Java 7u51 and vnc console

[Michael Lednev]

As announced before Oracle disabled self-signed certificates in last version of JRE so VNC console stopped working today after update.

What can be done to make things working again except Java downgrade?

 

[Michael Lednev]

Figured it myself

Just add site to trusted in Security tab of Java CP.

 

[woima]

Just changed offical GoDaddy certificate to my nodes yesterday and today it took a while to figure out what is wrong. Thanks to Java update GUi is working great with GoDaddy certificate but Java somehow finds self-signed "www.proxmox.com" sertificate. Can't figure out how to change it to use GoDaddy certificate files too. Any ideas to fix this?

 

[mir]

The wiki is your friend: http://pve.proxmox.com/wiki/HTTPSCertificateConfiguration

 

[woima]

The wiki is your friend: http://pve.proxmox.com/wiki/HTTPSCertificateConfiguration

Yes, i tryed this allready, but it does work like that in proxmox 2.6 version.. https page is working well, but when java and vnc console starts it loads self-signed "default" www.proxmox.com certificate somehow from somewhere...

 

[tom]

our VNC is already signed, see http://forum.proxmox.com/threads/16...E-3-1-including-Comodo-signed-Java-VNC-applet

 

[spirit]

our VNC is already signed, see http://forum.proxmox.com/threads/16...E-3-1-including-Comodo-signed-Java-VNC-applet

Hi Tom,

same here, since u51 it doesn't work anymore with signed certificate from proxmox.
(I need to use my own certificate, and certificate need to match domain)

 

[mir]

Have you tried this?
https://blogs.oracle.com/java-platform-group/entry/upcoming_exception_site_list_in

Describes how to configure an Exception Site List.

 

[vinc]

Hi,

Facing the same :/

Adding the Server URL to the exception list make Java lauch but another error is throwing :
Error: Could not parse certificate: java.io.IOException: Empty input

As sprit says, it may be necessary to use the same certificate match (per server, and per applet) ?

I tested on :
- originally configured server (original pve-ssl.key) : All is OK, Java is lauching and the console showing
- "Self SSL'd" server (crt/key generated from a self-signed CA) : Java launching but no console

Please advice/help !
Vincent

 

[davidisko]

Same problem here.
Proxmox 3.1, java u51.

http://pve.proxmox.com/wiki/HTTPSCertificateConfiguration
This one doesn't work.

WebUI is ok - it uses custom (rapidssl) SSL certificates.
JAVA applet is still using Proxmox certificate. i don't understand where it gets it.

 

[mir]

Have you remembered to delete the java applet from the java cache? See ControlPanel

OpenJDK using IcedTea plugin


OracleJDK7 using included plugin


For both choose 'View files' and delete every occurrence of VncViewer to force download of new plugin.
This is how it looks here:

 

[jcoli]

I have the same problem and I tried all solutions post here, but still not working.
I'm using Debian 7 with JavaOracle.
In Windows7 I'm still working cause don't upgrade Java, but only in Firefox, in Chrome stops work.

 

[mir]

In Debian use OpenJDK7 and IcedTea plugin. It works here.

 

[jcoli]

In Debian use OpenJDK7 and IcedTea plugin. It works here.

I can't use OpenJDK7, I use other applications that must to use OracleJava.

 

[mir]

I can't use OpenJDK7, I use other applications that must to use OracleJava.

And you have tried?

 

[davidisko]

I cleared the cache, remove the old certificates.
But proxmox is still pushing "proxmox" certificate in java applet.
It looks like it ignores any changes in pve-root-ca.pem.

 

[mir]

Did you restart pvedaemon and pveproxy after updating certificates?

 

[davidisko]

Of course.

 

[jcoli]

And you have tried?

Of course I tried to use OpenJDK7 in others applications.

 

[dietmar]

But proxmox is still pushing "proxmox" certificate in java applet.

Not sure what you talk about, but the java applet is signed with the Proxmox code signing certificate.
You cannot change that (and it makes no sense to change that).