Management Software

Reply
New Contributor
Posts: 3
Registered: ‎04-08-2010

compatibility problems of webtools (foss 7.0c) with java 7 update 45?

Hi people:

Today our management workstation upgraded the java JRE from version java7 update 21 to java7 update 45.

The issue is with the webtools from our brocade 300 with FOSS 7.0.c the jnpl file downloads and after a warning about the certificate pops-up and say the application will not execute..

Ahh keep close this urls https://blogs.oracle.com/java/entry/java_se_7_update_45

---------part of the messages

sun.security.validator.ValidatorException: PKIX path validation failed: java.security.cert.CertPathValidatorException: algorithm constraints check failed

    at sun.security.validator.PKIXValidator.doValidate(Unknown Source)

    at sun.security.validator.PKIXValidator.engineValidate(Unknown Source)

    at sun.security.validator.Validator.validate(Unknown Source)

    at sun.security.validator.Validator.validate(Unknown Source)

    at sun.security.validator.Validator.validate(Unknown Source)

    at com.sun.deploy.security.TrustDecider.getValidationState(Unknown Source)

    at com.sun.deploy.security.TrustDecider.validateChain(Unknown Source)

    at com.sun.deploy.security.TrustDecider.isAllPermissionGranted(Unknown Source)

    at com.sun.javaws.security.AppPolicy.grantUnrestrictedAccess(Unknown Source)

    at com.sun.javaws.security.JNLPSignedResourcesHelper.checkSignedResourcesHelper(Unknown Source)

    at com.sun.javaws.security.JNLPSignedResourcesHelper.checkSignedResources(Unknown Source)

    at com.sun.javaws.Launcher.prepareResources(Unknown Source)

    at com.sun.javaws.Launcher.prepareAllResources(Unknown Source)

    at com.sun.javaws.Launcher.prepareToLaunch(Unknown Source)

    at com.sun.javaws.Launcher.prepareToLaunch(Unknown Source)

    at com.sun.javaws.Launcher.launch(Unknown Source)

    at com.sun.javaws.Main.launchApp(Unknown Source)

    at com.sun.javaws.Main.continueInSecureThread(Unknown Source)

    at com.sun.javaws.Main.access$000(Unknown Source)

    at com.sun.javaws.Main$1.run(Unknown Source)

    at java.lang.Thread.run(Unknown Source)

Caused by: java.security.cert.CertPathValidatorException: algorithm constraints check failed

    at sun.security.provider.certpath.PKIXMasterCertPathValidator.validate(Unknown Source)

    at sun.security.provider.certpath.PKIXCertPathValidator.doValidate(Unknown Source)

    at sun.security.provider.certpath.PKIXCertPathValidator.engineValidate(Unknown Source)

    at java.security.cert.CertPathValidator.validate(Unknown Source)

    ... 21 more

////////////

Ironically the webtools of our Brocade 4100 with latest FOSS, works fine.

Thanks a lot !

PD: By the way the tests were done with IE, Firefox, Chrome and Opera (latest version on all).

External Moderator
Posts: 4,880
Registered: ‎02-23-2004

Re: compatibility problems of webtools (foss 7.0c) with java 7 update 45?

update 45 is not supported. Remove it and Install Java 7 update 21 or preview release.

TechHelp24
N/A
Posts: 1
Registered: ‎10-25-2012

Re: compatibility problems of webtools (foss 7.0c) with java 7 update 45?

Found a workaround on google's cached copy of ca.com forums:

The java.security file is located in your client machine's Java/JRE installed directory (jre/lib/security/java.security).

In Java 1.7.0_40 the java.security by default has this setting:

jdk.certpath.disabledAlgorithms=MD2, RSA keySize < 1024

Changing the 1024 to 256 may solve the issue.

It does for me

New Contributor
Posts: 2
Registered: ‎10-30-2013

Re: compatibility problems of webtools (foss 7.0c) with java 7 update 45?

Is there a plan to update the digital signatures to allow Java to update and run correctly?  I only have 2 Brocade 5100 switches, but over 60 servers that rely on those switches to perform correctly.  If I have to manually downgrade to an old version of java to support those servers, that sounds like poor customer experience...

Valued Contributor
Posts: 931
Registered: ‎12-30-2009

Re: compatibility problems of webtools (foss 7.0c) with java 7 update 45?

Yes it does sounds as poor customer service, meanwhile you can still use the CLI to manage your switches.

For me personally CLI works much faster than the webinterface.

Not only do you have instant access but you don't have to click so much anymore.

New Contributor
Posts: 2
Registered: ‎10-30-2013

Re: compatibility problems of webtools (foss 7.0c) with java 7 update 45?

Thanks for the idea of using CLI, Dion.  Being a Server Engineer, I am familiar with CLI...but not proficient in the commands for each of the network devices in my environment.  The GUI allows for an easier experience at managing the switches and the SAN behind them.

Duly noted as a backup plan, however.

Valued Contributor
Posts: 931
Registered: ‎12-30-2009

Re: compatibility problems of webtools (foss 7.0c) with java 7 update 45?

Well for zoning purposes you can look at

alishow

zoneshow

cfgshow

cfgactvshow

Each commands has a manpage accessible at help {command}

In it you'll find referal pages for commands like

alicreate

zoneremove

cfgadd

cfgsave

cfgenable

The cli also provides tools like grep

A command reference guide is also available >> http://www.brocade.com/downloads/documents/product_manuals/B_SAN/FOS_CmdRef_v700.pdf

Depending on your active firmware some may not be available.

Once you get the hang of it, it works faster the the webgui, at least that's my experience.

As you are already familiar with CLI in general I expect you'll find the learning-curve not as steep as you thought it might be.

Join the Community

Get quick and easy access to valuable resource designed to help you manage your Brocade Network.