Description of problem: I have JNLP with the following resource: <resources> <property name="jnlp.packEnabled" value="true"/> <property name="jnlp.versionEnabled" value="true"/> <j2se version="1.6.0+" initial-heap-size="32M" max-heap-size="128M"/> <jar href="iKVM.jar" download="eager" main="true" version="1.69.13.0x0"/> </resources> Oracle java uses: GET /iKVM__V1.69.13.0x0.jar.pack.gz HTTP/1.1\r\n Openjdk java uses: GET /iKVM.jar?version-id=1.69.13.0x0 HTTP/1.1\r\n which results in the folowing error: net.sourceforge.jnlp.LaunchException: Fatal: Application Error: Cannot grant permissions to unsigned jars. After jar rename it works as expected. Version-Release number of selected component (if applicable): icedtea-web-1.1.4-1.fc17.x86_64 How reproducible: Always Steps to Reproduce: 1. Use JNLP with jnlp.packEnabled and jnlp.versionEnabled enabled. Actual results: GET /iKVM.jar?version-id=1.69.13.0x0 HTTP/1.1\r\n Expected results: GET /iKVM__V1.69.13.0x0.jar.pack.gz HTTP/1.1\r\n
Is there a way I can reproduce this locally? Do you have the logs (try running javaws with -verbose)? I looked over the code in icedtea-web that does thing and nothing jumps out at me - icedtea-web should be creating the right urls.
Created attachment 539764 [details] Log from -verbose I currently do not have access to the machine, but I tried to reproduce this locally, log is attached. You can try yourself. I uploaded everything to: http://jskarvad.fedorapeople.org/java/ Just put the jars on your HTTP server and edit the URL in jnlp. Everything originate from the supermicro management board.
Oracle Java has no problem: *.redhat.com - - [02/Dec/2011 21:35:12] "GET /liblinux_x86_64__V1.0.3.jar.pack.gz HTTP/1.1" 200 - *.redhat.com - - [02/Dec/2011 21:35:12] "GET /iKVM__V1.69.13.0x0.jar.pack.gz HTTP/1.1" 200 - OpenJDK is unable to get the right files: *.redhat.com - - [02/Dec/2011 21:22:28] code 404, message File not found *.redhat.com - - [02/Dec/2011 21:22:28] "GET /iKVM.jar?version-id=1.69.13.0x0 HTTP/1.1" 404 - *.redhat.com - - [02/Dec/2011 21:22:28] code 404, message File not found *.redhat.com - - [02/Dec/2011 21:22:28] "GET /liblinux_x86_64.jar?version-id=1.0.3 HTTP/1.1" 404 - The above log was created on F14, but it seems to be the same on rawhide (tested 2011-11-15).
I'm getting a similar (or the same) problem from trying to use a java remote console from an IBM IMM... % /usr/bin/javaws.itweb jnlp JAR https://localhost:8443/aessrp/avctIBMViewer.jar not found. Continuing. JAR https://localhost:8443/avctKVMIOLinux64.jar not found. Continuing. JAR https://localhost:8443/avmLinuxLib64.jar not found. Continuing. net.sourceforge.jnlp.LaunchException: Fatal: Initialization Error: Could not initialize application. at net.sourceforge.jnlp.Launcher.createApplication(Launcher.java:778) at net.sourceforge.jnlp.Launcher.launchApplication(Launcher.java:552) at net.sourceforge.jnlp.Launcher$TgThread.run(Launcher.java:889) Caused by: net.sourceforge.jnlp.LaunchException: Fatal: Application Error: Cannot grant permissions to unsigned jars. Application requested security permissions, but jars are not signed. at net.sourceforge.jnlp.runtime.JNLPClassLoader.setSecurity(JNLPClassLoader.java:283) at net.sourceforge.jnlp.runtime.JNLPClassLoader.<init>(JNLPClassLoader.java:203) at net.sourceforge.jnlp.runtime.JNLPClassLoader.getInstance(JNLPClassLoader.java:317) at net.sourceforge.jnlp.Launcher.createApplication(Launcher.java:770) ... 