Angel's idea is very good -- try the signed applet. As for connection, we
don't explicitly use HTTPClient. We use URLConnection:
URLConnection conn = url.openConnection();
if (bytes != null && !checkOnly) {
conn.setRequestProperty("Content-Type",
"application/octet-stream;");
conn.setDoOutput(true);
conn.getOutputStream().write(bytes);
conn.getOutputStream().flush();
} else if (post != null && !checkOnly) {
conn.setRequestProperty("Content-Type",
"application/x-www-form-urlencoded");
conn.setDoOutput(true);
OutputStreamWriter wr = new
OutputStreamWriter(conn.getOutputStream());
wr.write(post);
wr.flush();
}
bis = new BufferedInputStream(conn.getInputStream());
I'm pretty sure there is no way to fix that within Jmol since we only use
URL.openConnection().
From
http://wiki.almworks.com/display/kb/bad_record_mac+error+when+connecting+to+SSLv3-only+server
it would appear that you can fix the problem for the Jmol application. The
applet is going to be a much bigger problem. Those -D switches are
Java-specific. So there might be something like that for the Java browser
plug-in, but I don't know how you set that up.
Certainly Java developers know of this problem; if you are lucky, it's high
on their priority list. But it does sound very unfortunate for you.
Bob
On Wed, Feb 8, 2012 at 9:17 AM, Michael Evans <[email protected]> wrote:
> Hello all—I'm serving a ton of Jmol applets through a wiki that employs
> SSLv3 encryption. These applets suddenly broke, giving a "bad_record_mac"
> error, when we updated to SSLv3 on campus due to a bug (see below).
>
> As a result of this bug, CITES has modified all of our web server
>> configurations to use only SSLv3 encryption. Most all browsers are fine
>> with this change, but it can cause problems with some Java programs that
>> use the HTTPClient Java library for web connections, which I suspect the
>> Jmol applet does.
>>
>
>
>> In order to fix the problem, I believe that you'll need to make a change
>> to the Jmol source code to configure HTTPClient to explicitly use SSLv3.
>> This change was required for a number of Java tools that we run internally
>> at CITES. I wish I had an easier fix to suggest, but I don't have the
>> option to undo the CITES security change. Hopefully you have access to the
>> Jmol source code. If not, you may need to request this change from the Jmol
>> developers.
>
>
> Two questions: (1) does Jmol use the HTTPClient library? (2) can the
> library be configured to explicitly use SSLv3 encryption? If the change is
> straightforward and modifying the release branch is undesirable, I can
> modify my own copy of the source. Thanks for the help!
>
> Cheers, Mike
>
> ---
> Mike Evans
> Organic Chemistry Graduate Student, Moore Group
> University of Illinois, Urbana-Champaign
>
>
> ------------------------------------------------------------------------------
> Keep Your Developer Skills Current with LearnDevNow!
> The most comprehensive online learning library for Microsoft developers
> is just $99.99! Visual Studio, SharePoint, SQL - plus HTML5, CSS3, MVC3,
> Metro Style Apps, more. Free future releases when you subscribe now!
> http://p.sf.net/sfu/learndevnow-d2d
> _______________________________________________
> Jmol-users mailing list
> [email protected]
> https://lists.sourceforge.net/lists/listinfo/jmol-users
>
>
--
Robert M. Hanson
Professor of Chemistry
St. Olaf College
1520 St. Olaf Ave.
Northfield, MN 55057
http://www.stolaf.edu/people/hansonr
phone: 507-786-3107
If nature does not answer first what we want,
it is better to take what answer we get.
-- Josiah Willard Gibbs, Lecture XXX, Monday, February 5, 1900
------------------------------------------------------------------------------
Keep Your Developer Skills Current with LearnDevNow!
The most comprehensive online learning library for Microsoft developers
is just $99.99! Visual Studio, SharePoint, SQL - plus HTML5, CSS3, MVC3,
Metro Style Apps, more. Free future releases when you subscribe now!
http://p.sf.net/sfu/learndevnow-d2d
_______________________________________________
Jmol-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/jmol-users
