Welcome to our NEW support portal! We are now Quest, with a dedicated support site. Learn more.

Single Sign-On for Java Product Notification

Self Service Tools
Knowledge Base
Product Support
Software Downloads
Technical Documentation
User Forums
Video Tutorials
Support Essentials
Awards and Testimonials
Getting Started
License Agreement
Support Guide
Return
Critical Issue

One Identity Critical Notification -  Single Sign-On for Java

With the latest releases of Java Version 8 Update 121 and above, Oracle has changed the mechanism for handling of X.509 certificates.  This recent change renders Single Sign-On for Java licensing invalid, and thus renders the product in a non-functioning state after Java is updated.

How does this affect Single Sign-On for Java? 

Version 8 update 121 modifies the ASN.1 parsing code for X.509 certificates. Single Sign-On for Java licensing created before August 2015 no longer meets the Java requirements for parsing certificates.  This renders the license to be invalid and thus the product ceases to function. 

Error tracing within Java will display “Error verifying license: Invalid encoding for signature” exception messages, and users will fail to authenticate via Single Sign On.

How does this affect Single Sign-On for Java? 

Version 8 update 121 modifies the ASN.1 parsing code for X.509 certificates. Single Sign-On for Java licensing created before August 2015 no longer meets the Java requirements for parsing certificates.  This renders the license to be invalid and thus the product ceases to function. 

Error tracing within Java will display “Error verifying license: Invalid encoding for signature” exception messages, and users will fail to authenticate via Single Sign On.

Resolution 

Resolution #1:

You can contact licensing and request to have a new license file generated that can be used within the product to resolve this issue.  Licensing can be contacted at https://support.quest.com/contact-us/licensing.

Resolution #2

Manual updating of the certificate within the current license file can be completed by following the instructions outlined in Knowledgebase Article 225993.

Thank You,
One Identity