2 more Caused by: net.sourceforge.jnlp.LaunchException: Fatal: Application Error: Cannot grant permissions to unsigned jars. Application requested security permissions, but jars are not signed. at net.sourceforge.jnlp.runtime.JNLPClassLoader.setSecurity(JNLPClassLoader.java:283) at net.sourceforge.jnlp.runtime.JNLPClassLoader.<init>(JNLPClassLoader.java:203) at net.sourceforge.jnlp.runtime.JNLPClassLoader.getInstance(JNLPClassLoader.java:317) at net.sourceforge.jnlp.Launcher.createApplication(Launcher.java:770) at net.sourceforge.jnlp.Launcher.launchApplication(Launcher.java:552) at net.sourceforge.jnlp.Launcher$TgThread.run(Launcher.java:889) (localhost 8443 is a redirect over ssh to the https port on the IMM). I'm not sure how to get it working, but it's pretty anoying. ;( icedtea-web-1.2-2.fc17.x86_64 java-1.7.0-openjdk-1.7.0.3-2.1.fc17.7.x86_64
I have a similar problem with F17, OpenJDK 1.7 (1.7.0.3-2.2.1.fc17.8) ), IcedTea-web (1.2.2) when trying to access Sun ILOM remote console applet - I'll paraphrase it: "java.io.EOFException at java.io.DataInputStream.readUnsignedShort(DataInputStream.java:340) at java.io.DataInputStream.readUTF(DataInputStream.java:589) at java.io.DataInputStream.readUTF(DataInputStream.java:564) JAR https://10.130.3.219:8401/Java/JavaRConsole.jar not found. Continuing. JAR https://10.130.3.219:8401/Java/RedirLib.jar not found. Continuing. net.sourceforge.jnlp.LaunchException: Fatal: Initialization Error: Could not initialize application. net.sourceforge.jnlp.LaunchException: Fatal: Application Error: Cannot grant permissions to unsigned jars. Application requested security permissions, but jars are not signed."
Another BMC, probably the same problem. Now with HP iLO2 (version 2.09), Fedora 17: java version "1.7.0_03-icedtea" OpenJDK Runtime Environment (fedora-2.2.1.fc17.8-x86_64) OpenJDK 64-Bit Server VM (build 23.0-b21, mixed mode) (firefox:12029): Gdk-WARNING **: Native Windows wider or taller than 65535 pixels are not supported JAR https://hp-dl360g6-03-ilo.lab.eng.brq.redhat.com/rc175p06.jar not found. Continuing. net.sourceforge.jnlp.LaunchException: Fatal: Initialization Error: Could not initialize applet. at net.sourceforge.jnlp.Launcher.createApplet(Launcher.java:735) at net.sourceforge.jnlp.Launcher.getApplet(Launcher.java:676) at net.sourceforge.jnlp.Launcher$TgThread.run(Launcher.java:886) Caused by: java.lang.ClassNotFoundException: com.hp.ilo2.remcons.remcons at net.sourceforge.jnlp.runtime.JNLPClassLoader.loadClass(JNLPClassLoader.java:1398) at net.sourceforge.jnlp.Launcher.createApplet(Launcher.java:725) ... 2 more Caused by: java.lang.ClassNotFoundException: com.hp.ilo2.remcons.remcons at net.sourceforge.jnlp.runtime.JNLPClassLoader.loadClass(JNLPClassLoader.java:1398) at net.sourceforge.jnlp.Launcher.createApplet(Launcher.java:725) at net.sourceforge.jnlp.Launcher.getApplet(Launcher.java:676) at net.sourceforge.jnlp.Launcher$TgThread.run(Launcher.java:886) java.lang.NullPointerException at net.sourceforge.jnlp.NetxPanel.runLoader(NetxPanel.java:154) at sun.applet.AppletPanel.run(AppletPanel.java:379) at java.lang.Thread.run(Thread.java:722) java.lang.NullPointerException at sun.applet.AppletPanel.run(AppletPanel.java:429) at java.lang.Thread.run(Thread.java:722) ^ icedtea-web-1.2-2.fc17.x86_64 Please fix this bug, it makes remote server management from WWW interface much harder in Fedora.
