Author Topic: ODLineDataViewer2 weak signature algorithm MD5withRSA  (Read 4698 times)

jneetz

  • Jr. Member
  • **
  • Posts: 38
    • View Profile
ODLineDataViewer2 weak signature algorithm MD5withRSA
« on: October 18, 2017, 10:09:19 AM »
ODWEK 9.0
Content Navigator 3.0.1
CMOD 10.1
JAVA 1.8.0_151 ( On User PC
WebSphere 9.0.0.0
Windows 2012 Server

Let me know if you need any other information

Am I out of sync with something ?  Security setup in IE or JAVA ? Any ideas ?

The users cannot view Line Data reports with the applet ( work around is to download and view on desktop )

Receiving error:
ODLineDataViewer2.jar weak signature algorithm MD5withRSA

I included couple screenshot attachements



jsquizz

  • Global Moderator
  • Hero Member
  • *****
  • Posts: 576
    • View Profile
Re: ODLineDataViewer2 weak signature algorithm MD5withRSA
« Reply #1 on: October 18, 2017, 11:45:06 AM »
can you try upgrading to the latest fixpack of 10.1 ? I believe it now has an HTML 5 line data viewer
#CMOD #DB2 #AFP2PDF #TSM #AIX #RHEL #AWS #AZURE #GCP #EVERYTHING

jneetz

  • Jr. Member
  • **
  • Posts: 38
    • View Profile
Re: ODLineDataViewer2 weak signature algorithm MD5withRSA
« Reply #2 on: October 18, 2017, 12:03:55 PM »
Sure will ... Downloading now ... Maybe later today or tomorrow before I reply back with results.

Thanks for the suggestion


jneetz

  • Jr. Member
  • **
  • Posts: 38
    • View Profile
Re: ODLineDataViewer2 weak signature algorithm MD5withRSA
« Reply #3 on: October 18, 2017, 07:51:19 PM »
I was already on CMOD 10.1.0.1 which I believe is the latest fixpack

When trying to use the ODLineDataViewer2.jar from there I the receive the attached error.

Is the something with Content Navigator ?

Any security settings need to be set anywhere JAVA Console ? WebSpher ? CN ?

Thanks .. been working on this for days so will take any suggestion


Justin Derrick

  • IBM Content Manager OnDemand Consultant
  • Administrator
  • Hero Member
  • *****
  • Posts: 2229
  • CMOD Guru for hire...
    • View Profile
    • Tenacious Consulting
Re: ODLineDataViewer2 weak signature algorithm MD5withRSA
« Reply #4 on: October 19, 2017, 01:54:06 PM »
Sounds like your browser is complaining that the digital signature is cryptographically weak. 

Your only choice is to upgrade to a newer viewer.

-JD.
IBM CMOD Professional Services: http://TenaciousConsulting.com
Call:  +1-866-533-7742  or  eMail:  jd@justinderrick.com
IBM CMOD Wiki:  https://CMOD.wiki/
FREE IBM CMOD Education & Webinars:  https://CMOD.Training/

Interests: #AIX #Linux #Multiplatforms #DB2 #TSM #SP #Performance #Security #Audits #Customizing #Availability #HA #DR

Ed_Arnold

  • Hero Member
  • *****
  • Posts: 1199
    • View Profile
Re: ODLineDataViewer2 weak signature algorithm MD5withRSA
« Reply #5 on: October 19, 2017, 03:26:04 PM »
Just curious, what is the fixpack level of your ODWEK 9.0?

Ed
#zOS #ODF

jneetz

  • Jr. Member
  • **
  • Posts: 38
    • View Profile
Re: ODLineDataViewer2 weak signature algorithm MD5withRSA
« Reply #6 on: October 20, 2017, 12:02:47 PM »
Do you mean ODLineDataViewer to upgrade ?

ODWEK I only installed:   IBM_CMOD_WEK_9.0_WIN_ML

I search for Fixpack and it says that it comes with CMOD now but can't find it

If you can point me to URL of a fixpack that be great ?

Thanks

jneetz

  • Jr. Member
  • **
  • Posts: 38
    • View Profile
Re: ODLineDataViewer2 weak signature algorithm MD5withRSA
« Reply #7 on: October 20, 2017, 12:12:00 PM »
oh and as mention above when I upgrade the ODLineDataViewer with what comes in CMOD 10.1.01
It recieved the mid-tier error shown in one of my screenshots attached

Justin Derrick

  • IBM Content Manager OnDemand Consultant
  • Administrator
  • Hero Member
  • *****
  • Posts: 2229
  • CMOD Guru for hire...
    • View Profile
    • Tenacious Consulting
Re: ODLineDataViewer2 weak signature algorithm MD5withRSA
« Reply #8 on: October 22, 2017, 07:53:37 AM »
This sounds like a PMR then -- it might be that someone is signing binaries with deprecated methods, and needs to update their software and/or methods.

-JD.
IBM CMOD Professional Services: http://TenaciousConsulting.com
Call:  +1-866-533-7742  or  eMail:  jd@justinderrick.com
IBM CMOD Wiki:  https://CMOD.wiki/
FREE IBM CMOD Education & Webinars:  https://CMOD.Training/

Interests: #AIX #Linux #Multiplatforms #DB2 #TSM #SP #Performance #Security #Audits #Customizing #Availability #HA #DR

jneetz

  • Jr. Member
  • **
  • Posts: 38
    • View Profile
Re: ODLineDataViewer2 weak signature algorithm MD5withRSA
« Reply #9 on: October 26, 2017, 02:20:09 PM »
FYI .. Got this working  :)

Combination of having Navigator point to the updated ODWEK 10.1 that now comes with CMOD

Also actually my main issue
    , had to setup the windows PATH variable to point to the CMOD DLLs instead of the old ODWEK 9.0 DLLs

Weak Signature error came from not using ODWEK 10.1
    However other errors occurred until I setup the PATH correctly


Thanks

Justin Derrick

  • IBM Content Manager OnDemand Consultant
  • Administrator
  • Hero Member
  • *****
  • Posts: 2229
  • CMOD Guru for hire...
    • View Profile
    • Tenacious Consulting
Re: ODLineDataViewer2 weak signature algorithm MD5withRSA
« Reply #10 on: October 26, 2017, 05:13:17 PM »
So you still had the old version of ODWEK installed?

-JD.
IBM CMOD Professional Services: http://TenaciousConsulting.com
Call:  +1-866-533-7742  or  eMail:  jd@justinderrick.com
IBM CMOD Wiki:  https://CMOD.wiki/
FREE IBM CMOD Education & Webinars:  https://CMOD.Training/

Interests: #AIX #Linux #Multiplatforms #DB2 #TSM #SP #Performance #Security #Audits #Customizing #Availability #HA #DR

Nolan

  • Full Member
  • ***
  • Posts: 152
    • View Profile
Re: ODLineDataViewer2 weak signature algorithm MD5withRSA
« Reply #11 on: December 11, 2017, 01:24:29 PM »
Interesting, one of our servers also was caught using an old outdated ODLineDataViewer2 servlet.   We were running V8.5.0.9 on the web server we still can not figure out how it broke on Oct 31st for most of our users.  We can only guess that the JAVA cache was cycled or emptied and caused the applet to be pulled from the server again...but it is only a theory.

We have since patched up to V9.5.0.10 and all is well.


 
J.

#zOS #AIX #Windows #Multiplatforms
#DB2 #TSM #ODF #zODF #ODWEK
#CapacityPlanning #AFP #ReportDistribution
#Finance #ICN