Avamar: Kan Avamar Administrator JNLP niet starten met Java 1.8.0_481

Nadat Java is bijgewerkt naar versie 1.8.0_481 op de Windows-computer van de gebruiker, is het niet langer mogelijk om Avamar Administrator te starten met behulp van het JNLP Bestand.

1. Controleer op de Windows-machine of de geïnstalleerde Java-versie 1.8.0_481 is.

java -version

C:\>java -version
java version "1.8.0_481"
Java(TM) SE Runtime Environment (build 1.8.0_481-b10)
Java HotSpot(TM) 64-Bit Server VM (build 25.481-b10, mixed mode)
C:\>

2. Toegang tot de webpagina van Avamar:
   https://<Avamar_IP_Address>/dtlt/home.html
3. Klik op de hyperlink Beheerder om de administrator.jnlp Bestand.
4. Open de JNLP bestand en bevestig dat het wordt gestart met Java.
5. Poging om in te loggen.
6. De fout die in de schermafbeelding wordt beschreven, wordt weergegeven.

"Invalid Certificate. Install a valid certificate and try again. You can use the Java Control Panel to import certificate"

7. Het logbestand /usr/local/avamar/var/mc/server_log/mcserver.log.0 Toont:

FINE: RMI TCP Connection(1982584)-192.168.1.110: terminated with exception:
javax.net.ssl.SSLException: Fatal Alert received: Certificate Unknown
        at com.rsa.sslj.x.aI.a(Unknown Source)
        at com.rsa.sslj.x.aI.a(Unknown Source)
        at com.rsa.sslj.x.aI.a(Unknown Source)
        at com.rsa.sslj.x.ap.c(Unknown Source)
        at com.rsa.sslj.x.ap.b(Unknown Source)
        at com.rsa.sslj.x.ap.b(Unknown Source)
        at com.rsa.sslj.x.al.read(Unknown Source)
        at java.io.BufferedInputStream.fill(BufferedInputStream.java:246)
        at java.io.BufferedInputStream.read(BufferedInputStream.java:265)
        at java.io.DataInputStream.readInt(DataInputStream.java:387)
        at sun.rmi.transport.tcp.TCPTransport$ConnectionHandler.run0(TCPTransport.java:727)
        at sun.rmi.transport.tcp.TCPTransport$ConnectionHandler.lambda$run$0(TCPTransport.java:688)
        at java.security.AccessController.doPrivileged(Native Method)
        at sun.rmi.transport.tcp.TCPTransport$ConnectionHandler.run(TCPTransport.java:687)
        at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149)
        at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624)
        at java.lang.Thread.run(Thread.java:750)03/09-10:21:09.00246 [RMI TCP Connection(1982585)-192.168.1.110#1343977] sun.rmi.transport.tcp.TCPTransport$ConnectionHandler.run0
FINE: RMI TCP Connection(1982585)-10.16.107.15: terminated with exception:
javax.net.ssl.SSLException: Ciphertext is too large in received TLS record
        at com.rsa.sslj.x.aI.b(Unknown Source)
        at com.rsa.sslj.x.aI.a(Unknown Source)
        at com.rsa.sslj.x.aI.a(Unknown Source)
        at com.rsa.sslj.x.ap.c(Unknown Source)
        at com.rsa.sslj.x.ap.b(Unknown Source)
        at com.rsa.sslj.x.ap.b(Unknown Source)
        at com.rsa.sslj.x.al.read(Unknown Source)
        at java.io.BufferedInputStream.fill(BufferedInputStream.java:246)
        at java.io.BufferedInputStream.read(BufferedInputStream.java:265)
        at java.io.DataInputStream.readInt(DataInputStream.java:387)
        at sun.rmi.transport.tcp.TCPTransport$ConnectionHandler.run0(TCPTransport.java:727)
        at sun.rmi.transport.tcp.TCPTransport$ConnectionHandler.lambda$run$0(TCPTransport.java:688)
        at java.security.AccessController.doPrivileged(Native Method)
        at sun.rmi.transport.tcp.TCPTransport$ConnectionHandler.run(TCPTransport.java:687)
        at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149)
        at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624)
        at java.lang.Thread.run(Thread.java:750)
Caused by: com.rsa.sslj.x.aL: Ciphertext is too large in received TLS record

Dit probleem doet zich voor bij elke Avamar-versie. Engineering onderzoekt dit gedrag.

Alternatieven

1. Gebruik de installeerbare versie van Avamar Administrator, die een geïntegreerde Java-versie (1.8.0_202) bevat.
2. Gebruik de Avamar User Interface (AUI).

Tijdelijke oplossingen

1. Stel de parameter in rmi_over_ssl naar false in het bestand /usr/local/avamar/var/mc/server_data/mcserver.xml en start vervolgens de Management Console Service (MCS).
2. Als het wijzigen van de parameter niet mogelijk is, gebruik dan OpenWebStart (External Link) om het JNLP-bestand te openen.