JAVA console fails to load

Products

• ProxySG Software - SGOS

Issue/Introduction

Management console fails to load when connecting over port 8082 after upgrading java to version 8 update 31. The MC loads properly when connecting over port 8081.

 

 

Cause

The issue occurs when Java is unable to validate the OCSP response for the installed device certificate.

To verify that you are seeing this issue you can enable java logging. To enable Java logging:

1. Navigate to Control Panel > Java
2. From the Java control panel, select Advanced.
3. Under Java console, select the radio button for Show Console.
4. Click Apply > OK
5. Connect to management console over port 8082 and check for the following message: 

security: Failing over to CRLs: java.security.cert.CertPathValidatorException: OCSP response does not include a response for a certificate supplied in the OCSP request

 

Resolution

There is a bug open with Oracle for this issue:

https://bugs.openjdk.java.net/browse/JDK-8071709

 

Workaround

To workaround this issue you can disable ocsp checking. Navigate to the Java control panel and configure Check for signed code certificate revocation using and Check for TLS certificate revocation using for Certificate Revocation Lists (CRLs) . Alternatively use a version prior to update 31 (8u25 or lower).