread.run(Launcher.java:620) Caused by: java.lang.NullPointerException at net.sourceforge.jnlp.Launcher.createApplet(Launcher.java:481) ... 2 more Caused by: java.lang.NullPointerException at net.sourceforge.jnlp.Launcher.createApplet(Launcher.java:481) at net.sourceforge.jnlp.Launcher.getApplet(Launcher.java:441) at net.sourceforge.jnlp.Launcher$TgThread.run(Launcher.java:620) java.lang.NullPointerException at net.sourceforge.jnlp.NetxPanel.runLoader(NetxPanel.java:102) at sun.applet.AppletPanel.run(AppletPanel.java:380) at java.lang.Thread.run(Thread.java:636) java.lang.NullPointerException at sun.applet.AppletPanel.run(AppletPanel.java:430) at java.lang.Thread.run(Thread.java:636) ----------------------------------------------------------------- All three URLs work when using the Sun JRE.
java-1.6.0-openjdk-1.6.0.0-21.b16.fc10 has been submitted as an update for Fedora 10. http://admin.fedoraproject.org/updates/java-1.6.0-openjdk-1.6.0.0-21.b16.fc10
java-1.6.0-openjdk-1.6.0.0-29.b16.fc11 has been submitted as an update for Fedora 11. http://admin.fedoraproject.org/updates/java-1.6.0-openjdk-1.6.0.0-29.b16.fc11
(In reply to comment #32) > java-1.6.0-openjdk-1.6.0.0-29.b16.fc11 has been submitted as an update for > Fedora 11. > http://admin.fedoraproject.org/updates/java-1.6.0-openjdk-1.6.0.0-29.b16.fc11 Does that package solve the issue without having to workaround a la comment #29?
java-1.6.0-openjdk-1.6.0.0-21.b16.fc10 has been pushed to the Fedora 10 stable repository. If problems still persist, please make note of it in this bug report.
java-1.6.0-openjdk-1.6.0.0-29.b16.fc11 has been pushed to the Fedora 11 stable repository. If problems still persist, please make note of it in this bug report.
(In reply to comment #33) > (In reply to comment #32) > > java-1.6.0-openjdk-1.6.0.0-29.b16.fc11 has been submitted as an update for > > Fedora 11. > > http://admin.fedoraproject.org/updates/java-1.6.0-openjdk-1.6.0.0-29.b16.fc11 > > Does that package solve the issue without having to workaround a la comment > #29? Yes. The plugin should now be able to connect without need to editing anything else.
On a new HP G6 DL360 it fails for me (Debian not Redhat) due to the code signatures having expired in March 2009. On firefox, icedtea just failed silently, sun complained that "class com.hp.ilo2.remcons.remcons.class not found". Chrome reported the expiry issue and allowed me to continue. Just FYI in case this comes back.