Page 1 of 1

Jfileupload and reverse proxy

Posted: Tue Jul 17, 2012 12:09 pm
by matlem037
Hello

I am facing trouble with jfileupload when it is behind a reverse proxy microsoft isa 2006

We use jfileupload wiht https and so web server certificates.

There are two certificate : one on the reverse proxy and the other on the server itself. The one on the reverse proxy is a valid certificate, issued by keynectis. The second one is a self sgned certificate from the server.

When i try to upload a file i receive the following message :
Envoi démarré ... Envoi échoué : javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: KeyUsage does not allow key encipherment

Does any one already face same problem ?

Thanks for your answers

Mathias

Re: Jfileupload and reverse proxy

Posted: Tue Jul 17, 2012 12:36 pm
by support
Is the self-signed certificated designed for web server SSL?
Maybe you could try WeakSSL add-on to see if it could be used as workaround.

Re: Jfileupload and reverse proxy

Posted: Tue Jul 17, 2012 12:42 pm
by matlem037
Hello

Weakssl is already installed on the server. At the begenning we have problem with the self signed certificate and we installed it .

It works for month and suddenly, about a month ago we started to receive this message. But as far as i know, nothing has changed, nor on the reverse proxy or on the web server

Thanks

Re: Jfileupload and reverse proxy

Posted: Wed Jul 18, 2012 5:19 pm
by support
Any JRE update on client-side?

Re: Jfileupload and reverse proxy

Posted: Thu Jul 19, 2012 8:07 am
by matlem037
Unfortunatly no.... ;-)

Re: Jfileupload and reverse proxy

Posted: Mon Jul 23, 2012 6:24 pm
by support
So what JRE version are you using?

Re: Jfileupload and reverse proxy

Posted: Tue Jul 31, 2012 6:42 am
by matlem037
I am using Java 6 update 22

(build 1.6.0_22-b04)

Thanks

Re: Jfileupload and reverse proxy

Posted: Sun Aug 12, 2012 10:04 am
by support
Well, JRE doesn't like your certificate. Is it really a SSL certificate? A field 'KeyUsage' is missing a value that seems mandatory for JRE.