icedtea-web-1.2.1-1.fc18.x86_64 java-1.7.0-openjdk-1.7.0.5-2.2.1.fc18.10.x86_64 Still happening in f18 branched. ;(
*** Bug 675271 has been marked as a duplicate of this bug. ***
Deepak marked Bug 675271 as a duplicate of this, even though that bug is older and has more detail (so this one is the duplicate). Developers, please see 675271 as it has more details and this issue is affecting all iDRAC use (all Dell chassis) and is a major issue; it's causing people not to be able to perform their job functions. I have reverted to using the Oracle java and it's plugin since there's been no movement on fixing this for a very long time.
(In reply to comment #12) > Deepak marked Bug 675271 as a duplicate of this, even though that bug is > older and has more detail (so this one is the duplicate). Developers, please > see 675271 as it has more details and this issue is affecting all iDRAC use > (all Dell chassis) and is a major issue; it's causing people not to be able > to perform their job functions. > The original cause of 675271 has been fixed. There is a secondary issue that became known only recently to us via this issue (comment #4). Since this issue brought the JDK7 issue to light first, I made 675271 a dupe of this. Ideally I should open a new bug really but this is already a very high priority item since I was able to find the cause a couple of weeks ago, so I did not open another tracker.
Hoping to see a solution soon as I'm beginning to work with new Dell Servers (R720) and iDRAC7 (fw 1.20.20) and I see the same problem. In my case: Fedora 17 and icedtea-web-1.2-2.fc17.x86_64 Thanks in advance, Gianluca
Gianluca, You're not alone, getting the same deal, F17.
I have built test rpms with a patch that resolves the HTTPS verification issue that is causing most of the problems that people on this bug are seeing. Please feel free to give it a try: http://people.redhat.com/dbhole/fedora/icedtea-web/ I would appreciate any feedback actually as it gives me more of a reason to push it into upstream 1.3 branch asap.
Don't see "Application requested security permissions, but jars are not signed." anymore, however, what I see now is "no iKVM64 in java.library.path" icedtea-web-javadoc-1.3-1.fc17.0.noarch icedtea-web-debuginfo-1.3-1.fc17.0.x86_64 icedtea-web-1.3-1.fc17.0.x86_64
(In reply to comment #17) > Don't see "Application requested security permissions, but jars are not > signed." anymore, however, what I see now is "no iKVM64 in java.library.path" > > icedtea-web-javadoc-1.3-1.fc17.0.noarch > icedtea-web-debuginfo-1.3-1.fc17.0.x86_64 > icedtea-web-1.3-1.fc17.0.x86_64 Can you please run as: ICEDTEAPLUGIN_DEBUG=true firefox 2>&1 | tee console.log and post console.log and ~/.icedtea/log/java.std* files?
