JDK-7173441 : Upgrade Java 7u4, applet loading failed with multiple SSL client certificates
  • Type: Bug
  • Component: deploy
  • Sub-Component: plugin
  • Affected Version: 7
  • Priority: P3
  • Status: Closed
  • Resolution: Duplicate
  • OS: windows_7
  • CPU: x86
  • Submitted: 2012-06-01
  • Updated: 2012-06-20
  • Resolved: 2012-06-20
Related Reports
Relates :  
Description
FULL PRODUCT VERSION :
java version "1.7.0_04"
Java(TM) SE Runtime Environment (build 1.7.0_04-b22)
Java HotSpot(TM) Client VM (build 23.0-b21, mixed mode, sharing)


ADDITIONAL OS VERSION INFORMATION :
Windows Vista (32bit, 64bit)
Windows 7 (32bit, 64bit)


EXTRA RELEVANT SYSTEM CONFIGURATION :
Internet Explorer 7
Internet Explorer 9


A DESCRIPTION OF THE PROBLEM :
When upgrade Java 6 to Java 7u4, applet loading stopped with multiple SSL client certificates.
This is only on Windows Vista and Windows 7.


REGRESSION.  Last worked in version 6u31

STEPS TO FOLLOW TO REPRODUCE THE PROBLEM :
 - Install CA certificates to client.
 - Install multiple SSL client certificates to client.
 - Access to web site with applet require SSL client authentication via https.


EXPECTED VERSUS ACTUAL BEHAVIOR :
EXPECTED -
 - Java console open (If java console is on)
 - "Choose a digital certificate" dialog opened
 - Java applet is loaded after selecting a certificate

ACTUAL -
 - Java console does not open (If java console is on)
 - Applet loading is stopped


ERROR MESSAGES/STACK TRACES THAT OCCUR :
Java trace is stopped below
----
...
...
security: Loading certificates from Deployment session certificate store
security: Loaded certificates from Deployment session certificate store
security: Loading certificates from Internet Explorer ROOT certificate store
security: Loaded certificates from Internet Explorer ROOT certificate store
security: Checking if certificate is in Deployment denied certificate store
security: Checking if certificate is in Deployment session certificate store
security: Checking if SSL certificate is in Deployment permanent certificate store
----


REPRODUCIBILITY :
This bug can be reproduced always.

CUSTOMER SUBMITTED WORKAROUND :
Bypassing this bug with flowing configurations
 - Java 6u32
 - Windows XP
 - Install only one SSL client certificate to client
 - Set plugin2 off


SUPPORT :
YES

Comments
EVALUATION this is same description as 7173050, which was closed as a dupe of 7120895. closing as a dupe of 7120895
20-06-2012