ALERT: Some images may not load properly within the Knowledge Base Article. If you see a broken image, please right-click and select 'Open image in a new tab'. We apologize for this inconvenience.

JAVA console fails to load

book

Article ID: 168601

calendar_today

Updated On:

Products

ProxySG Software - SGOS

Issue/Introduction

Management console fails to load when connecting over port 8082 after upgrading java to version 8 update 31. The MC loads properly when connecting over port 8081.

 

 

Cause

The issue occurs when Java is unable to validate the OCSP response for the installed device certificate.

To verify that you are seeing this issue you can enable java logging. To enable Java logging:

  1. Navigate to Control Panel > Java
  2. From the Java control panel, select Advanced.
  3. Under Java console, select the radio button for Show Console.
  4. Click Apply > OK
  5. Connect to management console over port 8082 and check for the following message: 
security: Failing over to CRLs: java.security.cert.CertPathValidatorException: OCSP response does not include a response for a certificate supplied in the OCSP request

 

Resolution

There is a bug open with Oracle for this issue:

https://bugs.openjdk.java.net/browse/JDK-8071709

 

Workaround

To workaround this issue you can disable ocsp checking. Navigate to the Java control panel and configure Check for signed code certificate revocation using and Check for TLS certificate revocation using for Certificate Revocation Lists (CRLs) . Alternatively use a version prior to update 31 (8u25 or lower).
Powered by Wolken Software