Tagged with certificate - Visokio Forums http://forums.visokio.com/discussions/tagged/certificate/feed.rss Mon, 30 Oct 17 14:27:38 -0400 Tagged with certificate - Visokio Forums en-CA Security: SSL Certificate Error - Use your trusted certificate http://forums.visokio.com/discussion/1365/security-ssl-certificate-error-use-your-trusted-certificate Wed, 07 Mar 2012 06:47:47 -0500 antonio 1365@/discussions "Server SSL error
The server you are connecting to does not have a valid certificate from an authorised authority".

This happens if the server certificate is not issued by certification authority, and it is self signed or issued by a private CMS.

If you trust the server, you can add the server certificate to your trusted Java key store, and allow Omniscope to use it as trusted and verified certificate.

The cause of the problem and solution are both well explained in this article.

Here are the steps to allow Omniscope to recognise and use your server certificate:

  1. Use InstallCert tool
    - Get the InstallCert.java file from http://code.google.com/p/java-use-examples/source/browse/trunk/src/com/aw/ad/util/InstallCert.java
    - Compile the file using the "javac" command:
    javac InstallCert.java

  2. Add your server certificate
    - Run InstallCert, with the server hostname and https port (if available), then press “1” when ask for input:
    java InstallCert myserver.com:8080
    - Check the process has finished and generated a file named “jssecacerts“ in the same folder you run the InstallCert tool.

  3. Launch Omniscope with JVM parameter
    - See "Additional JVM arguments" here http://www.visokio.com/kb/installconfig .
    - Update your installconfig.properties file to have the following line:
    ADDITIONAL_JVM_ARGS=-Djavax.net.ssl.trustStore=c:\yourFolder\jssecacerts
    - Start Omniscope.

For the sake of simplicity, please find attached a zip file with the 2 InstallCert tool classes already compiled and ready to run.]]> Security: Server you are connecting to does not have a valid certificate? http://forums.visokio.com/discussion/2613/security-server-you-are-connecting-to-does-not-have-a-valid-certificates Thu, 26 Jun 2014 08:07:06 -0400 Veaceslav 2613@/discussions
  • Security: SSL Certificate Error - Use your trusted certificate
  • HTTPS Certificate Error
  • Security: The server you are connecting to does not have a valid certificate
  • SSL Error - handshake alert: unrecognized_name

    • Server SSL error - The server you are connecting to does not have a valid certificate from an authorised authority


    Here is what you need to do to enable Omniscope access the url you have (e.g. "https://server-storing-my-iok-files.com/"):

    1. Download InstallCert.zip archive and unzip it (it contains two java class files: InstallCert$SavingTrustManager.class, InstallCert.class), put both of them in a folder (e.g. c:\your_path\)

    2. Open command prompt (cmd.exe) and change current dir to the folder containing the class files from step 1 (e.g. cd c:\your_path\) then execute this command:
    • java InstallCert server-storing-my-iok-files.com:443

      Note: if you don't have java installed, use the java executable located at:

      - {YOUR_OMNISCOPE_INSTALLATION_PATH}\x86\bin\java (if you have a 32 bit OS)
      - {YOUR_OMNISCOPE_INSTALLATION_PATH}\x64\bin\java (if you have a 64 bit OS)

      {YOUR_OMNISCOPE_INSTALLATION_PATH} - this is where Omniscope is installed on your machine (e.g. C:\Users\slavvi\AppData\Local\Visokio Omniscope app)

      (to check whether you have a 32-bit or 64-bit OS: open Control Panel -> System and check 'System type:')
      The command may look like this: "{YOUR_OMNISCOPE_INSTALLATION_PATH}\x64\bin\java" InstallCert server-storing-my-iok-files.com:443

      If you get the SSL error - handshake alert: unrecognized_name while executing this command please read this post: handshake alert: unrecognized_name

    3. You will be asked 'Enter certificate to add to trusted keystore or 'q' to quit: [1]', press 1 then press ENTER
    Note: After executing step 3, this message will be displayed in the console:
    Added certificate to keystore 'jssecacerts' using alias 'server-storing-my-iok-files.com-1'
    which means that this particular certificate will be trusted by java applications if 'jssecacerts' keystore is provided

    Notice that 'jssecacerts' file has been created in the folder you executed the command (e.g. c:\your_path\)

    4. Open 'installconfig.properties' file located at {YOUR_OMNISCOPE_INSTALLATION_PATH}

    5. Edit the file to add this line:
    ADDITIONAL_JVM_ARGS=-Djavax.net.ssl.trustStore="c:\your_path\jssecacerts"

    6. Restart Omniscope

    Note 1: You will get this error if you miss step 5 or the path to 'jssecacerts' is wrong:
    java.lang.RuntimeException: Unexpected error: java.security.InvalidAlgorithmParameterException: the trustAnchors parameter must be non-empty

    Note 2: If -Djavax.net.ssl.trustStore="c:\your_path\jssecacerts" points to a directory instead of a file or to a non-existent path, all SSL connections will fail (regardless whether the certificates have been authorised by the most trusted authorities, SSL connections will NOT work at all) and the same error will be displayed:
    java.lang.RuntimeException: Unexpected error: java.security.InvalidAlgorithmParameterException: the trustAnchors parameter must be non-empty

    Note 3: There can be only one path set to -Djavax.net.ssl.trustStore="c:\your_path\jssecacerts". If you need more than one trust stores, you need to merge them into a single file and set that file to javax.net.ssl.trustStore property. If this is the case, the simplest solution is to use steps 1-3 mentioned above to add each individual URL. Each entry will be appended to the same jssecacerts file.

    ]]>         HTTPS Certificate Error http://forums.visokio.com/discussion/1034/https-certificate-error Tue, 04 Oct 2011 10:58:00 -0400 antonio 1034@/discussions
    These errors might take different forms in different situations, such as:

    • SSLHandshakeException
    • FailedDownloadException
    • “Publisher authenticity can not be verified”


    When launching an Omniscope Online (WebStart) application, which involves clicking a Launch button in a web page, or opening a JNLP file, these errors might happen before Omniscope itself starts.

    Or, these errors might happen if you start Omniscope and choose File > Open file > Open from web.

    Likely causes

    • If the website is using a self-signed certificate, Omniscope cannot access the site. This is because the certificate cannot be verified or trusted.
    • If the website is using a correctly signed certificate, the server may be missing one of the certificates in the certification chain.

    To check and diagnose problems with the SSL certificate used for a particular site, use a free online SSL testing tool (e.g. http://www.sslshopper.com/ssl-checker.html), to make sure it is correctly installed, valid, trusted and doesn't give any errors to any of your users.

    In case of using the suggested tool, if it recognises there is a problem with your server (e.g. a missing certificate in the chain) it suggests a solution (e.g. "The certificate is not trusted in all web browsers. You may need to install an Intermediate/chain certificate to link it to a trusted root certificate." - note that from the point of view of this tool, “browsers” includes applications like Omniscope which connect to an HTTPS site).

    Your server administrators (SharePoint or other) should be able to take this information and resolve the problem easily.]]>