Introscope 8.2.2不适用于Java 7

Question

我最近升级到了Java1.7Patch 40。之后，当我尝试访问introscope时，我得到了以下错误：“无法验证证书。应用程序将不会被执行”。堆栈跟踪为：

sun.security.validator.ValidatorException: PKIX path validation failed: java.security.cert.CertPathValidatorException: algorithm constraints check failed
at sun.security.validator.PKIXValidator.doValidate(Unknown Source)
at sun.security.validator.PKIXValidator.engineValidate(Unknown Source)
at sun.security.validator.Validator.validate(Unknown Source)
at sun.security.validator.Validator.validate(Unknown Source)
at sun.security.validator.Validator.validate(Unknown Source)
at com.sun.deploy.security.TrustDecider.getValidationState(Unknown Source)
at com.sun.deploy.security.TrustDecider.validateChain(Unknown Source)
at com.sun.deploy.security.TrustDecider.isAllPermissionGranted(Unknown Source)
at com.sun.javaws.security.AppPolicy.grantUnrestrictedAccess(Unknown Source)
at com.sun.javaws.security.JNLPSignedResourcesHelper.checkSignedResourcesHelper(Unknown Source)
at com.sun.javaws.security.JNLPSignedResourcesHelper.checkSignedResources(Unknown Source)
at com.sun.javaws.Launcher.prepareResources(Unknown Source)
at com.sun.javaws.Launcher.prepareAllResources(Unknown Source)
at com.sun.javaws.Launcher.prepareToLaunch(Unknown Source)
at com.sun.javaws.Launcher.prepareToLaunch(Unknown Source)
at com.sun.javaws.Launcher.launch(Unknown Source)
at com.sun.javaws.Main.launchApp(Unknown Source)
at com.sun.javaws.Main.continueInSecureThread(Unknown Source)
at com.sun.javaws.Main.access$000(Unknown Source)
at com.sun.javaws.Main$1.run(Unknown Source)
at java.lang.Thread.run(Unknown Source)
Caused by: java.security.cert.CertPathValidatorException: algorithm constraints check failed
at sun.security.provider.certpath.PKIXMasterCertPathValidator.validate(Unknown Source)
at sun.security.provider.certpath.PKIXCertPathValidator.doValidate(Unknown Source)
at sun.security.provider.certpath.PKIXCertPathValidator.engineValidate(Unknown Source)
at java.security.cert.CertPathValidator.validate(Unknown Source)
... 21 more

我使用的内窥镜版本是8.2.2。有没有办法将introscope配置为与JRE7协同工作？我可以考虑哪些解决方案？为什么introscope不能与JRE 7一起工作？

谢谢你的帮助。

Answer 1

我在CA论坛上找到了这个答案(但页面不再可用...)：

http://docs.oracle.com/javase/7/docs/technotes/guides/security/certpath/CertPathProgGuide.html#AppB -摘自上面的链接-从JDK 7u40版本开始，jdk.certpath.disabledAlgorithms的默认值如下: jdk.certpath.disabledAlgorithms=MD2，RSA keySize < 1024这意味着不会使用涉及MD2的签名算法来验证证书。并且限制使用长度小于1024位的RSA密钥大小的证书。-摘自上面的链接

JRE文件位于客户端计算机的Java/安装目录(jre/lib/security/java.security).中

在Java 1.7.0_40中，默认情况下java.security具有以下设置：

jdk.certpath.disabledAlgorithms=MD2, RSA keySize < 1024

将1024更改为256将解决此问题。

Answer 2

运行Java的ContolPanel并减少您的安全设置。警告--此设置适用于所有小程序和Java Web Start (jnlp)应用程序。