Java Applet - Slow Launch Times in Internet Free Environment with an Internal CRL Configured

(Doc ID 2366115.1)

Last updated on FEBRUARY 28, 2018

Applies to:

Java SE JDK and JRE - Version 8 to 9
Information in this document applies to any platform.

Symptoms

Applet loading takes a very long time, in an environment with with no internet access and Revocation Checking set to only an internal CRL check, using the Deployment property deployment.security.validation.crl.url  set to a valid URL for an internal CRL  This issue may also cause Oracle Forms applet to fail at launch.

The Plugin trace shows that the Java Plug-in attempts a connection to the external CRL published with the certificate, even though it already connected to the internal CRL location. 

Eample:
System deployment.properties file contains:


It's expected that the internal URL set by the property,  deployment.security.validation.crl.url should override the certificate's CRL location check and avoid an external connection attempt for this purpose.

This issue was verified on Java 8 and Java 10.0.1.  As Java 9 is no longer supported, the bug was not verified as occurring on 9, but is assumed to also exist in all Java 9 releases, 9, 9.0.1 and 9.0.4.

 

Changes

 

Cause

Sign In with your My Oracle Support account

Don't have a My Oracle Support account? Click to get started

My Oracle Support provides customers with access to over a
Million Knowledge Articles and hundreds of Community platforms