Jump to content

Stony

Members
  • Content Count

    1
  • Joined

  • Last visited

Everything posted by Stony

  1. Hi, I can see the exact same problem on my AVD744. After googling without any results I digged a bit deeper and figured out that there are multiple problems that prevent one from using the java plugin: 1. The end date of the certificate After extracting I checked the start and end dates of the certificate, which are: Validity Not Before: Jun 4 00:00:00 2010 GMT Not After : Jun 3 23:59:59 2012 GMT As we can see it is already invalid since June, 4th 2012 - which means: for over a year now. 2. The cert's revocation date and the latest Java updates After Java update 20, Oracle enabled the OCSP feature by default, which let's Java lookup the revocation state of the cert via the OCSP service on Verisign's homepage. I did that too and got the following information: certs.pem: revoked This Update: Jul 27 16:16:11 2013 GMT Next Update: Oct 18 21:00:52 2013 GMT Reason: affiliationChanged Revocation Time: Jun 4 10:40:07 2010 GMT So this means that the cert has been revoked on June 4th, 2010 because the affiliation of the cert changed. And that everybody has been using an invalid cert since that day. After the Java update enabled the ocsp lookup it went invalid completely as the revocation of the cert became finally known to Java itself... Judging on the fact that the cert has been revoked in 2010 and that AVTech knows about this since 2010 AND that nothing has happened so far, I don't assume they're going to offer a new version with a corrected certificate. Fixing the problem would involve patching the firmware to use a different or no certificate at all. If anybody has some info on the format of the firmware files I may be able todo it. KR, S.
×