UCF and two-way SSL with specific security provider

Hi,

I have CS 6.5, Tomcat 6 with Webtop 6.5sp2. Webtop works fine until UCF operations. UCF client cannot be intalled because of unable to create HTTPS connection.

Stack:


load: class com.documentum.web.applet.ucfinvoker.ResidentLaunchRuntime.class not found.
java.lang.ClassNotFoundException:  com.documentum.web.applet.ucfinvoker.ResidentLaunchRuntime.class
     at sun.plugin2.applet.Applet2ClassLoader.findClass(Unknown Source)
     at java.lang.ClassLoader.loadClass(Unknown Source)
     at java.lang.ClassLoader.loadClass(Unknown Source)
     at sun.plugin2.applet.Plugin2ClassLoader.loadCode(Unknown Source)
     at sun.plugin2.applet.Plugin2Manager.createApplet(Unknown Source)
     at sun.plugin2.applet.Plugin2Manager$AppletExecutionRunnable.run(Unknown Source)
     at java.lang.Thread.run(Unknown Source)
Caused by: javax.net.ssl.SSLProtocolException: Server did not send a DH Server Key  Exchange message
     at com.sun.net.ssl.internal.ssl.ClientHandshaker.serverHelloDone(Unknown Source)
     at com.sun.net.ssl.internal.ssl.ClientHandshaker.processMessage(Unknown Source)
     at com.sun.net.ssl.internal.ssl.Handshaker.processLoop(Unknown Source)
     at com.sun.net.ssl.internal.ssl.Handshaker.process_record(Unknown Source)
     at com.sun.net.ssl.internal.ssl.SSLSocketImpl.readRecord(Unknown Source)
     at com.sun.net.ssl.internal.ssl.SSLSocketImpl.performInitialHandshake(Unknown Source)
     at com.sun.net.ssl.internal.ssl.SSLSocketImpl.startHandshake(Unknown Source)
     at com.sun.net.ssl.internal.ssl.SSLSocketImpl.startHandshake(Unknown Source)
     at sun.net.www.protocol.https.HttpsClient.afterConnect(Unknown Source)
     at sun.net.www.protocol.https.AbstractDelegateHttpsURLConnection.connect(Unknown  Source)
     at sun.net.www.protocol.http.HttpURLConnection.getInputStream(Unknown Source)
     at java.net.HttpURLConnection.getResponseCode(Unknown Source)
     at sun.net.www.protocol.https.HttpsURLConnectionImpl.getResponseCode(Unknown  Source)
     at sun.plugin2.applet.Applet2ClassLoader.getBytes(Unknown Source)
     at sun.plugin2.applet.Applet2ClassLoader.access$000(Unknown Source)
     at sun.plugin2.applet.Applet2ClassLoader$1.run(Unknown Source)
     at java.security.AccessController.doPrivileged(Native Method)
     ... 7 more
Exception: java.lang.ClassNotFoundException:  com.documentum.web.applet.ucfinvoker.ResidentLaunchRuntime.class

"java.lang.ClassNotFoundException: com.documentum.web.applet.ucfinvoker.ResidentLaunchRuntime.class" - ucfinit.jar is absent in java cache.

Is there any options to set up algorithm, keystore provider, keystore type for ucf client?

Find more posts tagged with

Comments

DCTM_Guru

See "Configuring UCF support for unsigned or nontrusted SSL certificates" in WDK Development Guide for more details on setting up UCF with SSL.

apriam_i

Hello, Johnny!

I've already read this chapter. I used to have configuration with two-way SSL and it worked fine!

But now configuration changed - I use product implementing russian cryptostandars.

zhou_simonq

you need to add the server certificate into the trust store of JRE which is used to load UCF. keytool shipped with JRE can be used to import the certificate into the keystore.

- simon

apriam_i

zhou_simon, hello!

I use specific options -provider ru.CryptoPro.JCP.JCP and -storetype HDImageStore with keytool. These options are recommended in programmer guide of cryptoprovider JCP.

I can't see the way to put this params in UCF configuration.

zhou_simonq

i don't know this option. the principle should be the same for all SSL configuration, that is, configure server as SSL mode and add the server certificate to client environment.