Troubleshooting
Problem
java.net.UnknownHostException ocsp.verisign.com exceptions are generated when opening applets such as the Process Designer, Process Configuration Console and Process Administrator and there is no Internet access
Symptom
In the java console trace, an exception similar to the following is generated
security: Revocation Status Unknown
com.sun.deploy.security.RevocationChecker$StatusUnknownException: java.net.UnknownHostException: ocsp.verisign.com
at com.sun.deploy.security.RevocationChecker.checkOCSP(Unknown Source)
at com.sun.deploy.security.RevocationChecker.check(Unknown Source)
at com.sun.deploy.security.TrustDecider.checkRevocationStatus(Unknown Source)
at com.sun.deploy.security.TrustDecider.getValidationState(Unknown Source)
at com.sun.deploy.security.TrustDecider.validateChain(Unknown Source)
....
Cause
In the JRE 1.7 runtime environment, there is a new security feature called certificate revocation check. This requires access to the ocsp.verisign.com server on the Internet.
Environment
CPE 5.2, JRE 1.7.0_40
Diagnosing The Problem
Enable java console tracing in the Java Control Panel. In Windows, the Java Control Panel can be accessed by clicking on the Java icon in the Windows Control Panel. For example:
Resolving The Problem
Disable certificate revocation checking on the Advanced tab in the Java Control Panel.
Note: On the Advanced tab, make sure that Mixed code security verification is also disabled as shown on the screenshot above. That is another recent java run-time security feature that can cause unexpected behavior in IBM Case Foundation software.
Was this topic helpful?
Document Information
Modified date:
17 June 2018
UID
swg21652006