Support Centre

Find articles, help and advice.

 
Welcome, Guest Login

Support Center

ASI Login - This webpage has a redirect loop

Last Updated: Apr 21, 2015 11:13AM UTC

Symptom

 

When attempting to login to ASI the browser reports 'This webpage has a redirect loop'.

The Exception Reported is:
javax.net.ssl.SSLException: java.security.ProviderException: sun.security.pkcs11.wrapper.PKCS11Exception: CKR_DOMAIN_PARAMS_INVALID
 

Cause

 

If you are running OpenJDK as opposed to Oracle's JDK then you may experience this problem. This is caused by A bug in NSS which openJDK uses as its primary cryptography provider. It is advertising that it supports ciphers (ECC) it doesn't fully support. The fix should be available in OS package managers (yum/apt).
 
More info:
RHEL: https://bugzilla.redhat.com/show_bug.cgi?id=1022017
CentOS: https://bugs.launchpad.net/centos/+bug/1006776
Oracle: http://bugs.java.com/bugdatabase/view_bug.do?bug_id=7196276

 

Workaround

 

1. Download the latest packages from the appropriate package manager


or


1. Open up $JAVA_HOME/lib/security/security/java.security, example path = /usr/lib/jvm/jre-1.7.0-openjdk.x86_64/lib/security/java.security
2. Comment out the line detailing sun.security.pkcs11.SunPKCS11
3. Ensure sun.security.ec.SunEC is listed and placed before the line just commented out
4. Renumber entries so they are sequenced 1..x. i.e. security.provider.1, security.provided.2 etc.

Before

After



 

Solution


Oracle are addressing this problem in JDK8. See the Oracle link above.

Contact Us

desk.com@interlinksoftware.com
https://cdn.desk.com/
false
desk
Loading
seconds ago
a minute ago
minutes ago
an hour ago
hours ago
a day ago
days ago
about
false
Invalid characters found
/customer/en/portal/articles/autocomplete