LO40654: WEB: APPLETS SUPPLIED WITH DOMINO SHOULD BE TIMESTAMPED

APAR status

• Closed as program error.

Error description

• Followed the suggestion that reproduce the problem from
  dev.Still can reproduce
  the problem on the v704_03082009prod build.
  
  Reprodcuing steps:
  1.Move the OS time into the future(e.g 2009.07.01)
  2.Flush the the cache of the JVM.
  3.Load names.nsf with Firefox.
  4.For the first time I login,browser will display the error.
  5.For the second time and after,now the certificate was
  valid,but I still can
  saw the warning displayed like below daigram.
  
  Support reopened SPR.
  
  The applets we currently ship with Domino are digitally signed.
  This signature
  ensures that the applets have not been modified and that they
  are indeed from
  IBM.  However, browsers will display what appears to be an error
  to the user
  when the certificate which was used to sign the applets expires.
   The signature
  is still valid as it was signed when the certificate was valid,
  but the warning
  will alarm customers.
  
  At the time of the previous SPR, there was no publically
  available trusted time
  server.  This was required to 'timestamp' the signing of the
  applet, and would
  prevent this warning.  Now there is a trusted time server
  provided by Verisign
  and we should use that to timestamp our applets so they will
  never 'expire'.
  

Local fix

• Customer ran through technote #1385728 to update applets
  

Problem summary

• This problem was resolved as: Fixed
  

Problem conclusion

• This problem was resolved as: Fixed
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Modules/Macros

• NA
  

Fix information

• Fixed component name

  NOTES/DOMINO 7X

• Fixed component ID

  5724E6200

Applicable component levels

• R702 PSN

     UP