{"id":6436,"date":"2014-01-20T16:31:52","date_gmt":"2014-01-20T15:31:52","guid":{"rendered":"https:\/\/ingmarverheij.com\/?p=6436"},"modified":"2014-07-22T17:54:24","modified_gmt":"2014-07-22T15:54:24","slug":"citrix-netscaler-cannot-load-applet-7u51","status":"publish","type":"post","link":"https:\/\/ingmarverheij.com\/en\/citrix-netscaler-cannot-load-applet-7u51\/","title":{"rendered":"Citrix NetScaler: Cannot load applet (7u51)"},"content":{"rendered":"

\"Java<\/a><\/p>\n

TIP<\/strong>: NetScaler 10.5 uses HTML5 instead or JRE for most configuration features! Hooraaayyy! –\u00a0link<\/a><\/i><\/p>\n

On January 14 Oracle released Java Runtime Environment (JRE) 7 update 51<\/a>. Just like previous updates the raised the security level which could potentially break existing applications. We saw the same when they released 7u45, back then I found a more constructive (but complex) solution to solve a problem where the GUI hanged at \u201cDownloading Applet..<\/a>\u201d<\/p>\n

Citrix updated their NetScaler software to meet the requirements of Oracle on December 3rd (download<\/a>, release notes<\/a>) \u2013 I hope that back then you reverted to a more secure JRE<\/em>. Unfortunately JRE 7u51 gave me again problems, this time the Java Applet could not be loaded.<\/p>\n

<\/p>\n

\"Cannot<\/a><\/p>\n

In the Java Console the following error is shown:<\/p>\n

network: Connecting https:\/\/s-nsint-cl01-nsip:80\/ with proxy=DIRECT\r\nnetwork: Connecting https:\/\/s-nsint-cl01-nsip\/nitro\/v1\/config\/auditnslogpolicy?rawdata=yes&view=detail&pageno=1&pagesize=4500 with cookie \"drep=sys0; st_splitter=350px; is_cisco_platform=0; DEFAULT_LAUNCH_SCREEN_PATH=\"\r\nliveconnect: Security Exception: LiveConnect (JavaScript) blocked due to security settings.<\/pre>\n
 <\/p>\n
Fortunately Oracle did something brilliant (\u2026like we didn\u2019t have this in any browser since 1995\u2026): you can now add sites to an exception site list<\/a>!\u00a0 Where the deployment rule set (as explained in my previous article<\/a>) is intended for system administrators (heck, it\u2019s freaking complex) the exception site list is for end users.<\/p>\n
<\/h1>\n
Add an exception<\/h1>\n
GUI<\/h6>\n
Adding an exception is as easy as 1-2-3:<\/p>\n
    \n
  1. Open the Java Control Panel<\/strong><\/li>\n
  2. In tab Security <\/strong>click on Edit Site List<\/strong><\/li>\n
  3. Click on Add<\/strong> and type in the file:\/\/ <\/strong>or http(s):\/\/ <\/strong>URL<\/li>\n<\/ol>\n
     <\/p>\n
    \"Java<\/a>\"Exception<\/a><\/em><\/p>\n
    Alternatively you can lower the Security Level <\/strong>to Medium<\/strong> but I wouldn\u2019t recommend that!<\/em><\/p>\n
     <\/p>\n
    deployment.config<\/h6>\n
    The exception site list is stored in a plaintext file making it easy to distribute to your users, The file is located in %userprofile%\\Appdata\\LocalLow\\Sun\\Java\\Deployment\\security\\exception.sites.<\/strong><\/p>\n
    https:\/\/s-nsint-cl01-nsip\r\nhttps:\/\/s-nsint-cl02-nsip\r\nhttps:\/\/s-nsdmz-cl01-nsip\r\nhttps:\/\/s-nsdmz-cl02-nsip<\/pre>\n
    Each exception is written in the file on a separate line, so a file containing multiple exceptions could contain the following content.<\/p>\n
     <\/p>\n
     <\/p>\n
     <\/p>\n
    .<\/p>","protected":false},"excerpt":{"rendered":"
    TIP: NetScaler 10.5 uses HTML5 instead or JRE for most configuration features! Hooraaayyy! –\u00a0link On January 14 Oracle released Java Runtime Environment (JRE) 7 update 51. Just like previous updates the raised the security level which could potentially break existing applications. We saw the same when they released 7u45, back then I found a more […]<\/p>\n","protected":false},"author":3,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"site-container-style":"default","site-container-layout":"default","site-sidebar-layout":"default","disable-article-header":"default","disable-site-header":"default","disable-site-footer":"default","disable-content-area-spacing":"default","footnotes":""},"categories":[502],"tags":[642,503,60],"class_list":["post-6436","post","type-post","status-publish","format-standard","hentry","category-netscaler","tag-java-applet","tag-netscaler-2","tag-security"],"_links":{"self":[{"href":"https:\/\/ingmarverheij.com\/en\/wp-json\/wp\/v2\/posts\/6436","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/ingmarverheij.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/ingmarverheij.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/ingmarverheij.com\/en\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/ingmarverheij.com\/en\/wp-json\/wp\/v2\/comments?post=6436"}],"version-history":[{"count":6,"href":"https:\/\/ingmarverheij.com\/en\/wp-json\/wp\/v2\/posts\/6436\/revisions"}],"predecessor-version":[{"id":6896,"href":"https:\/\/ingmarverheij.com\/en\/wp-json\/wp\/v2\/posts\/6436\/revisions\/6896"}],"wp:attachment":[{"href":"https:\/\/ingmarverheij.com\/en\/wp-json\/wp\/v2\/media?parent=6436"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/ingmarverheij.com\/en\/wp-json\/wp\/v2\/categories?post=6436"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/ingmarverheij.com\/en\/wp-json\/wp\/v2\/tags?post=6436"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}