Hallo,
Ich hab ein Problem mit meiner lokalen Mocca Umgebung. Prinzipiell brauche ich sie ja nicht, da zumeist auch die Online BKU zur Verfügung steht, nur bestimmte Banken benötigen diese ja.
Zunächst, die Online BKU funktioniert, die lokale Mocca Umgebung funktioniert weder bei Finanzonline, noch bei der Bank.
Meine Umgebung:
-Ubuntu 12.04 64 Bit
-Oralce JDK 1.7 (build 1.7.0_04-b20)
-Mocca BKU Web Start 1.3.7-r1073
Mein Problem äúßert sich im Browser mit:
Error Code 2001
HTTP/HTTPS-Bindung: DataURL kann nicht aufgelöst werden.
Im Log File findet sich jedoch eine ClassCastException.
Code
09:49:26,042 INFO webapp.BKURequestHandler - Received request. Accept-Language locale: de_DE.
09:49:26,051 INFO binding.HTTPBindingProcessorImpl - XMLRequest=NullOperationRequest. Created new command: at.gv.egiz.bku.slcommands.impl.NullOperationCommandImpl.
09:49:26,052 INFO binding.HTTPBindingProcessorImpl - Starting Bindingprocessor : 9Aun1S37651RkxbrIIcGgG/vGK3l.
09:49:26,052 INFO binding.HTTPBindingProcessorImpl - Entered State: PROCESS, Processing NullOperationRequest.
09:49:26,053 INFO binding.HTTPBindingProcessorImpl - Entered State: DATAURL, DataURL=https://www.banking.co.at:443/appl/ebp/signature/login.html?quicklink=Girokonten&cbssid_=KwWmNnS0ZSTxBqJYIDwkVFlKjLc8RpE7ZcZEs19wYNY-&resource=74_F80&lang=de.
09:49:26,147 INFO pki - pki: PKITrustManager: Sending ocsp request to: http://ocsp.verisign.com
09:49:26,731 INFO pki - pki: PKITrustManager: OCSP response successfully received
09:49:26,732 INFO pki - pki: PKITrustManager: Archiving disabled.
09:49:26,732 WARN pki - pki: PKITrustManager: Nonce not returned in server response
09:49:26,732 INFO pki - pki: PKITrustManager: "NoCheck" extension included in OCSP reponder certificate, thus does'nt perform trust check
09:49:26,738 INFO pki - pki: PKITrustManager: Sending ocsp request to: http://ocsp.verisign.com
09:49:27,040 INFO pki - pki: PKITrustManager: OCSP response successfully received
09:49:27,041 INFO pki - pki: PKITrustManager: Archiving disabled.
09:49:27,041 WARN pki - pki: PKITrustManager: Nonce not returned in server response
09:49:27,042 INFO pki - pki: PKITrustManager: "NoCheck" extension included in OCSP reponder certificate, thus does'nt perform trust check
09:49:27,043 INFO pki - pki: PKITrustManager: Found valid cert chain
09:49:27,059 ERROR binding.HTTPBindingProcessorImpl - Error while data url handling
javax.net.ssl.SSLException: java.lang.ClassCastException: [Ljava.lang.Object; cannot be cast to [Ljava.security.cert.X509Certificate;
at sun.security.ssl.Alerts.getSSLException(Alerts.java:208)
at sun.security.ssl.SSLSocketImpl.fatal(SSLSocketImpl.java:1868)
at sun.security.ssl.SSLSocketImpl.fatal(SSLSocketImpl.java:1826)
at sun.security.ssl.SSLSocketImpl.handleException(SSLSocketImpl.java:1809)
at sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1328)
at sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1305)
at sun.net.www.protocol.https.HttpsClient.afterConnect(HttpsClient.java:515)
at sun.net.www.protocol.https.AbstractDelegateHttpsURLConnection.connect(AbstractDelegateHttpsURLConnection.java:185)
at sun.net.www.protocol.https.HttpsURLConnectionImpl.connect(HttpsURLConnectionImpl.java:153)
at at.gv.egiz.bku.binding.DataUrlConnectionImpl.connect(DataUrlConnectionImpl.java:177)
at at.gv.egiz.bku.binding.HTTPBindingProcessorImpl.handleDataUrl(HTTPBindingProcessorImpl.java:384)
at at.gv.egiz.bku.binding.HTTPBindingProcessorImpl.process(HTTPBindingProcessorImpl.java:694)
at at.gv.egiz.bku.binding.AbstractBindingProcessor.run(AbstractBindingProcessor.java:124)
at java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:471)
at java.util.concurrent.FutureTask$Sync.innerRun(FutureTask.java:334)
at java.util.concurrent.FutureTask.run(FutureTask.java:166)
at at.gv.egiz.bku.binding.BindingProcessorFuture.run(BindingProcessorFuture.java:57)
at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1110)
at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:603)
at java.lang.Thread.run(Thread.java:722)
Caused by: java.lang.ClassCastException: [Ljava.lang.Object; cannot be cast to [Ljava.security.cert.X509Certificate;
at at.gv.egiz.bku.spring.PKITrustManager.getAcceptedIssuers(PKITrustManager.java:151)
at sun.security.ssl.AbstractTrustManagerWrapper.checkAlgorithmConstraints(SSLContextImpl.java:917)
at sun.security.ssl.AbstractTrustManagerWrapper.checkAdditionalTrust(SSLContextImpl.java:863)
at sun.security.ssl.AbstractTrustManagerWrapper.checkServerTrusted(SSLContextImpl.java:805)
at sun.security.ssl.ClientHandshaker.serverCertificate(ClientHandshaker.java:1320)
at sun.security.ssl.ClientHandshaker.processMessage(ClientHandshaker.java:154)
at sun.security.ssl.Handshaker.processLoop(Handshaker.java:868)
at sun.security.ssl.Handshaker.process_record(Handshaker.java:804)
at sun.security.ssl.SSLSocketImpl.readRecord(SSLSocketImpl.java:998)
at sun.security.ssl.SSLSocketImpl.performInitialHandshake(SSLSocketImpl.java:1294)
at sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1321)
... 15 more
09:49:27,060 INFO binding.HTTPBindingProcessorImpl - Entered State: TRANSFORM.
09:49:27,060 INFO binding.HTTPBindingProcessorImpl - Entered State: FINISHED.
Mit Open JDK 6 funktioniert es - warum gibt es die Probleme mit Oracles VM? Der dauerhafte Wechsel zu Open JDK ist für mich keine Alternative.
lg
Stefan