shanks ~]$ ICEDTEAPLUGIN_DEBUG=true firefox 2>&1 | tee console.log ITNPP Thread# 140090662704960: NP_GetMIMEDescription ITNPP Thread# 140090662704960: NP_GetMIMEDescription return ITNPP Thread# 140090662704960: NP_GetValue ITNPP Thread# 140090662704960: NP_GetValue: returning plugin name. ITNPP Thread# 140090662704960: NP_GetValue return ITNPP Thread# 140090662704960: NP_GetValue ITNPP Thread# 140090662704960: NP_GetValue: returning plugin description. ITNPP Thread# 140090662704960: NP_GetValue return ITNPP Thread# 140090662704960: NP_GetMIMEDescription ITNPP Thread# 140090662704960: NP_GetMIMEDescription return ITNPP Thread# 140090662704960: NP_GetValue ITNPP Thread# 140090662704960: NP_GetValue: returning plugin name. ITNPP Thread# 140090662704960: NP_GetValue return ITNPP Thread# 140090662704960: NP_GetValue ITNPP Thread# 140090662704960: NP_GetValue: returning plugin description. ITNPP Thread# 140090662704960: NP_GetValue return ITNPP Thread# 140090662704960: NP_GetMIMEDescription ITNPP Thread# 140090662704960: NP_GetMIMEDescription return ITNPP Thread# 140090662704960: NP_GetValue ITNPP Thread# 140090662704960: NP_GetValue: returning plugin name. ITNPP Thread# 140090662704960: NP_GetValue return ITNPP Thread# 140090662704960: NP_GetValue ITNPP Thread# 140090662704960: NP_GetValue: returning plugin description. ITNPP Thread# 140090662704960: NP_GetValue return ITNPP Thread# 140090662704960: NP_GetMIMEDescription ITNPP Thread# 140090662704960: NP_GetMIMEDescription return ITNPP Thread# 140090662704960: NP_GetValue ITNPP Thread# 140090662704960: NP_GetValue: returning plugin name. ITNPP Thread# 140090662704960: NP_GetValue return ITNPP Thread# 140090662704960: NP_GetValue ITNPP Thread# 140090662704960: NP_GetValue: returning plugin description. ITNPP Thread# 140090662704960: NP_GetValue return ITNPP Thread# 140090662704960: NP_GetMIMEDescription ITNPP Thread# 140090662704960: NP_GetMIMEDescription return ITNPP Thread# 140090662704960: NP_GetValue ITNPP Thread# 140090662704960: NP_GetValue: returning plugin name. ITNPP Thread# 140090662704960: NP_GetValue return ITNPP Thread# 140090662704960: NP_GetValue ITNPP Thread# 140090662704960: NP_GetValue: returning plugin description. ITNPP Thread# 140090662704960: NP_GetValue return ITNPP Thread# 140090662704960: NP_GetMIMEDescription ITNPP Thread# 140090662704960: NP_GetMIMEDescription return ITNPP Thread# 140090662704960: NP_GetValue ITNPP Thread# 140090662704960: NP_GetValue: returning plugin name. ITNPP Thread# 140090662704960: NP_GetValue return ITNPP Thread# 140090662704960: NP_GetValue ITNPP Thread# 140090662704960: NP_GetValue: returning plugin description. ITNPP Thread# 140090662704960: NP_GetValue return ITNPP Thread# 140090662704960: NP_GetMIMEDescription ITNPP Thread# 140090662704960: NP_GetMIMEDescription return ITNPP Thread# 140090662704960: NP_GetValue ITNPP Thread# 140090662704960: NP_GetValue: returning plugin name. ITNPP Thread# 140090662704960: NP_GetValue return ITNPP Thread# 140090662704960: NP_GetValue ITNPP Thread# 140090662704960: NP_GetValue: returning plugin description. ITNPP Thread# 140090662704960: NP_GetValue return ITNPP Thread# 140090662704960: NP_GetMIMEDescription ITNPP Thread# 140090662704960: NP_GetMIMEDescription return ITNPP Thread# 140090662704960: NP_GetValue ITNPP Thread# 140090662704960: NP_GetValue: returning plugin name. ITNPP Thread# 140090662704960: NP_GetValue return ITNPP Thread# 140090662704960: NP_GetValue ITNPP Thread# 140090662704960: NP_GetValue: returning plugin description. ITNPP Thread# 140090662704960: NP_GetValue return ITNPP Thread# 140090662704960: NP_GetMIMEDescription ITNPP Thread# 140090662704960: NP_GetMIMEDescription return ITNPP Thread# 140090662704960: NP_GetValue ITNPP Thread# 140090662704960: NP_GetValue: returning plugin name. ITNPP Thread# 140090662704960: NP_GetValue return ITNPP Thread# 