This week I had to work with an appliance and had to launch a remote console via ilom but everytime I tried the following window was displayed:
So, I did a search for
"The following resource is signed with a weak signature algorithm MD5 with RSA and is treated as unsigned" and found three links
https://www.blackmoreops.com/2017/06/08/fix-java-error-unsigned-application-requesting-unrestricted-access-to-system/
https://learningintheopen.org/2017/11/03/java-jnlp-error-weak-signature-algorithm-md5withrsa/
and
https://www.cyberciti.biz/datacenter/bmc-ipmi-kvm-java-applets-broken-with-java-security-update/
basically one has to comment out a line containing the words "jdk.jar.disabledAlgorithms"
to the file on a similar path on my system (I'm using Win10 and the latest java version available)
C:\Program Files (x86)\Java\jre1.8.0_261\lib\security\java.security
The line I found is: jdk.jar.disabledAlgorithms=MD2, MD5, RSA keySize < 1024, DSA keySize < 1024
After I commented out the line and saved the changes (as Administrator, otherwise you can not save the changes to the file) I was able to launch the console but after a few seconds I received a second error message saying:
protocol is disabled or cipher suites are inappropiate java
Another search lead me to
https://talesfromthedatacenter.com/2015/05/ilom-error-no-appropriate-protocol-protocol-is-disabled-or-cipher-suites-are-inappropriate/
explaining that another line on the same file needs to be commented out too containing the words
"jdk.tls.disabledAlgorithms=SSLv3"
On my system again the line suggested looks like this:
jdk.tls.disabledAlgorithms=SSLv3, RC4, DES, MD5withRSA, DH keySize < 1024, \
EC keySize < 224, 3DES_EDE_CBC, anon, NULL
After I commented the lines, launched the console again and worked fine 100%.
The alternative is to download/install older versions of java, there's another page with more details about this:
https://www.java.com/en/configure_crypto.html
For me, is faster to edit/save the file, launch the console, get the work done and revert the changes to the file.
No hay comentarios.:
Publicar un comentario