[prev in list] [next in list] [prev in thread] [next in thread] 

List:       webmin-l
Subject:    Re: [webmin-l] updates on Java SSL Cert?
From:       "Rob Tielen" <rob () opinter ! net>
Date:       2014-02-28 19:13:05
Message-ID: 004f01cf34b9$1dc50900$594f1b00$ () opinter ! net
[Download RAW message or body]

This is a multipart message in MIME format.

[Attachment #2 (multipart/alternative)]
This is a multipart message in MIME format.


Did you already upgrade Java? The exception list is introduced in the latest
version (at the moment they blocked using Java for non secure sites).

 

Van: Brian Bouchard [mailto:bbouchard@llbean.com] 
Verzonden: vrijdag 28 februari 2014 19:39
Aan: Webmin users list
Onderwerp: Re: [webmin-l] updates on Java SSL Cert?

 

Thanks Rob - I have seen that in this list before, but I don't have the
exception list in my java control panel, and a number of other people don't
have it either, so I'm trying to avoid managing this in different ways. I'm
not sure why we don't have the exception list and I'm not sure I can
influence any change that may need to take place to make that happen.
Although, if anyone has ideas about why some people have it and others do
not, I'm happy to see if it is something we can get straightened out.

 

From: Rob Tielen [mailto:rob@opinter.net] 
Sent: Friday, February 28, 2014 1:02 PM
To: 'Webmin users list'
Subject: Re: [webmin-l] updates on Java SSL Cert?

 

Hi Brian,

 

There is no need to set your Java security settings to medium after updating
to the latest version of Java.

With Java, a Java control panel is installed. If you open this, on the
security tab, you can add exceptions. 

If you add the full URL of your Webmin / usermin server, including the
portnumber (so https://yourserver:1000) to this exception site list, you can
use the java applet without changing the security level to medium.

I hope this works for you too.

 

Van: Brian Bouchard [mailto:bbouchard@llbean.com] 
Verzonden: vrijdag 28 februari 2014 18:10
Aan: Webmin users list
Onderwerp: [webmin-l] updates on Java SSL Cert?

 

Hi Jamie - 

 

I hate to be a pain, because I know you've been working on this, but I'm
wondering if you can provide an update on the SSL cert issue affecting java
applets within Webmin.  Our Internal Security team has told us this is no
longer an acceptable tool for us to use at this point because of the issue
which has required us to either tell users not to accept the latest java
updates, or set their Java security settings down to Medium.  Neither
solution is acceptable to Security.

 

I'd hate to have to replace Webmin/Usermin at this point because it has been
very good to us.  but I may have no choice if a resolution isn't in the near
future.

 


[Attachment #5 (text/html)]

