WAN Equipment Blocking Cambozola (java applet)?

Forum for questions and support relating to the 1.30.x releases only.
Locked
MindZoner
Posts: 1
Joined: Thu Apr 25, 2019 7:23 pm

WAN Equipment Blocking Cambozola (java applet)?

Post by MindZoner »

Hi and thank you for reading!

I'm having an issue with someone who is using zoneminder and cambozola.jar or cambozola-unsigned.jar from the latest cambozola distribution tar file. The issue is that when accessing ZM with IE through their WAN bridge (they swear just bridging no firewalling) from the internet, the applet appears to be getting blocked. I get "Application Error Class Not Found com.charliemouse.cambozola.Viewer".

Enabling java debug/trace I get:

basic: Added progress listener: sun.plugin.util.ProgressMonitorAdapter@81ab71
basic: Plugin2ClassLoader.addURL parent called for https://xxxxxxxxxxxxxxx.com/cambozola-unsigned.jar
network: Cache entry not found [url: file:/C:/Program%20Files%20(x86)/Java/jre1.8.0_211/lib/ext/sunec.jar, version: null]
network: Cache entry not found [url: https://xxxxxxxxxxxxxxxx.com/cambozola-unsigned.jar, version: null]
network: Connecting https://ispy.ctrust.com/cambozola-unsigned.jar with proxy=DIRECT
network: Connecting http://ispy.ctrust.com:443/ with proxy=DIRECT
network: Cache entry not found [url: file:/C:/Program%20Files%20(x86)/Java/jre1.8.0_211/lib/ext/sunjce_provider.jar, version: null]
javax.net.ssl.SSLProtocolException: handshake alert: unrecognized_name
at sun.security.ssl.ClientHandshaker.handshakeAlert(Unknown Source)
at sun.security.ssl.SSLSocketImpl.recvAlert(Unknown Source)
at sun.security.ssl.SSLSocketImpl.readRecord(Unknown Source)
at sun.security.ssl.SSLSocketImpl.performInitialHandshake(Unknown Source)
at sun.security.ssl.SSLSocketImpl.startHandshake(Unknown Source)
at sun.security.ssl.SSLSocketImpl.startHandshake(Unknown Source)
.......

Note: All security site permissions are set correctly in Java Control Panel and IE's site security exceptions. As mentioned, this happens with signed and unsigned jar files.

Everything works fine over a local lan or doing a SSH tunnel through their equipment to our router and forwarding 443 to ZM from my local PC over the internet, thus bypassing anything they may be doing. So, it looks like their equipment is interfering and unfortunately I don't have access to it.

Any help/direction would be greatly appreciated.
bbunge
Posts: 2934
Joined: Mon Mar 26, 2012 11:40 am
Location: Pennsylvania

Re: WAN Equipment Blocking Cambozola (java applet)?

Post by bbunge »

Switch browser to Firefox. IE is old outdated and a security risk.
Locked