Avamar: Kan ikke starte Avamar Administrator JNLP med Java 1.8.0_481

Efter opdatering af Java til version 1.8.0_481 på brugerens Windows-computer er det ikke længere muligt at starte Avamar Administrator ved hjælp af JNLP Fil.

1. På Windows-computeren skal du bekræfte, at den installerede Java-version er 1.8.0_481.

java -version

C:\>java -version
java version "1.8.0_481"
Java(TM) SE Runtime Environment (build 1.8.0_481-b10)
Java HotSpot(TM) 64-Bit Server VM (build 25.481-b10, mixed mode)
C:\>

2. Gå til Avamar-websiden:
   https://<Avamar_IP_Address>/dtlt/home.html
3. Klik på administratorhyperlinket for at downloade administrator.jnlp Fil.
4. Åbn ikonet JNLP og bekræfte, at den startes ved hjælp af Java.
5. Prøv at logge ind.
6. Fejlen beskrevet i skærmbilledet vises.

"Invalid Certificate. Install a valid certificate and try again. You can use the Java Control Panel to import certificate"

7. Logfilen /usr/local/avamar/var/mc/server_log/mcserver.log.0 Viser:

FINE: RMI TCP Connection(1982584)-192.168.1.110: terminated with exception:
javax.net.ssl.SSLException: Fatal Alert received: Certificate Unknown
        at com.rsa.sslj.x.aI.a(Unknown Source)
        at com.rsa.sslj.x.aI.a(Unknown Source)
        at com.rsa.sslj.x.aI.a(Unknown Source)
        at com.rsa.sslj.x.ap.c(Unknown Source)
        at com.rsa.sslj.x.ap.b(Unknown Source)
        at com.rsa.sslj.x.ap.b(Unknown Source)
        at com.rsa.sslj.x.al.read(Unknown Source)
        at java.io.BufferedInputStream.fill(BufferedInputStream.java:246)
        at java.io.BufferedInputStream.read(BufferedInputStream.java:265)
        at java.io.DataInputStream.readInt(DataInputStream.java:387)
        at sun.rmi.transport.tcp.TCPTransport$ConnectionHandler.run0(TCPTransport.java:727)
        at sun.rmi.transport.tcp.TCPTransport$ConnectionHandler.lambda$run$0(TCPTransport.java:688)
        at java.security.AccessController.doPrivileged(Native Method)
        at sun.rmi.transport.tcp.TCPTransport$ConnectionHandler.run(TCPTransport.java:687)
        at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149)
        at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624)
        at java.lang.Thread.run(Thread.java:750)03/09-10:21:09.00246 [RMI TCP Connection(1982585)-192.168.1.110#1343977] sun.rmi.transport.tcp.TCPTransport$ConnectionHandler.run0
FINE: RMI TCP Connection(1982585)-10.16.107.15: terminated with exception:
javax.net.ssl.SSLException: Ciphertext is too large in received TLS record
        at com.rsa.sslj.x.aI.b(Unknown Source)
        at com.rsa.sslj.x.aI.a(Unknown Source)
        at com.rsa.sslj.x.aI.a(Unknown Source)
        at com.rsa.sslj.x.ap.c(Unknown Source)
        at com.rsa.sslj.x.ap.b(Unknown Source)
        at com.rsa.sslj.x.ap.b(Unknown Source)
        at com.rsa.sslj.x.al.read(Unknown Source)
        at java.io.BufferedInputStream.fill(BufferedInputStream.java:246)
        at java.io.BufferedInputStream.read(BufferedInputStream.java:265)
        at java.io.DataInputStream.readInt(DataInputStream.java:387)
        at sun.rmi.transport.tcp.TCPTransport$ConnectionHandler.run0(TCPTransport.java:727)
        at sun.rmi.transport.tcp.TCPTransport$ConnectionHandler.lambda$run$0(TCPTransport.java:688)
        at java.security.AccessController.doPrivileged(Native Method)
        at sun.rmi.transport.tcp.TCPTransport$ConnectionHandler.run(TCPTransport.java:687)
        at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149)
        at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624)
        at java.lang.Thread.run(Thread.java:750)
Caused by: com.rsa.sslj.x.aL: Ciphertext is too large in received TLS record

Dette problem opstår for alle Avamar-versioner. Engineering undersøger denne adfærd.

Alternativer

1. Brug den installerbare version af Avamar Administrator, som indeholder en integreret Java-version (1.8.0_202).
2. Brug Avamar-brugergrænsefladen (AUI).

Løsninger

1. Indstil parameteren rmi_over_ssl til falsk i filen /usr/local/avamar/var/mc/server_data/mcserver.xml , og genstart derefter ikonet Management Console Service (MCS).
2. Hvis det ikke er muligt at ændre parameteren, skal du bruge OpenWebStart (eksternt link) til at åbne JNLP-filen.