<html xmlns:v="urn:schemas-microsoft-com:vml" \
xmlns:o="urn:schemas-microsoft-com:office:office" \
xmlns:w="urn:schemas-microsoft-com:office:word" \
xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" \
xmlns="http://www.w3.org/TR/REC-html40"><head><META HTTP-EQUIV="Content-Type" \
CONTENT="text/html; charset=us-ascii"><meta name=Generator content="Microsoft Word 14 \
(filtered medium)"><style><!-- /* Font Definitions */
@font-face
	{font-family:"Cambria Math";
	panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
	{font-family:Calibri;
	panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
	{font-family:Tahoma;
	panose-1:2 11 6 4 3 5 4 4 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
	{margin:0cm;
	margin-bottom:.0001pt;
	font-size:11.0pt;
	font-family:"Calibri","sans-serif";}
a:link, span.MsoHyperlink
	{mso-style-priority:99;
	color:blue;
	text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
	{mso-style-priority:99;
	color:purple;
	text-decoration:underline;}
p.MsoAcetate, li.MsoAcetate, div.MsoAcetate
	{mso-style-priority:99;
	mso-style-link:"Ballontekst Char";
	margin:0cm;
	margin-bottom:.0001pt;
	font-size:8.0pt;
	font-family:"Tahoma","sans-serif";}
span.BallontekstChar
	{mso-style-name:"Ballontekst Char";
	mso-style-priority:99;
	mso-style-link:Ballontekst;
	font-family:"Tahoma","sans-serif";}
span.E-mailStijl19
	{mso-style-type:personal;
	font-family:"Calibri","sans-serif";
	color:windowtext;}
span.E-mailStijl20
	{mso-style-type:personal;
	font-family:"Calibri","sans-serif";
	color:#1F497D;}
p.BalloonText, li.BalloonText, div.BalloonText
	{mso-style-name:"Balloon Text";
	mso-style-link:"Balloon Text Char";
	margin:0cm;
	margin-bottom:.0001pt;
	font-size:11.0pt;
	font-family:"Calibri","sans-serif";}
span.BalloonTextChar
	{mso-style-name:"Balloon Text Char";
	mso-style-priority:99;
	mso-style-link:"Balloon Text";
	font-family:"Tahoma","sans-serif";}
span.E-mailStijl23
	{mso-style-type:personal;
	font-family:"Calibri","sans-serif";
	color:#1F497D;}
span.E-mailStijl24
	{mso-style-type:personal-reply;
	font-family:"Calibri","sans-serif";
	color:#1F497D;}
.MsoChpDefault
	{mso-style-type:export-only;
	font-size:10.0pt;}
@page WordSection1
	{size:612.0pt 792.0pt;
	margin:72.0pt 72.0pt 72.0pt 72.0pt;}
div.WordSection1
	{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]--></head><body lang=NL link=blue vlink=purple><div \
class=WordSection1><p class=MsoNormal><span lang=EN-US style='color:#1F497D'>Did you \
already upgrade Java? The exception list is introduced in the latest version (at the \
moment they blocked using Java for non secure sites).<o:p></o:p></span></p><p \
class=MsoNormal><span lang=EN-US \
style='color:#1F497D'><o:p>&nbsp;</o:p></span></p><div><div \
style='border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0cm 0cm 0cm'><p \
class=MsoNormal><b><span \
style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'>Van:</span></b><span \
style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'> Brian Bouchard \
[mailto:bbouchard@llbean.com] <br><b>Verzonden:</b> vrijdag 28 februari 2014 \
19:39<br><b>Aan:</b> Webmin users list<br><b>Onderwerp:</b> Re: [webmin-l] updates on \
Java SSL Cert?<o:p></o:p></span></p></div></div><p \
class=MsoNormal><o:p>&nbsp;</o:p></p><p class=MsoNormal><span lang=EN-US \
style='color:#1F497D'>Thanks Rob &#8211; I have seen that in this list before, but I \
don&#8217;t have the exception list in my java control panel, and a number of other \
people don&#8217;t have it either, so I&#8217;m trying to avoid managing this in \
different ways. I&#8217;m not sure why we don&#8217;t have the exception list and \
I&#8217;m not sure I can influence any change that may need to take place to make \
that happen. Although, if anyone has ideas about why some people have it and others \
do not, I&#8217;m happy to see if it is something we can get straightened \
out.<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US \
style='color:#1F497D'><o:p>&nbsp;</o:p></span></p><div><div \
style='border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0cm 0cm 0cm'><p \
class=MsoNormal><b><span lang=EN-US \
style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'>From:</span></b><span \
lang=EN-US style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'> Rob Tielen [<a \
href="mailto:rob@opinter.net">mailto:rob@opinter.net</a>] <br><b>Sent:</b> Friday, \
February 28, 2014 1:02 PM<br><b>To:</b> 'Webmin users list'<br><b>Subject:</b> Re: \
[webmin-l] updates on Java SSL Cert?<o:p></o:p></span></p></div></div><p \
class=MsoNormal><span lang=EN-US><o:p>&nbsp;</o:p></span></p><p class=MsoNormal><span \
style='color:#1F497D'>Hi Brian,<o:p></o:p></span></p><p class=MsoNormal><span \
style='color:#1F497D'><o:p>&nbsp;</o:p></span></p><p class=MsoNormal><span lang=EN-US \
style='color:#1F497D'>There is no need to set your Java security settings to medium \
after updating to the latest version of Java.<o:p></o:p></span></p><p \
class=MsoNormal><span lang=EN-US style='color:#1F497D'>With Java, a Java control \
panel is installed. If you open this, on the security tab, you can add exceptions. \
<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='color:#1F497D'>If \
you add the full URL of your Webmin / usermin server, including the portnumber (so <a \
href="https://yourserver:1000">https://yourserver:1000</a>) to this exception site \
list, you can use the java applet without changing the security level to \
medium.<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US \
style='color:#1F497D'>I hope this works for you too.<o:p></o:p></span></p><p \
class=MsoNormal><span lang=EN-US \
style='color:#1F497D'><o:p>&nbsp;</o:p></span></p><div><div \
style='border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0cm 0cm 0cm'><p \
class=MsoNormal><b><span \
style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'>Van:</span></b><span \
style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'> Brian Bouchard [<a \
href="mailto:bbouchard@llbean.com">mailto:bbouchard@llbean.com</a>] \
<br><b>Verzonden:</b> vrijdag 28 februari 2014 18:10<br><b>Aan:</b> Webmin users \
list<br><b>Onderwerp:</b> [webmin-l] updates on Java SSL \
Cert?<o:p></o:p></span></p></div></div><p class=MsoNormal><o:p>&nbsp;</o:p></p><p \
class=MsoNormal><span lang=EN-US>Hi Jamie &#8211; <o:p></o:p></span></p><p \
class=MsoNormal><span lang=EN-US><o:p>&nbsp;</o:p></span></p><p class=MsoNormal><span \
lang=EN-US>I hate to be a pain, because I know you&#8217;ve been working on this, but \
I&#8217;m wondering if you can provide an update on the SSL cert issue affecting java \
applets within Webmin.&nbsp; Our Internal Security team has told us this is no longer \
an acceptable tool for us to use at this point because of the issue which has \
required us to either tell users not to accept the latest java updates, or set their \
Java security settings down to Medium. &nbsp;Neither solution is acceptable to \
Security.<o:p></o:p></span></p><p class=MsoNormal><span \
lang=EN-US><o:p>&nbsp;</o:p></span></p><p class=MsoNormal><span lang=EN-US>I&#8217;d \
hate to have to replace Webmin/Usermin at this point because it has been very good to \
us&#8230;&nbsp; but I may have no choice if a resolution isn&#8217;t in the near \
future.<o:p></o:p></span></p><p class=MsoNormal><span \
lang=EN-US><o:p>&nbsp;</o:p></span></p></div></body></html>



------------------------------------------------------------------------------
Flow-based real-time traffic analytics software. Cisco certified tool.
Monitor traffic, SLAs, QoS, Medianet, WAAS etc. with NetFlow Analyzer
Customize your own dashboards, set traffic alerts and generate reports.
Network behavioral analysis & security monitoring. All-in-one tool.
http://pubads.g.doubleclick.net/gampad/clk?id=126839071&iu=/4140/ostg.clktrk

-
Forwarded by the Webmin mailing list at webadmin-list@lists.sourceforge.net
To remove yourself from this list, go to
http://lists.sourceforge.net/lists/listinfo/webadmin-list


[prev in list] [next in list] [prev in thread] [next in thread] 

Configure | About | News | Add a list | Sponsored by KoreLogic