Join the community today
Become a Member

IPMI KVM Java Applet April 2017 Security Update Breaks Usage

Discussion in 'Dedicated server hosting' started by eva2000, Apr 20, 2017.

Tags:
  1. eva2000

    eva2000 Administrator Staff Member

    50,906
    11,799
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +18,256
    Local Time:
    10:57 AM
    Nginx 1.25.x
    MariaDB 10.x
    Alot of folks using dedicated servers have out of band console access via IPMI KVM Java Applets. Unfortunately or fortunately it seems recent Java update has enforced a new security policy Oracle JRE will no longer trust MD5-signed code by default (Java Platform Group, Product Management blog).

    With OVH IPMI Java Applet after my Java update, i can't launch the OVH IPMI Java Applet and get the following message
    upload_2017-4-20_7-14-32.png

     
    Last edited: Apr 21, 2017
  2. eva2000

    eva2000 Administrator Staff Member

    50,906
    11,799
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +18,256
    Local Time:
    10:57 AM
    Nginx 1.25.x
    MariaDB 10.x
    Looks like until OVH fixes it on their end, I'd need to downgrade my Java version using older version at Java Archive Downloads - Java SE 8.

    I believe this is correct one Java Archive Downloads - Java SE 8 so uninstall Java 8 Update 131 and install Java 8 Update 121

    when launching OVH IPMI Java Applet, windows prompts for update which you'd have to ignore

    upload_2017-4-21_5-48-34.png
     
  3. pamamolf

    pamamolf Well-Known Member

    4,028
    421
    83
    May 31, 2014
    Ratings:
    +817
    Local Time:
    2:57 AM
    Nginx-1.17.x
    MariaDB 10.3.x
    :-(

    They should fix it asap :)
     
  4. eva2000

    eva2000 Administrator Staff Member

    50,906
    11,799
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +18,256
    Local Time:
    10:57 AM
    Nginx 1.25.x
    MariaDB 10.x
    Yeah OVH support so far said they tested their IPMI on server end and have no problems and closed the ticket. So had to remind them it's Java update end issue.

    Also tweeted to OVH relevant parties I hope George Liu on Twitter. This will break alot of web hosts' provided IPMI Java Applets !