2013-06-24 104 views
2

由於兩種不同的身份驗證方法,我有Web服務器(IBM Domino),即使用2個主機名。兩者都提供相同的應用程序,其中包含一個Java applet,可將圖像上載到servlet。Applet請求crossdomain.xml

問題是,即使響應返回到同一臺服務器,它也需要一個主機名crossdomain.xml。下面是來自Java控制檯的日誌

security: Certificate has been verified with Internet Explorer ROOT certificates successfully 
security: Valid certificate from HTTPS server 
security: Adding certificate in Deployment session certificate store 
security: Added certificate in Deployment session certificate store 
security: Saving certificates in Deployment session certificate store 
security: Saved certificates in Deployment session certificate store 
network: Connecting https://v8lnprox1-sso.pradny.com/lwf/hd.nsf/test.jar with cookie "SessionID=DICYCB6XKY; LtpaToken=AAECAzUxQzgzMjJDNTFDOTgzQUNDTj1Ob3RlcyBEZXNpZ24vTz1QTUIvQz1DWi2qxrRR+Cf/ZLIyNcL5C2MYFyO/" 
network: ResponseCode for https://v8lnprox1-sso.pradny.com/lwf/hd.nsf/test.jar : 304 
network: Encoding for https://v8lnprox1-sso.pradny.com/lwf/hd.nsf/test.jar : null 
network: Disconnect connection to https://v8lnprox1-sso.pradny.com/lwf/hd.nsf/test.jar 
cache: Reading Signers from 4633 https://v8lnprox1-sso.pradny.com/lwf/hd.nsf/test.jar | C:\Documents and Settings\exmartin\Data aplikací\Sun\Java\Deployment\cache\6.0\32\4961f60-2fd2a536.idx 
cache: Read manifest for https://v8lnprox1-sso.pradny.com/lwf/hd.nsf/test.jar: read=241 full=241 
basic: Plugin2ClassLoader.getPermissions CeilingPolicy allPerms 
security: Loading Root CA certificates from C:\Program Files\Java\jre6\lib\security\cacerts 
security: Loaded Root CA certificates from C:\Program Files\Java\jre6\lib\security\cacerts 
security: Loading Deployment certificates from C:\Documents and Settings\exmartin\Data aplikací\Sun\Java\Deployment\security\trusted.certs 
security: Loaded Deployment certificates from C:\Documents and Settings\exmartin\Data aplikací\Sun\Java\Deployment\security\trusted.certs 
security: Loading certificates from Deployment session certificate store 
security: Loaded certificates from Deployment session certificate store 
security: Loading certificates from Internet Explorer ROOT certificate store 
security: Loaded certificates from Internet Explorer ROOT certificate store 
security: Loading certificates from Internet Explorer TrustedPublisher certificate store 
security: Loaded certificates from Internet Explorer TrustedPublisher certificate store 
security: Validate the certificate chain using CertPath API 
security: Obtain certificate collection in Root CA certificate store 
security: Obtain certificate collection in Root CA certificate store 
security: No timestamping info available 
security: Found jurisdiction list file 
security: Start checking trusted extension for this certificate 
security: Start comparing to jurisdiction list with this certificate 
security: The CRL support is disabled 
security: The OCSP support is disabled 
security: This OCSP End Entity validation is disabled 
security: Checking if certificate is in Deployment denied certificate store 
security: Checking if certificate is in Deployment permanent certificate store 
basic: Applet loaded.s 
basic: Applet resized and added to parent container 
basic: PERF: AppletExecutionRunnable - applet.init() BEGIN ; jvmLaunch dt 263251 us, pluginInit dt 4145344 us, TotalTime: 4408595 us 
basic: Applet initialized 
basic: Removed progress listener: [email protected] 
basic: Applet made visible 
basic: Starting applet 
basic: completed perf rollup 
basic: Applet started 
basic: Told clients applet is started 
SERVERhttp://v8lnprox1-sso.pradny.com/servlet/[email protected]0eyr0f4mw4cg&category=imgPozadavek&userName=CN%3DNotes%20Design/O%3DPMB/C%3DCZ 
class java.io.InputStream 
1 
2 
3 
4 
5 
network: Connecting http://v8lnprox1-sso.pradny.com/servlet/[email protected]0eyr0f4mw4cg&category=imgPozadavek&userName=CN%3DNotes%20Design/O%3DXXX/C%3DCZ with proxy=DIRECT 
network: Cache entry not found [url: http://172.27.40.228/crossdomain.xml, version: null] 
network: Connecting http://172.27.40.228/crossdomain.xml with proxy=DIRECT 
network: Connecting http://172.27.40.228:80/ with proxy=DIRECT 

如果我添加crossdomain.xml文件,它工作正常,但我不認爲它應該是必需的。

對於這兩個主機名,我們都會將數據發佈到http地址,即使應用程序通過https工作時也是如此,因爲我們在以前遇到了applet和https問題。

剝離下來,從第二版主機工作正常withou的crossdomain.xml

network: Connecting https://v8lnprox1.pradny.com/lwf/hd.nsf/test.jar with cookie "SessionID=DICYID8LJR; DomAuthSessId=DC524501EBA6503AB01FC5C61D8DA887" 
network: CleanupThread used 3 us 
network: Downloading resource: https://v8lnprox1.pradny.com/lwf/hd.nsf/test.jar 
    Content-Length: 7 630 
    Content-Encoding: null 
network: Wrote URL https://v8lnprox1.pradny.com/lwf/hd.nsf/test.jar to File C:\Documents and Settings\exmartin\Data aplikací\Sun\Java\Deployment\cache\6.0\19\537eb3d3-1edda6c2-temp 


SERVERhttp://v8lnprox1.pradny.com/servlet/[email protected]0eyr0f4mw4cg&category=imgPozadavek&userName=CN%3DNotes%20Design/O%3DPMB/C%3DCZ 
class java.io.InputStream 
1 
2 
3 
4 
5 
network: Connecting http://v8lnprox1.pradny.com/servlet/[email protected]0eyr0f4mw4cg&category=imgPozadavek&userName=CN%3DNotes%20Design/O%3DXXX/C%3DCZ with proxy=DIRECT 
network: Connecting http://v8lnprox1.pradny.com:80/ with proxy=DIRECT 
6 
network: Connecting http://v8lnprox1.pradny.com/servlet/[email protected]0eyr0f4mw4cg&category=imgPozadavek&userName=CN%3DNotes%20Design/O%3DXXX/C%3DCZ with cookie "SessionID=DICYID8LJR; DomAuthSessId=DC524501EBA6503AB01FC5C61D8DA887" 
7 
Nacteno bytu: 527412 

任何想法可能會導致不同? (關於Java 1.6u34測試)

+0

*「有什麼想法可以導致差異?」*甲骨文的決定? –

回答

0

release notes for java 6 update 22說:

CVE-2010-3560

爲CVE-2010-3560的修復可能導致某些Java小程序在 新的Java運行如果插件被嵌入到網頁 (其中包含)中,則該插件停止工作,該JavaScript會調用Java以執行 需要網絡安全權限的操作。如果 解析原始網頁URL主機名稱的 名稱服務做爲 不作爲反向地址查找的結果返回匹配的名稱,則這些小程序可能會在網絡安全異常 的某些情況下失敗並返回 [...]

難道插件確實爲原服務器的IP地址進行反向查找,發現了一個不同的主機名,因此決定它是一個跨域請求?

+0

可能會出現這種情況。我無法再訪問這個環境,所以我無法進一步調查。 –