Avamar: Avamar Administrator JNLP mit Java 1.8.0_481 kann nicht gestartet werden

Nach dem Update von Java auf Version 1.8.0_481 auf dem Windows-Rechner des Nutzers ist es nicht mehr möglich, Avamar Administrator mithilfe der JNLP zu verwenden.

1. Vergewissern Sie sich auf dem Windows-Computer, dass die installierte Java-Version 1.8.0_481 ist.

java -version

C:\>java -version
java version "1.8.0_481"
Java(TM) SE Runtime Environment (build 1.8.0_481-b10)
Java HotSpot(TM) 64-Bit Server VM (build 25.481-b10, mixed mode)
C:\>

2. Rufen Sie die Avamar-Webseite auf:
   https://<Avamar_IP_Address>/dtlt/home.html
3. Klicken Sie auf den Hyperlink Administrator , um die administrator.jnlp zu verwenden.
4. Öffnen Sie das Menü JNLP und bestätigen Sie, dass es mit Java gestartet wird.
5. Versuchen Sie, sich anzumelden.
6. Der im Screenshot beschriebene Fehler wird angezeigt.

"Invalid Certificate. Install a valid certificate and try again. You can use the Java Control Panel to import certificate"

7. Die Protokolldatei /usr/local/avamar/var/mc/server_log/mcserver.log.0 Zeigt:

FINE: RMI TCP Connection(1982584)-192.168.1.110: terminated with exception:
javax.net.ssl.SSLException: Fatal Alert received: Certificate Unknown
        at com.rsa.sslj.x.aI.a(Unknown Source)
        at com.rsa.sslj.x.aI.a(Unknown Source)
        at com.rsa.sslj.x.aI.a(Unknown Source)
        at com.rsa.sslj.x.ap.c(Unknown Source)
        at com.rsa.sslj.x.ap.b(Unknown Source)
        at com.rsa.sslj.x.ap.b(Unknown Source)
        at com.rsa.sslj.x.al.read(Unknown Source)
        at java.io.BufferedInputStream.fill(BufferedInputStream.java:246)
        at java.io.BufferedInputStream.read(BufferedInputStream.java:265)
        at java.io.DataInputStream.readInt(DataInputStream.java:387)
        at sun.rmi.transport.tcp.TCPTransport$ConnectionHandler.run0(TCPTransport.java:727)
        at sun.rmi.transport.tcp.TCPTransport$ConnectionHandler.lambda$run$0(TCPTransport.java:688)
        at java.security.AccessController.doPrivileged(Native Method)
        at sun.rmi.transport.tcp.TCPTransport$ConnectionHandler.run(TCPTransport.java:687)
        at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149)
        at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624)
        at java.lang.Thread.run(Thread.java:750)03/09-10:21:09.00246 [RMI TCP Connection(1982585)-192.168.1.110#1343977] sun.rmi.transport.tcp.TCPTransport$ConnectionHandler.run0
FINE: RMI TCP Connection(1982585)-10.16.107.15: terminated with exception:
javax.net.ssl.SSLException: Ciphertext is too large in received TLS record
        at com.rsa.sslj.x.aI.b(Unknown Source)
        at com.rsa.sslj.x.aI.a(Unknown Source)
        at com.rsa.sslj.x.aI.a(Unknown Source)
        at com.rsa.sslj.x.ap.c(Unknown Source)
        at com.rsa.sslj.x.ap.b(Unknown Source)
        at com.rsa.sslj.x.ap.b(Unknown Source)
        at com.rsa.sslj.x.al.read(Unknown Source)
        at java.io.BufferedInputStream.fill(BufferedInputStream.java:246)
        at java.io.BufferedInputStream.read(BufferedInputStream.java:265)
        at java.io.DataInputStream.readInt(DataInputStream.java:387)
        at sun.rmi.transport.tcp.TCPTransport$ConnectionHandler.run0(TCPTransport.java:727)
        at sun.rmi.transport.tcp.TCPTransport$ConnectionHandler.lambda$run$0(TCPTransport.java:688)
        at java.security.AccessController.doPrivileged(Native Method)
        at sun.rmi.transport.tcp.TCPTransport$ConnectionHandler.run(TCPTransport.java:687)
        at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149)
        at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624)
        at java.lang.Thread.run(Thread.java:750)
Caused by: com.rsa.sslj.x.aL: Ciphertext is too large in received TLS record

Dieses Problem tritt bei jeder Avamar-Version auf. Engineering untersucht dieses Verhalten.

Alternativen

1. Verwenden Sie die installierbare Version von Avamar Administrator, die eine integrierte Java-Version (1.8.0_202) enthält.
2. Verwenden Sie die Avamar User Interface (AUI).

Problemumgehungen

1. Festlegen des Parameters rmi_over_ssl auf false in der Datei /usr/local/avamar/var/mc/server_data/mcserver.xml und starten Sie dann den Management Console Service (MCS).
2. Wenn es nicht möglich ist, den Parameter zu ändern, verwenden Sie OpenWebStart (Externer Link), um die JNLP-Datei zu öffnen.