JDK-6972324 : sjremetrics.java.com Recovation information when installing 6u21
  • Type: Bug
  • Component: install
  • Sub-Component: install
  • Affected Version: 6u21
  • Priority: P4
  • Status: Closed
  • Resolution: Won't Fix
  • OS: windows_7
  • CPU: x86
  • Submitted: 2010-07-26
  • Updated: 2015-02-23
  • Resolved: 2015-02-23
Description
When performing a silence install on JRE 6u21 on Win 7 with:
Setup.exe /qr IEXPLORER=1 REBOOT=Suppress JAVAUPDATE=0 JU=0 WEBSTARTICON=0 SYSTRAY=0 AUTOUPDATECHECK=0

It prompts with the following message:
Revocation information for the security certificate for this site is not available. Do you want to proceed? i jave clicked on view certificate, it gives me sjremetrics.java.com.

This is reported from forum: http://forums.sun.com/thread.jspa?threadID=5445908
--- User submitted workaround: ----

first i need to get this out of the way; 
Launching command shell. 
Windows station: WinSta0 
Desktop: Default 
executing command: C:\Windows\system32\cmd.exe /k 
executed command: C:\Windows\system32\cmd.exe /k 

This was caused by myself, pressing F8 ( to get in debug mode while the SCCM TaskSequence is running ) loaded the cmd into WinSta0


I started the execuable without any parameters, and while showing the welcome screen, i grabbed a msi and cab file from a temp directory;
I ran it on XP;
C:\Documents and Settings\Sanderk\Application Data\Sun\Java\jre1.6.0_21\
for vista/7 it will be something like;
C:\Users\Sandrk\AppData\LocalLow\Sun\Java\jre1.6.0_21\

then loaded the new files into SCCM and updates the commandline to:
jre1.6.0_21.msi /qn ADDLOCAL=ALL SYSTRAY=0 EULA=0 IEXPLORER=1 JAVAUPDATE=0 AUTOUPDATECHECK=0 JU=0 REBOOT=ReallySupress

Ran the install aghain and it worked! my 4 days of pain are over.
Additional info from user:

My plan is to install java as part of an unattended Windows 7 installation. 
The tool I use to do that is SCCM 2007 R2 (ConfigMgr). In WinPE a task sequence is run which installs all components (os, sccm client agent, then jre) 
I made a package from the java setup i tried several setup parameters, all with the same result (more on that later)
jre-6u21-windows-i586.exe /qn ADDLOCAL=ALL SYSTRAY=0 EULA=0 IEXPLORER=1 JAVAUPDATE=0 AUTOUPDATECHECK=0 JU=0 REBOOT=ReallySupress

The reason why i (try to) disable the java update is twofold;
- Users don't have the rights to install software anyway 
- Our software updates are centrally managed 

When the tasksequence tries to install the java component. it "hangs". in the form that the computer is responsive, like normal, but the installation doesnt make any progress. 
the SCCM logging shows (press F8 when it says it installs java, then in c:\windows\system32\ccm\logs\smstsLog\smsts.log):

Waiting for installation job to complete.. 
Waiting for job status notification... 
Launching command shell. 
Windows station: WinSta0 
Desktop: Default 
executing command: C:\Windows\system32\cmd.exe /k 
executed command: C:\Windows\system32\cmd.exe /k 
Waiting for job status notification... 
Waiting for job status notification... 
Waiting for job status notification... 
Waiting for job status notification... 
Waiting for job stat.... <this goes on forever>

Clearly the jre install tries to show a popup (which is "shown" to the hidden WinSta0 desktop) 
the java_install and java_install_reg logs dont show any problem.

When I disable the java install in the task sequence, the system installs nicely without any problem.
after the windows 7 installation (with other default applications) is finnished i log in with my admin credentials 
and run the unattended install commandline ( see above) to install java. this one gives the popup about the CRL

I think this hidden message the setup tries to show is the CRL warning. i cant find a way to get rid of that warning.

Comments
Deferred over 2 major releases. WNF.
23-02-2015

We should look into this for the MSI Enterprise compliance project.
25-09-2013

WORK AROUND Ensure that the system time is set correctly.
25-10-2010

EVALUATION A similar bug was filed in the past see 68774796. Clealry telling customers to make sure the clocks are right is not going to solve this. Some areas to explore. 1) if we are goint to fail the cert check tell the customer and clearly log the issue to the consoler and for silent installers to the windows log consoles in as many possible locations so it can be found. 2) Determine if this conditiona can be ignored -- that is provide a dialog to the user that allows them to override the fact that the clock is wrong. I am not sure if the java library allows this. It is allowed to skip the certificate check for cases where it is self signed if you put code in and perhaps there is something similar. I doubt the security team would allow this. So what we can do a better job at is to alert the user that there will be a fialure and to clearly log the failure and we should actually have a web page that lists known issues and the error message should point directly back to it IMO.
28-07-2010