SEC_ERROR_BAD_SIGNATURE error using Firefox to access Vibe

  • Document ID:7024309
  • Creation Date:03-Dec-2019
  • Modified Date:03-Dec-2019
    • Micro Focus Products:
      Vibe

Environment

Vibe 4.0.6

Situation

When using Firefox to access Vibe, after a small period of time an error occurs "SEC_ERROR_BAD_SIGNATURE" and it is not possible to access Vibe.  A restart of the Vibe service clears the error for a short period of time.

Resolution

Edit /opt/novell/teaming/jre/conf/security/java.security file and identify the following block of configuration.

jdk.tls.disabledAlgorithms=SSLv3, RC4, DES, MD5withRSA, DH keySize < 1024, \EC keySize < 224, 3DES_EDE_CBC, anon, NULL

Append RSASSA-PSS to the setting.

The resulting lines should look like this.

jdk.tls.disabledAlgorithms=SSLv3, RC4, DES, MD5withRSA, DH keySize < 1024, \EC keySize < 224, 3DES_EDE_CBC, anon, NULL, RSASSA-PSS

Restart Vibe

Cause

The problem is caused by a defect in JDK 11.