140090662704960: NP_GetValue ITNPP Thread# 140090662704960: NP_GetValue: returning plugin description. ITNPP Thread# 140090662704960: NP_GetValue return ITNPP Thread# 140090662704960: NP_GetMIMEDescription ITNPP Thread# 140090662704960: NP_GetMIMEDescription return ITNPP Thread# 140090662704960: NP_GetValue ITNPP Thread# 140090662704960: NP_GetValue: returning plugin name. ITNPP Thread# 140090662704960: NP_GetValue return ITNPP Thread# 140090662704960: NP_GetValue ITNPP Thread# 140090662704960: NP_GetValue: returning plugin description. ITNPP Thread# 140090662704960: NP_GetValue return ITNPP Thread# 140090662704960: NP_GetMIMEDescription ITNPP Thread# 140090662704960: NP_GetMIMEDescription return ITNPP Thread# 140090662704960: NP_GetValue ITNPP Thread# 140090662704960: NP_GetValue: returning plugin name. ITNPP Thread# 140090662704960: NP_GetValue return ITNPP Thread# 140090662704960: NP_GetValue ITNPP Thread# 140090662704960: NP_GetValue: returning plugin description. ITNPP Thread# 140090662704960: NP_GetValue return ITNPP Thread# 140090662704960: NP_GetMIMEDescription ITNPP Thread# 140090662704960: NP_GetMIMEDescription return ITNPP Thread# 140090662704960: NP_GetValue ITNPP Thread# 140090662704960: NP_GetValue: returning plugin name. ITNPP Thread# 140090662704960: NP_GetValue return ITNPP Thread# 140090662704960: NP_GetValue ITNPP Thread# 140090662704960: NP_GetValue: returning plugin description. ITNPP Thread# 140090662704960: NP_GetValue return JAR https://hostname.com:443/liblinux_x86_64.jar not found. Continuing. JAR https://hostname.com:443/liblinux_x86_64.jar not found. Continuing. shanks ~]$ ls -ltR .icedtea/log/ .icedtea/log/: total 0 [grajaiya@shanks ~]$
Does https://hostname.com:443/liblinux_x86_64.jar exist when you try via wget/browser?
update from comment 16 fixes no signed issue with iDRAC6.
icedtea-web-1.3-1.fc17.0.x86_64 confirmed working with iDRAC6. Thanks !
(In reply to comment #16) > I have built test rpms with a patch that resolves the HTTPS verification > issue that is causing most of the problems that people on this bug are > seeing. Please feel free to give it a try: > > http://people.redhat.com/dbhole/fedora/icedtea-web/ > > I would appreciate any feedback actually as it gives me more of a reason to > push it into upstream 1.3 branch asap. I have confirmed these rpms resolve the issue I was having with IBM Integrated Management Module II. I'm now able to access remote control as expected. Thanks! I'd very much like to see these patches pushed upstream sooner rather than later.
I confirm the test packages resolved the problem for me too. My test environment: Dell enclosure PowerEdge M1000e with fw 3.21 Server PowerEdge M610 with CPLD Version 1.0.3 BIOS Version 6.1.0 idrac fw: 3.30 (Build 17) Successfully connected to the remote console that previously (icedtea-web-1.3-1.fc17.x86_64) failed. Unfortunately I'm not having at the moment the chance to test with Dell Server (R720) and iDRAC7 (fw 1.20.20) too.. Thanks, Gianluca
Tested on an IBM x3650 IMM2, fixed. Thanks, Kent
This fixes our problems accessing Dell iDRAC remote consoles. It would be great if these updated packages would make it into actual Fedora soon.
Thank you everyone for helping test this! I have pushed the patch into the 1.3 branch upstream and we are planning to do a release on the 30th after which I will build for Fedora immediately.
Thanks, with your update iLO2 KVM is working again on my HP server. I will also re-test with iKVM (i.e. to check whether the originally addressed problem from the description/comment 0 is also resolved).
I regained access to my Dell R720 server with iDRAC 7 (fw 1.20.20). So I was able to test and I confirm that now with icedtea-web-1.3-1.fc17.0.x86_64 I'm able to connect to this server. Thanks, Gianluca
THis should be resolved in the current release of icedtea-web in Fedora 16, 17 and 18.