[IDV #DNG-681234]: IDV "Failed to validate certificate"

Dear Dr. Weusijana,

We have narrowed this problem down to two possible root causes.

1/ The Java 3D libraries do not work on Java 7 (in which case the security
   exception is a red herring).

2/ Java is not handling certificates consistently between Java 6 and 7. In
   either case, the solution, is to return to Java 6.

   Please let us know if you would like guidance on switching back to Java 6.
   There is also a post on this matter here

   
http://stackoverflow.com/questions/3333553/how-can-i-change-the-java-runtime-version-on-windows-7.

Best Wishes,

Unidata IDV Support


> When I try to install IDV via Java Web Start, I get the following error
> message:
> "Failed to validate certificate.
> The application will not be executed."
> The detailed Java Web Start log is at the bottom of this message.
> IDV closes after clicking OK once this error occurs.
> I'm running Java 7 under Windows 7.
> 
> Thanks,
> Dr. Baba Kofi Weusijana
> Web Computing Specialist - Live Access Server (LAS)
> http://ferret.pmel.noaa.gov/LAS
> UW/JISAO, NOAA/PMEL/TMAP
> http://linkedin.com/in/babakofi
> address@hidden, address@hidden
> --
> The contents of this message are mine personally and do not necessarily
> reflect any position of NOAA and the University of Washington.
> --
> java.security.cert.CertificateException:
> java.security.cert.CertPathValidatorException:
> java.security.InvalidKeyException: Wrong key usage
> at com.sun.deploy.security.TrustDecider.doCheckRevocationStatus(Unknown
> Source)
> at com.sun.deploy.security.TrustDecider.validateChain(Unknown Source)
> at com.sun.deploy.security.TrustDecider.isAllPermissionGranted(Unknown
> Source)
> at com.sun.javaws.security.AppPolicy.grantUnrestrictedAccess(Unknown
> Source)
> at
> com.sun.javaws.security.JNLPSignedResourcesHelper.checkSignedResourcesHelper(Unknown
> Source)
> at
> com.sun.javaws.security.JNLPSignedResourcesHelper.checkSignedResources(Unknown
> Source)
> at com.sun.javaws.Launcher.prepareResources(Unknown Source)
> at com.sun.javaws.Launcher.prepareAllResources(Unknown Source)
> at com.sun.javaws.Launcher.prepareToLaunch(Unknown Source)
> at com.sun.javaws.Launcher.prepareToLaunch(Unknown Source)
> at com.sun.javaws.Launcher.launch(Unknown Source)
> at com.sun.javaws.Main.launchApp(Unknown Source)
> at com.sun.javaws.Main.continueInSecureThread(Unknown Source)
> at com.sun.javaws.Main.access$000(Unknown Source)
> at com.sun.javaws.Main$1.run(Unknown Source)
> at java.lang.Thread.run(Unknown Source)
> Caused by: java.security.cert.CertPathValidatorException:
> java.security.InvalidKeyException: Wrong key usage
> at sun.security.provider.certpath.OCSPResponse.verifyResponse(Unknown
> Source)
> at sun.security.provider.certpath.OCSPResponse.<init>(Unknown Source)
> at sun.security.provider.certpath.OCSP.check(Unknown Source)
> at sun.security.provider.certpath.OCSP.check(Unknown Source)
> at sun.security.provider.certpath.OCSP.check(Unknown Source)
> at com.sun.deploy.security.TrustDecider.doOCSPEEValidation(Unknown Source)
> ... 16 more
> Caused by: java.security.InvalidKeyException: Wrong key usage
> at java.security.Signature.initVerify(Unknown Source)
> ... 22 more
> 
> 


Ticket Details
===================
Ticket ID: DNG-681234
Department: Support IDV
Priority: Normal
Status: Closed