Hi everyone! It has been awhile since I have posted here. Mostly because I have not run into any frustrating issues recently. However this problem really racked my brain until I figured it out. I was troubleshooting an issue where connecting to a site using any of the PowerShell commands to get web data triggered … Continue reading “The underlying connection was closed: An unexpected error occurred on a receive” when running WGET, CURL or Invoke-WebRequest on Windows in Powershell
Category: Uncategorized
Changing java security restriction for “Network connect error” issue in KVM
This article is a godsend. Thank you Xiaoxiaoke!!!
Updated as of 11/2020 – the problematic item under disabledAlgorithms is “anon”, you can just remove that line item instead of removing all the other items in the list.
Additionally, running the jar from browser seems to always fail. There is a trick you can use to go into Java and launch the Jar from the Temporary Files button under the General tab in the Java control panel. You must attempt to run it from the browser first so the Avocent device knows to create your session and give you a config file to run.
I am using KVM to manage the servers in a rack. When launching the session jnlp files with javaws, I saw the “Network connect error” message. This is due to the default java security restriction on SSL/TLS algorithms. Need to change the security configuration file to solve this issue.
Environment: Dell KVM 4322DS
Linux:
1. Open the file /etc/java-7-openjdk/security/java.security
as superuser
2. Comment out the line with the key jdk.tls.disabledAlgorithms
3. Add this line below and save the file:
jdk.tls.disabledAlgorithms=SSLv3, EC, ECDHE, ECDH
Windows:
1. Add the KVM IP into the exception site list
Open Control Panel
-> Java
In Java Control Panel
-> select Security
tab -> Edit Site List
-> Add the KVM IP “http://X.X.X.X
”
Open the file as admin: Windows
-> Program Files (x86)
-> Java
-> jre1.8.0_51
-> lib
-> security
-> java.security
2. Comment out the line with the key jdk.tls.disabledAlgorithms
3. Add this…
View original post 59 more words
QNAP Backup to S3 over HTTPS
If you're like me, and you have a QNAP NAS for your home network and you want to back it up to Amazon's S3, be aware that their default configuration uses HTTP and not HTTPS! You have to manually update the configuration file yourself to use HTTPS. Why it's not an option in the GUI? … Continue reading QNAP Backup to S3 over HTTPS
Setting the System Proxy in Windows
Have you ever tried to run an installer that required internet connectivity to pull down files from an external site -- and it failed? Sometimes you can find an offline installer and in those cases, it is best to use that. Other times, you can't. Why do these stub style installers fail when you are … Continue reading Setting the System Proxy in Windows
Changing CUPS to run on Port 443 with SELinux
When setting up a check printing environment for a client, I ran into an issue where even though I changed the /etc/cupsd.conf file to listen on port 443, the service would not actually start! Why not use the CUPS default port 631? Simple answer - too many of the client's Palo Alto firewalls were configured … Continue reading Changing CUPS to run on Port 443 with SELinux